Weekly News - Axios npm packages backdoored in supply chain attack

Critical Fortinet FortiClient EMS bug under active attack - View in browser  Weekly cybersecurity news April 6, 2026 Most AI projects stall. Robinhood’s didn’t. On April 23, hear their journey of building AI into alert triage and investigations, live from their team. Latest articles: Cisco IMC auth bypass vulnerability allows attackers to alter user passwords (CVE-2026-20093) Windows Security app gets Secure Boot certificate status indicators as 2026 expiration approaches Claude Code source leak exploited to spread malware Trivy supply chain attack enabled European Commission cloud breach Microsoft releases open-source toolkit to govern autonomous AI agents Which messaging app takes the most limited approach to permissions on Android? Click, wait, repeat: Digital trust erodes one login at a time New infosec products of the month: March 2026 Why risk alone doesn’t get you to yes AWS, Wasabi, Cloudflare, and Backblaze go head-to-head in new cloud storage test Software supply chain hacks trigger wave of intrusions, data theft OpenSSH 10.3 patches five security bugs and drops legacy rekeying support DarkSword exploit forces Apple to loosen its patching policy TrueConf zero-day vulnerability exploited to target government networks Trust, friction, and ROI: A CISO’s take on making security work for the business Tracking drones with the 5G tower down the street Microsoft adds high-volume email sending to Exchange Online Cybercriminals take aim at Hasbro, weeks of recovery ahead North Korean hackers linked to Axios npm supply chain compromise CIS Benchmarks March 2026 Update Google fixes Chrome zero-day with in-the-wild exploit (CVE-2026-5281) Mimecast makes enterprise email security deployable in minutes Financial groups lay out a plan to fight AI identity attacks Malware detectors trained on one dataset often stumble on another Crypto industry may be running out of time to prepare for quantum attacks Amazon sends AI agents into pen testing and DevOps EvilTokens ramps up device code phishing targeting Microsoft 365 users Hacker stripped more than $50 million from Uranium crypto exchange, spent it on trading cards Download: 2026 SANS Identity Threats & Defenses Survey Windows 11 gets a rebuilt console engine with regex search, Sixel images and a 10x speed boost Apple counters ClickFix attacks with macOS Terminal warning Axios npm packages backdoored in supply chain attack Android developers just got a new verification layer Intel puts its data center performance knowledge on GitHub Rspamd 4.0.0 ships memory savings, a new scan protocol, and a required migration step Google Drive now detects ransomware and helps restore affected files Why I’m done calling humans the weakest link Hottest cybersecurity open-source tools of the month: March 2026 Cybersecurity jobs available right now: March 31, 2026 RSAC 2026 is back, and the certificate automation gap is impossible to ignore TeamPCP’s attack spree slows, but threat escalates with ransomware pivot Critical Fortinet FortiClient EMS bug under active attack (CVE-2026-21643) Second data breach at European Commission this year leaves open questions over resilience Android 17 tweaks location privacy with one-time access SystemRescue 13 updates its kernel to Linux 6.18 LTS, adds new recovery tools ShipSec Studio brings open-source workflow orchestration to security operations Breaking out: Can AI agents escape their sandboxes? Don’t count on government guidance after a smart home breach Videos: Your customer passed authentication. So why are they sending money to a scammer? The art of making technical risk make sense to executives Industry news: APERION releases SmartFlow SDK for secure, on-prem AI governance without cloud reliance New Red Hat subscription simplifies long-term enterprise Linux support Exabeam expands ABA to detect AI agent threats across ChatGPT, Copilot, and Gemini Egnyte expands Content Cloud with AI Governance and built-in Assistant Pondurance MDR Essentials uses autonomous SOC to tackle AI-driven attacks Codenotary AgentMon monitors agentic AI activity and behavior DoControl provides security coverage for Google Gemini Gems Foxit flags hidden security risks in PDFs with new tool New Bitdefender assessment helps organizations identify and eliminate hidden internal attack paths Diligent automates time-consuming steps in third-party reviews Coro launches MCP capabilities to simplify security operations through AI workflows IPVanish Threat Protection Pro blocks malicious activity before it reaches users Copyright © 2026 Help Net Security, All rights reserved. You are receiving Help Net Security daily security news because you opted in at our web site located on www.helpnetsecurity.com. Our mailing address is: Help Net Security Astus d.o.o. Kastav 51215 Croatia Add us to your address book No longer interested in receiving these emails? Unsubscribe Missed an issue? Access our past newsletters here: Archive