Uncategorized

Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account 2026-03-31 at 11:21 By The popular HTTP client known as Axios has suffered a supply chain attack after two newly published versions of the npm package introduced a malicious dependency. Versions 1.14.1 and 0.30.4 of Axios have been found to inject “plain-crypto-js” version 4.2.1 […]

Tax Season Means Phishing Season: How Individuals and Businesses Can Protect Themselves 2026-03-31 at 11:00 By Tax season-related phishing attacks have gotten more sophisticated as threat actors increasingly leverage generative AI.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Surprise! Big Tech has been a bit rubbish at enforcing Australia’s kids social media ban 2026-03-31 at 06:17 By Simon Sharwood Regulator ‘moving into an enforcement stance’ and investigating Meta, YouTube, TikTok and Snapchat as millions continue to doomscroll Australia’s eSafety Commission is “moving into an enforcement stance” after finding that Meta, YouTube, TikTok and […]

GitHub backs down, kills Copilot pull-request ads after backlash 2026-03-30 at 23:49 By Brandon Vigliarolo Letting Copilot alter others’ PRs was the wrong judgment call, says product manager Microsoft has done a 360. Following backlash from developers, GitHub has removed Copilot’s ability to stick ads – what it calls “tips” – into any pull request […]

OpenAI patches ChatGPT flaw that smuggled data over DNS 2026-03-30 at 23:17 By Thomas Claburn Check Point says outbound controls blocked web traffic but overlooked DNS OpenAI talks up data security for its AI services, yet Check Point says that ChatGPT allowed data to leak through a DNS side channel before the flaw was fixed.… […]

OpenAI Patches ChatGPT Data Exfiltration Flaw and Codex GitHub Token Vulnerability 2026-03-30 at 23:16 By A previously unknown vulnerability in OpenAI ChatGPT allowed sensitive conversation data to be exfiltrated without user knowledge or consent, according to new findings from Check Point. “A single malicious prompt could turn an otherwise ordinary conversation into a covert exfiltration […]

Telnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach 2026-03-30 at 20:49 By Brandon Vigliarolo Also, EU probes Snapchat, RedLine suspect extradited, AstraZeneca leak claim surfaces, and more infosec in brief  The cybercrime crew linked to the Trivy supply-chain attack has struck again, this time pushing malicious Telnyx package versions to PyPI […]

US PC shipments to fall 13% as memory and storage crunch hits budget systems 2026-03-30 at 20:49 By Dan Robinson Omdia says education, consumer, commercial, and public sector demand will weaken through 2026 US PC shipments are set to fall by 13 percent this year thanks to the ongoing memory and storage crisis, and things […]

FCC says it’s making it easier for US telcos to ditch legacy lines 2026-03-30 at 20:37 By Dan Robinson But critics say stopping some engineering tests is not the sort of corner you want to cut America’s telecoms regulator has unveiled new measures to speed the transition to modern high-speed networks, but critics argue the […]

DeepLoad Malware Uses ClickFix and WMI Persistence to Steal Browser Credentials 2026-03-30 at 20:14 By A new campaign has leveraged the ClickFix social engineering tactic as a way to distribute a previously undocumented malware loader referred to as DeepLoad. “It likely uses AI-assisted obfuscation and process injection to evade static scanning, while credential theft starts […]

AI dangerously close to solving test that only the brightest minds on Earth could: ‘Human expertise still matters’ 2026-03-30 at 19:21 By Ben Cost Tech experts claim they’re a year away from beating “Humanity’s Last Exam” (HLE) — a supposedly unsolvable test for bots as well as most people. This article is an excerpt from […]

Angry parents push for legislative action after Meta court ruling: ‘Phones should be illegal for kids until they’re 18!’ 2026-03-30 at 19:21 By Marie Pohl “Ninety-five percent of our kids are using these products that we know are harmful,” one mom told The Post. This article is an excerpt from Latest Technology News | New […]

Artemis II countdown begins as NASA prepares for crewed Moon flyby 2026-03-30 at 19:21 By Richard Speed Orion’s four astronauts edge toward liftoff for humanity’s first lunar voyage in more than 50 years NASA is preparing to send astronauts around the Moon, with the Artemis II mission countdown set to begin tonight.… This article is […]

3 SOC Process Fixes That Unlock Tier 1 Productivity 2026-03-30 at 19:20 By What is really slowing Tier 1 down: the threat itself or the process around it? In many SOCs, the biggest delays do not come from the threat alone. They come from fragmented workflows, manual triage steps, and limited visibility early in the […]

⚡ Weekly Recap: Telecom Sleeper Cells, LLM Jailbreaks, Apple Forces U.K. Age Checks and More 2026-03-30 at 19:20 By Some weeks are loud. This one was quieter but not in a good way. Long-running operations are finally hitting courtrooms, old attack methods are showing up in new places, and research that stopped being theoretical right […]

The State of Secrets Sprawl 2026: 9 Takeaways for CISOs 2026-03-30 at 19:20 By Secrets sprawl isn’t slowing down: in 2025, it accelerated faster than most security teams anticipated. GitGuardian’s State of Secrets Sprawl 2026 report analyzed billions of commits across public GitHub and uncovered 29 million new hardcoded secrets in 2025 alone, a 34% […]

Russian CTRL Toolkit Delivered via Malicious LNK Files Hijacks RDP via FRP Tunnels 2026-03-30 at 19:20 By Cybersecurity researchers have discovered a remote access toolkit of Russian-origin that’s distributed via malicious Windows shortcut (LNK) files that are disguised as private key folders. The CTRL toolkit, according to Censys, is custom-built using .NET and includes various […]

Three China-Linked Clusters Target Southeast Asian Government in 2025 Cyber Campaign 2026-03-30 at 19:20 By Three threat activity clusters aligned with China have targeted a government organization in Southeast Asia as part of what has been described as a “complex and well-resourced operation.” The campaigns have led to the deployment of various malware families, including […]

Delware judge steps aside from Elon Musk cases over ‘bias’ in supporting LinkedIn post that mocked him 2026-03-30 at 18:52 By Ariel Zilber A Delaware judge said Monday she will step aside from several cases involving Elon Musk after his lawyers accused her of bias over a LinkedIn post that appeared to show her “supporting” […]

UK fines Irish Apple outpost over sanctions-busting payments to Russian dev 2026-03-30 at 18:32 By Carly Page Regulator says payments totaling £635K reached entity owned and controlled by a designated person The UK government has fined an Apple subsidiary £390,000 for breaching sanctions on Russia after it sent more than £600,000 to a developer linked […]