Full Daily Digest

A sophisticated supply chain attack by TeamPCP has compromised widely trusted open-source security tools, including Trivy, KICS, and LiteLLM, embedding malicious payloads into GitHub Actions and PyPI registries. The attack exfiltrates sensitive data like cloud tokens, SSH keys, and Kubernetes secrets, impacting over 500,000 machines and exposing 300 GB of data. Unlike typical supply chain attacks,

Palo Alto Unit 42 · 2026-03-31 · Incidents: A sophisticated supply chain attack by TeamPCP has compromised widely trusted open-source security tools, including Trivy, KICS, and LiteLLM, embedding malicious payloads into GitHub Actions and PyPI…

The escalating threat landscape for critical infrastructure demands a shift from awareness to verified readiness, as highlighted by recent global regulatory advancements and operational initiatives. Governments worldwide, including the U.S., Japan, Europe, and Canada, are implementing stricter cybersecurity policies to safeguard essential sectors. Microsoft Threat Intelligence underscores the urge

Microsoft Security Blog · 2026-03-31 · Policy: The escalating threat landscape for critical infrastructure demands a shift from awareness to verified readiness, as highlighted by recent global regulatory advancements and operational initiatives.

A sophisticated supply chain attack targeting the widely-used axios JavaScript library has raised alarms across the cybersecurity community. An attacker hijacked the npm account of the lead axios maintainer, publishing malicious versions that injected a dependency, [email protected], designed to deploy a cross-platform remote access trojan. The poisoned versions, [email protected] and [email protected],

CyberScoop · 2026-03-31 · Incidents: A sophisticated supply chain attack targeting the widely-used axios JavaScript library has raised alarms across the cybersecurity community.

AI fatigue is setting in among security professionals, as evidenced by the RSA Conference 2026, where over 44,000 practitioners gathered to navigate the evolving landscape of AI in cybersecurity. While AI remains ubiquitous, the initial excitement has waned, replaced by a pressing need to distinguish meaningful advancements from mere hype. Security teams are grappling with environments that outpac

GitGuardian Blog · 2026-03-31 · Events: AI fatigue is setting in among security professionals, as evidenced by the RSA Conference 2026, where over 44,000 practitioners gathered to navigate the evolving landscape of AI in cybersecurity.

A sophisticated malware campaign leveraging WhatsApp messages has been observed delivering malicious Visual Basic Script (VBS) files to initiate a multi-stage infection chain. The attackers employ social engineering to exploit user trust, disguising renamed Windows utilities like curl.exe and bitsadmin.exe to blend into system activity. These scripts establish persistence, escalate privileges, and

Microsoft Security Blog · 2026-03-31 · Incidents: A sophisticated malware campaign leveraging WhatsApp messages has been observed delivering malicious Visual Basic Script (VBS) files to initiate a multi-stage infection chain.

Cloudflare has introduced Programmable Flow Protection, a groundbreaking feature enabling Magic Transit Enterprise customers to implement custom DDoS mitigation logic for UDP-based protocols. This innovation addresses a critical gap in DDoS defense, as traditional systems struggle with custom or proprietary UDP protocols due to their lack of protocol-specific knowledge. With Programmable Flow Prot

Cloudflare Blog · 2026-03-31 · Tools: Cloudflare has introduced Programmable Flow Protection, a groundbreaking feature enabling Magic Transit Enterprise customers to implement custom DDoS mitigation logic for UDP-based protocols.

Trail of Bits has successfully transitioned from AI-assisted to AI-native operations, demonstrating a significant leap in productivity and efficiency. While most companies merely provide AI tools without systemic changes, Trail of Bits redesigned workflows, integrating 94 plugins, 201 skills, and 84 specialized agents, resulting in AI-augmented auditors identifying 200 bugs weekly. This shift high

Trail of Bits Blog · 2026-03-31 · Case Studies: Trail of Bits has successfully transitioned from AI-assisted to AI-native operations, demonstrating a significant leap in productivity and efficiency.

A major cyberattack on Stryker by the Iran-linked Handala group highlights the growing sophistication of hacktivist operations, with over 200,000 systems compromised and 50TB of data stolen. Google's latest research reveals a troubling rise in data theft during ransomware attacks, now present in 77% of cases, up from 57% in 2024, with attackers increasingly leveraging built-in Windows utilities to

ESET WeLiveSecurity · 2026-03-31 · Incidents: A major cyberattack on Stryker by the Iran-linked Handala group highlights the growing sophistication of hacktivist operations, with over 200,000 systems compromised and 50TB of data stolen.

A critical privilege escalation vulnerability (CVE-2026-23092) has been identified in the Linux kernel, specifically within the analog device driver's debugfs command processing. The flaw stems from improper validation of user-supplied data, enabling an attacker to write beyond the bounds of an allocated array. With a CVSS score of 8.2 (AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H), this vulnerability pose

ZDI (Zero Day Initiative) · 2026-03-31 · Vulnerability: A critical privilege escalation vulnerability (CVE-2026-23092) has been identified in the Linux kernel, specifically within the analog device driver's debugfs command processing.