Full Daily Digest

OpenAI has mandated macOS users to update their applications following a supply-chain attack that compromised the Axios library, though no direct compromise of OpenAI's systems or user data was detected. The incident stemmed from a North Korean hacking group (UNC1069) infiltrating the lead maintainer's accounts via social engineering, injecting malware into Axios for approximately three hours. Whi

CyberScoop · 2026-04-13 · Incidents: OpenAI has mandated macOS users to update their applications following a supply-chain attack that compromised the Axios library, though no direct compromise of OpenAI's systems or user data was detected.

New research reveals that 61% of Australian children aged 12-15 continue to access social media platforms despite a ban implemented in December, raising serious questions about the effectiveness of such restrictions. The study, conducted by the Molly Rose Foundation and an Australian youth research agency, found that platforms like TikTok, YouTube, and Instagram retained over half of their young u

The Record by Recorded Future · 2026-04-13 · Policy: New research reveals that 61% of Australian children aged 12-15 continue to access social media platforms despite a ban implemented in December, raising serious questions about the effectiveness of such…

A coordinated effort by the FBI and Indonesian law enforcement has successfully dismantled W3LL, a sophisticated phishing-as-a-service platform that facilitated large-scale credential theft. The platform, which operated through W3LLSTORE, allowed cybercriminals to create fake login portals capable of bypassing multifactor authentication (MFA) for just $500. Between 2019 and 2023, W3LL advertised o

The Record by Recorded Future · 2026-04-13 · Incidents: A coordinated effort by the FBI and Indonesian law enforcement has successfully dismantled W3LL, a sophisticated phishing-as-a-service platform that facilitated large-scale credential theft.

Cloudflare is expanding its CLI tool, Wrangler, to encompass all of its products, addressing a gap where many services lacked CLI support. This move is driven by the increasing reliance on coding agents for API interactions, which prefer CLI interfaces for automation and configuration. The technical preview, available via `npx cf` or `npm install -g cf`, currently covers a subset of products but a

Cloudflare Blog · 2026-04-13 · Tools: Cloudflare is expanding its CLI tool, Wrangler, to encompass all of its products, addressing a gap where many services lacked CLI support.

The ShinyHunters cybercrime group has claimed responsibility for breaching Rockstar Games’ systems via a third-party cloud analytics platform, Anodot, which is used to monitor cloud infrastructure spending. The attackers allegedly obtained authentication tokens from Anodot, enabling unauthorized access to Rockstar’s Snowflake cloud environment. While Rockstar Games confirmed that a limited amount

The Record by Recorded Future · 2026-04-13 · Incidents: The ShinyHunters cybercrime group has claimed responsibility for breaching Rockstar Games’ systems via a third-party cloud analytics platform, Anodot, which is used to monitor cloud infrastructure spending.

Security maturity hinges on the ability to adapt inherited systems and practices to evolving threats, a theme underscored at BSides Milwaukee 2026. The conference highlighted the critical intersection of technical systems and human factors, emphasizing that effective security teams must prioritize clear communication, psychological safety, and shared ownership alongside technical tools. Josh Mason

GitGuardian Blog · 2026-04-13 · Events: Security maturity hinges on the ability to adapt inherited systems and practices to evolving threats, a theme underscored at BSides Milwaukee 2026.

Cloudflare's Sandboxes, now generally available, address critical challenges in AI agent development by providing secure, scalable environments for code execution. The solution tackles burstiness, quick state restoration, security, control, and ergonomics, enabling agents to perform tasks like cloning repositories and running tests efficiently. Partners like Figma leverage Cloudflare Containers fo

Cloudflare Blog · 2026-04-13 · Tools: Cloudflare's Sandboxes, now generally available, address critical challenges in AI agent development by providing secure, scalable environments for code execution.

Cloudflare's Dynamic Workers introduce a lightweight, disposable compute isolation primitive using isolates, enabling rapid execution of AI-generated code with minimal overhead. This approach is particularly suited for ephemeral tasks, but persistent applications require state management, addressed here via Durable Objects—specialized Workers with attached SQLite databases for fast, isolated stora

Cloudflare Blog · 2026-04-13 · Vulnerability: Cloudflare's Dynamic Workers introduce a lightweight, disposable compute isolation primitive using isolates, enabling rapid execution of AI-generated code with minimal overhead.

Cloudflare's latest enhancement to its sandboxing technology introduces outbound Workers, a dynamic and secure method for managing egress traffic from sandboxed environments. This innovation is particularly relevant as AI-driven tools and LLMs become more prevalent, requiring robust mechanisms to handle untrusted code execution safely. Outbound Workers act as programmable proxies, enabling secure

Cloudflare Blog · 2026-04-13 · Tools: Cloudflare's latest enhancement to its sandboxing technology introduces outbound Workers, a dynamic and secure method for managing egress traffic from sandboxed environments.

JanelaRAT, a financially motivated malware variant derived from BX RAT, continues to evolve as a significant threat targeting Latin American banking users, particularly in Brazil and Mexico. Since its emergence in June 2023, the malware has refined its infection chain, leveraging multi-stage delivery mechanisms such as phishing emails disguised as invoice notifications, malicious websites, and com

Kaspersky Securelist · 2026-04-13 · Incidents: JanelaRAT, a financially motivated malware variant derived from BX RAT, continues to evolve as a significant threat targeting Latin American banking users, particularly in Brazil and Mexico.