Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account
The popular HTTP client known as Axios has suffered a supply chain attack after two newly published versions of the npm package introduced a malicious…
Author: Cybernoz
HMRC is watching you…
Thank you for joining! Access your Pro+ Content below. 31 March 2026 HMRC is watching you… Share this item with your network: In this week’s…
Hackers Access Patient Record System
The CareCloud data breach is under investigation after the healthcare software firm disclosed that hackers may have accessed systems storing electronic health records. The CareCloud…
Axios Supply Chain Attack Exposes Malicious Npm Packages
The Axios supply chain attack that surfaced on March 31, 2026, has raised serious concerns across the JavaScript ecosystem, exposing how a compromised npm Account can be leveraged to distribute malware at…
Supply chain attack hits 300 million-download Axios npm package
A widely used JavaScript package used with hundreds of millions of downloads has been compromised in a new supply chain attack to fetch a malware…
Qilin Ransomware allegedly breached chemical manufacturer giant Dow Inc
Qilin Ransomware allegedly breached chemical manufacturer giant Dow Inc Pierluigi Paganini March 31, 2026 Qilin ransomware claims a breach of Dow Inc., listing it on…
Why Kubernetes controllers are the perfect backdoor
In my years securing cloud-native environments, I’ve noticed a recurring blind spot. We obsess over the “front doors” such as exposed dashboards, misconfigured RBAC, or…
You Can Run, but You Can’t Hide: Defender Exclusions
The endpoint team at Huntress is focused on providing telemetry and protections around real adversary threats. One thing we’ve noticed that’s often overlooked is adversaries…
Bringing it all together.
In the season finale of CISOP, Kim Jones is joined by N2K’s own Ethan Cook to reflect on the conversations that shaped this season. Together,…
New RoadK1ll WebSocket implant used to pivot on breached networks
A newly identified malicious implant named RoadK1ll is enabling threat actors to quietly move from a compromised host to other systems on the network. The…
Notepad++ v8.9.3 Released Addressing cURL Security Vulnerability and Crash Issues
Notepad++ has officially released version 8.9.3, delivering critical security patches, structural performance enhancements, and resolutions for persistent crash issues. This update finalizes the text editor’s…
GhostSocks Hijacks Devices as Proxy Network for Stealthy Cyberattacks
A newly emerging malware known as GhostSocks is quietly reshaping how attackers evade detection by converting compromised systems into residential proxy nodes. Modern cyberattacks rely…