SecurityWeek Briefing

"Google DeepMind researchers map web attacks against AI agents."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 06 April 2026, 2230 UTC.

Content and Source provided by email subscription from https://feedly.com.

https://feedly.com/i/subscription/content/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check email link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://hawaiisciencejournal.com).

SecurityWeek

97K followers45 articles per week

#security#tech

197

Today

Google DeepMind Researchers Map Web Attacks Against AI Agents

by Ionut Arghire / 6h

A vulnerability named ‘AI Agent Traps’ allows attackers to manipulate, deceive, and exploit visiting agents via malicious web content. The post appeared first on SecurityWeek .

Guardarian Users Targeted With Malicious Strapi NPM Packages

by Ionut Arghire / 10h

Hackers published 36 NPM packages posing as Strapi plugins to execute shells, escape containers, and harvest credentials. The post appeared first on SecurityWeek .

North Korean Hackers Target High-Profile Node.js Maintainers

2 TTPs

•

by Ionut Arghire / 11h

•

UNC1069 targets Node.js maintainers

The threat actor behind the Axios supply chain attack has been aiming at other maintainers in its social engineering campaign. The post appeared first on SecurityWeek .

Escalating cyberattacks on energy. Now what?

by Corelight NDR

sponsored

Cybersecurity teams use NDR to shore up their defenses again the relentless attacks on energy grids

Yesterday

Fortinet Rushes Emergency Fixes for Exploited Zero-Day

Execution (Enterprise TA0002)

•

by Ionut Arghire / 12h

The improper access control bug in FortiClient EMS allows unauthenticated attackers to execute arbitrary code remotely. The post appeared first on SecurityWeek .

Apr 4, 2026

European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack

2 TTPs

•

by Ionut Arghire / 2d

•

European Commission probes Amazon breach

Hackers stole over 300GB of data from the Commission’s AWS environment, including personal information. The post appeared first on SecurityWeek .

Apr 3, 2026

TrueConf Zero-Day Exploited in Asian Government Attacks

2 TTPs

•

by Ionut Arghire / 3d

•

TrueConf zero-day attacks Southeast Asian

A Chinese threat actor exploited the video conferencing platform to perform reconnaissance, escalate privileges, and execute additional payloads. The post appeared first on SecurityWeek .

In Other News: ChatGPT Data Leak, Android Rootkit, Water Facility Hit by Ransomware

by SecurityWeek News / 3d

Other noteworthy stories that might have slipped under the radar: Symantec vulnerability, anti-ClickFix mechanism added to macOS, FBI hack classified as major incident. The post appeared first on SecurityWeek .

Critical ShareFile Flaws Lead to Unauthenticated RCE

Critical ShareFile flaws enable RCE

•

by Ionut Arghire / 3d

The vulnerabilities can be chained together to bypass authentication and upload arbitrary files to the server. The post appeared first on SecurityWeek .

Mobile Attack Surface Expands as Enterprises Lose Control

by Kevin Townsend / 3d

Shadow AI embedded in everyday apps, combined with outdated mobile devices and zero-click exploits, is creating a new and largely unseen mobile risk. The post appeared first on SecurityWeek .

React2Shell Exploited in Large-Scale Credential Harvesting Campaign

by Ionut Arghire / 3d

Using automated scanning and the Nexus Listener collection framework, the hackers compromised over 750 systems. The post appeared first on SecurityWeek .

T-Mobile Sets the Record Straight on Latest Data Breach Filing

T-Mobile data breach affects millions

•

by Eduard Kovacs / 3d

The cybersecurity incident involved an insider and had a limited impact, the telecoms giant told SecurityWeek. The post appeared first on SecurityWeek .

Apr 2, 2026

North Korean Hackers Drain $285 Million From Drift in 10 Seconds

Drift suspends services after hack

•

by Ionut Arghire / 3d

The attackers prepared infrastructure and multiple nonce-based transactions, took over an admin key, and drained five vaults. The post appeared first on SecurityWeek .

Critical Vulnerability in Claude Code Emerges Days After Source Leak

Claude Code leak exposes AI secrets

•

by Kevin Townsend / 4d

Within days of each other, Anthropic first leaked the source code to Claude Code, and then a critical vulnerability was found by Adversa AI. The post appeared first on SecurityWeek .

Apple Rolls Out DarkSword Exploit Protection to More Devices

by Eduard Kovacs / 4d

The DarkSword exploit kit has been used by both state-sponsored hackers and commercial spyware vendors. The post appeared first on SecurityWeek .

Cybersecurity M&A Roundup: 38 Deals Announced in March 2026

by Eduard Kovacs / 4d

Significant cybersecurity M&A deals announced by Airbus, Cellebrite, Databricks, Quantum eMotion, Rapid7, and OpenAI. The post appeared first on SecurityWeek .

Cisco Patches Critical and High-Severity Vulnerabilities

by Ionut Arghire / 4d

The bugs could lead to authentication bypass, remote code execution, information disclosure, and privilege escalation. The post appeared first on SecurityWeek .

250,000 Affected by Data Breach at Nacogdoches Memorial Hospital

Nacogdoches Memorial Hospital data breach

•

by Ionut Arghire / 4d

In January 2026, a threat actor hacked the hospital’s internal network and stole personal and health information. The post appeared first on SecurityWeek .

Mercor Hit by LiteLLM Supply Chain Attack

4 TTPs

•

by Ionut Arghire / 4d

The AI recruiting firm is investigating the incident as Lapsus$ claimed the theft of 4TB of Mercor data. The post appeared first on SecurityWeek .

Apr 1, 2026

Sophisticated CrystalX RAT Emerges

by Ionut Arghire / 4d

The malware can spy on victims, steal their information, and make configuration changes on devices. The post appeared first on SecurityWeek .

Variance Raises $21.5M for Compliance Investigation Platform Powered by AI Agents

Variance raises 21.5M for AI

•

by SecurityWeek News / 4d

Variance has raised a total of $26 million in funding and the latest investment will fuel platform growth. The post appeared first on SecurityWeek .

Linx Security Raises $50 Million for Identity Security and Governance

Linx Security raises 50M$ funding

•

by Ionut Arghire / 4d

The company will accelerate product development, scale go-to-market efforts, and expand its global footprint. The post appeared first on SecurityWeek .

Depthfirst Raises $80 Million in Series B Funding

Depthfirst raises 80M for AI cybersecurity

•

by Ionut Arghire / 5d

The startup will expand its AI research team, train additional security models, and scale enterprise adoption. The post appeared first on SecurityWeek .

Toy Giant Hasbro Hit by Cyberattack

by Eduard Kovacs / 5d

The company is investigating the full scope of the incident, including whether any files have been compromised. The post appeared first on SecurityWeek .

New DeepLoad Malware Dropped in ClickFix Attacks

DeepLoad malware steals credentials using AI

•

by Ionut Arghire / 5d

The malware steals credentials, installs a malicious browser extension, and can spread via USB drives. The post appeared first on SecurityWeek .

Exploited Zero-Day Among 21 Vulnerabilities Patched in Chrome

by Eduard Kovacs / 5d

Google has announced fixes for CVE-2026-5281, a zero-day affecting Chrome’s Dawn component. The post appeared first on SecurityWeek .

FBI Warns of Data Security Risks From China-Made Mobile Apps

FBI warns of Chinese app risks

•

by Eduard Kovacs / 5d

The agency has not named the problematic foreign-made applications, but TikTok and Temu come to mind. The post appeared first on SecurityWeek .

US Charges Uranium Crypto Exchange Hacker

by Ionut Arghire / 5d

Jonathan Spalletta exploited smart contract vulnerabilities to steal approximately $55 million in cryptocurrency and cause Uranium to shut down. The post appeared first on SecurityWeek .

Webinar Today: Agentic AI vs. Identity’s Last Mile Problem

by SecurityWeek News / 5d

Join the webcast as we explore what Agentic AI can and cannot solve today, and real world breach scenarios linked to disconnected applications. The post appeared first on SecurityWeek .