Mythos autonomously exploited vulnerabilities that survived 27 years of human review. Security teams need a new detection playbook

Claude Mythos autonomously found zero-days in OpenBSD, FFmpeg, FreeBSD and major browsers that survived decades of expert ...
The Hacker News

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.
Microsoft

Mitigating the Axios npm supply chain compromise

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

Hackers compromise Axios npm package to drop cross-platform malware

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
Upstream

Shell declares force majeure on Qatari LNG volumes

Shell has declared force majeure on the liquefied natural gas cargoes it buys from QatarEnergy as supplies from the Middle East nation have all but ground to a halt amid the US-Israeli war on Iran ...
Reuters

IBM posts steepest daily drop since 2000 after Anthropic says AI can modernize COBOL

Feb 23 (Reuters) - Shares of International Business Machines (IBM.N), opens new tab recorded their steepest daily drop in more than 25 years on Monday, after AI startup Anthropic said its Claude Code ...
CNBC

IBM is the latest AI casualty. Shares tank 13% on Anthropic programming language threat

International Business Machines stock is getting slammed Monday, becoming the latest perceived victim of rapidly developing AI technology, after Anthropic said its Claude Code tool could be used to ...
Dark Reading

'God-Like' Attack Machines: AI Agents Ignore Security Policies

AI agents are programmed to be industrious and focused on completing user-assigned tasks, but that single-minded approach often has gone wrong. The problem is that as companies adopt AI agent ...
HousingWire

How to comply with FinCEN without breaking your operations — or your budget

This new regulatory mandate will expose a sharp divide between firms powered by modern, operational rigor and those still relying on manual workarounds, siloed technology tools and legacy systems. The ...
Dark Reading

Booz Allen Announces General Availability of Vellox Reverser to Automate Malware Defense

MCLEAN, Va.--(BUSINESS WIRE)--Booz Allen Hamilton (NYSE: BAH) today announced the general availability of Vellox Reverser™, a malware reverse engineering and threat intelligence product designed to ...
VentureBeat

Infostealers added Clawdbot to their target lists before most security teams knew it was running

Clawdbot's MCP implementation has no mandatory authentication, allows prompt injection, and grants shell access by design. Monday's VentureBeat article documented these architectural flaws. By ...
TechRepublic

Hackers Disable Windows Security With New Malware Attack

Unlike traditional attacks that rely on exploits, this succeeds through social engineering combined with abuse of Windows' own security architecture. Image generated by Google Gemini A sophisticated ...