Axios npm hack used fake Teams error fix to hijack maintainer account

Published on April 4, 2026

The maintainers of the popular Axios HTTP client have published a detailed post-mortem describing how one of its developers was targeted by a social engineering campaign believed to have been conducted by North Korean threat actors. [...]

Continue reading on website
Other news

Device code phishing attacks surge 37x as new kits spread online

April 4, 2026
Device code phishing attacks that abuse the OAuth 2.0 Device Authorization Grant flow to hijack accounts have surged more than 37 times this year. [...]

Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS

April 5, 2026
Fortinet has released out-of-band patches for a critical security flaw impacting FortiClient EMS that it said has been exploited in the wild.The vulnerability, tracked as CVE-2026-35616 (CVSS score: 9.1), has been described as a pre-authentication API access bypass leading to privilege escalation."An improper access control vulnerability [CWE-284] in FortiClient EMS may allow an