DJBSEC's CyberNews 2026-04-23

Today’s daily news covers the following categories: Malware Threat Intelligence Policy & Legislation Vulnerability

---

NPM Supply Chain Attack Self-Spreads to Steal Auth Tokens

Malware A new supply chain attack targeting the NPM ecosystem is using self-propagating malware to steal authentication tokens. Once installed, the malicious packages can spread across developer environments and CI/CD pipelines. The stolen tokens can then be used to access repositories and inject additional malicious code. This type of attack amplifies impact by leveraging trusted development workflows. Developers are urged to audit dependencies and secure access tokens. Read More

Mirai Campaign Exploits RCE Flaw in End-of-Life D-Link Routers

Malware A new Mirai botnet campaign is exploiting a remote code execution vulnerability in end-of-life D-Link routers. These devices no longer receive updates, making them easy targets for attackers. Once compromised, they are added to botnets used for DDoS attacks and other malicious activities. The campaign highlights ongoing risks from outdated IoT devices. Users should replace unsupported hardware and secure network infrastructure. Read More

Malicious Developer Tools Found in NPM Registry

Malware Security researchers have discovered malicious developer tools, including pgserve and automagik, in the NPM registry. These packages appear legitimate but contain hidden code designed to steal data and compromise systems. Once installed, they can execute unauthorized actions within development environments. The attack underscores persistent risks in open-source ecosystems. Developers should verify package authenticity and use trusted sources. Read More

Claude Mythos AI Identifies Hundreds of Firefox Vulnerabilities

Threat Intelligence Anthropic’s Claude Mythos AI has identified 271 vulnerabilities in the Firefox browser, showcasing the power of AI-driven security analysis. The model can rapidly analyze code and uncover flaws at scale. While this capability improves defensive efforts, it also raises concerns about misuse by attackers. The findings highlight how AI is transforming vulnerability discovery. Organizations must prepare for faster and more automated threat identification. Read More

GoGra Malware Uses Microsoft Graph API for Stealth Communication

Malware A new Linux malware called GoGra is using Microsoft Graph API to communicate with attacker infrastructure. By leveraging legitimate cloud services, the malware blends in with normal traffic and avoids detection. It can execute commands, exfiltrate data, and maintain persistence on infected systems. This technique reflects a growing trend of abusing trusted platforms. Organizations should monitor API usage and detect anomalies. Read More

Google Expands AI Capabilities Across Platforms

Policy & Legislation Google is continuing to expand its AI capabilities across multiple platforms, integrating advanced models into products and services. These developments aim to enhance productivity and automation. However, increased AI deployment also raises concerns about security, privacy, and misuse. Policymakers and organizations are closely watching these advancements. The expansion highlights the growing influence of AI in technology ecosystems. Read More

Anthropic Adopts EPSS to Prioritize Vulnerability Risks

Threat Intelligence Anthropic is adopting the Exploit Prediction Scoring System (EPSS) to better prioritize vulnerabilities. This approach helps organizations focus on flaws most likely to be exploited. As the volume of vulnerabilities grows, prioritization becomes critical. EPSS provides a data-driven method to improve risk management. The move reflects evolving strategies in vulnerability assessment. Read More

CrowdStrike LogScale Vulnerability Exposes Systems to Risk

Vulnerability A vulnerability in CrowdStrike LogScale could expose systems to unauthorized access or data compromise. The flaw affects logging and monitoring infrastructure, which is critical for security operations. Exploitation could undermine visibility into threats. Security experts recommend immediate patching and monitoring. Organizations should ensure logging systems remain secure and reliable. Read More

Emergency .NET 10.0.7 Update Fixes Critical Issues

Vulnerability Microsoft has released an emergency update for .NET 10.0.7 to address critical vulnerabilities. These flaws could allow attackers to execute malicious code or disrupt applications. Out-of-band updates indicate the severity of the issues. Developers and administrators are urged to update immediately. Keeping frameworks updated is essential for application security. Read More

Anthropic Expands Access to Mythos AI Platform

Policy & Legislation Anthropic is expanding access to its Mythos AI platform, enabling broader use in cybersecurity and enterprise environments. The model offers advanced capabilities for threat detection and analysis. While beneficial, increased access raises concerns about misuse and governance. Organizations must carefully manage how such powerful tools are deployed. The expansion reflects growing reliance on AI in security operations. Read More