Malware campaign lures users with fake Windows Update website

Malwarebytes recently uncovered a new malicious campaign targeting the Windows Update service. Focused on French-speaking users, the campaign uses layered obfuscation techniques to deliver multiple ...
Microsoft

Mitigating the Axios npm supply chain compromise

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

Malware on npm: HTTP client axios loads backdoor for Windows, macOS, and Linux

The maintainer account for the axios package on npm was compromised to inject a remote access trojan for Windows, macOS, and Linux.

Hackers compromise popular Axios Javascript library with hidden malware

The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute malware via a compromised account. Attackers exploited a hijacked account on npm ...

Hackers slipped a trojan into the code library behind most of the internet. Your team is probably affected

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a cross-platform RAT. Axios sits in 80% of cloud environments. Huntress confirmed ...
Security Boulevard

Frequently Asked Questions About the Axios npm Supply Chain Attack by North Korea-Nexus Threat Actor UNC1069

A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access trojan to potentially millions of developer environments during a three-hour ...
The Hacker News

Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069

Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, impacting multiple OS.

Iran claims US-Israeli strikes targeting civilian sites as Rubio expects war to end ‘in weeks, not months’

The secretary of state says the US can achieve its goals in Iran without deploying ground troops, as G7 ministers call for the reopening of the Strait of Hormuz ...
Techzine Europe

Axios supply chain attack victim posts postmortem to prevent a repeat

Another supply chain security threat emerged this week with the compromise of Axios. It is a popular JavaScript HTTP library, but for three hours, it ...

Microsoft makes Windows 11 setup faster by letting you skip mandatory updates0 0

Windows 11's initial setup experience is now more user-friendly and lets you reach the desktop significantly faster.

Microsoft finally enables ability to skip long update process during Windows 11 setup

A new update now rolling out globally will give users the option to skip the update process when setting up a new Windows 11 PC, speeding up the experience two-fold.

Microsoft releases Windows 11 KB5081494, KB5083482 setup and recovery updates

New dynamic updates for Windows 11 26H1, 25H2, and 24H2, under KB5083990, KB5081151, KB5081494, and KB5083482, are out.