CyberPulse

The AI You Learned in January No Longer Exists

Google released Chrome updates fixing 21 vulnerabilities including CVE-2026-5281, a zero-day in the WebGPU Dawn component already exploited in the wild and added to the KEV catalog — the third Chrome zero-day cycle in three weeks. Google attributed the Axios npm supply chain compromise to a state-linked threat cluster, confirming that the developer supply chain is now a battleground for both criminal and state-linked operations. Citrix NetScaler CVE-2026-3055 has been added to the KEV catalog after confirmed exploitation. Fortinet FortiClient EMS CVE-2026-21643 is under active exploitation via SQL injection — another management plane target. A critical zero-click Telegram RCE was disclosed.

• https://securityaffairs.com/176543/hacking/google-chrome-zero-day-cve-2026-5281.html
• https://securityaffairs.com/176530/apt/axios-npm-supply-chain-north-korea.html
• https://securityaffairs.com/176520/hacking/citrix-netscaler-cve-2026-3055-kev.html
• https://securityaffairs.com/176510/hacking/fortinet-forticlient-ems-cve-2026-21643.html
• https://securityaffairs.com/176500/hacking/telegram-zero-click-rce.html
• https://www.cybermaterial.com/p/cyber-briefing-20260401
• https://thehackernews.com/2026/04/chrome-zero-day-dawn-webgpu.html
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog

IBM's 2026 X-Force Threat Intelligence Index reveals that 56% of the nearly 40,000 vulnerabilities tracked in 2025 required no authentication to exploit — explaining why unauthenticated flaws like the Cisco SD-WAN bypass, the MSHTML zero-day, and the Coruna iOS exploit kit all converged in the same week. Exploitation of public-facing applications surged 44% to become the leading initial access vector. Supply chain compromises nearly quadrupled since 2020. Over 300,000 AI chatbot credentials appeared on dark web marketplaces. Actionable guidance focuses on prioritizing unauthenticated vulnerabilities in patch queues, auditing external attack surfaces, and assessing supply chain exposure across CI/CD and SaaS integrations.

• https://www.ibm.com/think/x-force/threat-intelligence-index-2026-securing-identities-ai-detection-risk-management
• https://uk.newsroom.ibm.com/ibm-2026-x-force-threat-index
• https://industrialcyber.co/reports/ibm-x-force-reports-44-surge-in-exploitation-of-public-facing-applications-as-supply-chain-and-identity-attacks-intensify/
• https://www.ibm.com/think/insights/more-2026-cyberthreat-trends
• https://www.securityweek.com/recent-cisco-catalyst-sd-wan-vulnerability-now-widely-exploited/
• https://thehackernews.com/2026/03/cisco-confirms-active-exploitation-of.html
• https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit

The TeamPCP supply chain campaign has triggered a law enforcement high-priority alert and the Trivy vulnerability (CVE-2026-33634) has been added to the KEV catalog. The cascade now spans six platforms — GitHub Actions, Docker Hub, PyPI, npm, VS Code extensions, and cloud communications SDKs — after the Telnyx Python package was compromised using audio steganography to conceal malware in a .WAV file. F5 BIG-IP APM CVE-2025-53521 was reclassified from DoS to RCE (CVSS 9.3) and confirmed exploited. Citrix NetScaler CVE-2026-3055 is seeing active reconnaissance. The Langflow AI platform RCE remains under active exploitation and is now in the KEV catalog. GlassWorm evolved to use Solana dead drops for RAT delivery via a malicious Chrome extension masquerading as Google Docs.

• https://cyberpress.org/fbi-teampcp-supply-chain-alert/
• https://thehackernews.com/2026/03/teampcp-telnyx-supply-chain-wav-steganography.html
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• https://thehackernews.com/2026/03/f5-bigip-apm-rce-kev.html
• https://thehackernews.com/2026/03/citrix-netscaler-active-reconnaissance.html
• https://www.bleepingcomputer.com/news/security/langflow-ai-rce-cisa-kev/
• https://thehackernews.com/2026/03/glassworm-solana-dead-drops-rat-chrome.html
• https://www.hendryadrian.com/cybersecurity-news-daily-recap-27-mar-2026/

North Korea's ScarCruft built Ruby Jumper, a five-component toolchain that breaches air-gapped networks by installing a disguised Ruby runtime, weaponizing USB drives as bidirectional command channels, and deploying full-spectrum surveillance including keylogging, audio, and video capture inside physically isolated environments. Separately, Aeternum C2 is a new botnet that writes encrypted commands to smart contracts on the Polygon blockchain, eliminating all traditional takedown mechanisms — no servers to seize, no domains to sinkhole, and $1 of MATIC funds 150 command transactions. Together with the week's coverage of AI supply chain attacks, government database breaches, vishing recruitment, and cloud-based espionage, a clear pattern emerges: every assumption of isolation — physical, logical, legal, and operational — is being systematically dissolved.

• https://thehackernews.com/2026/02/scarcruft-uses-zoho-workdrive-and-usb.html
• https://www.bleepingcomputer.com/news/security/apt37-hackers-use-new-malware-to-breach-air-gapped-networks/
• https://www.threatintelreport.com/2026/02/26/articles/apt37-ruby-jumper-campaign-bridges-air-gapped-networks-using-usb-and-a-portable-ruby-runtime/
• https://thehackernews.com/2026/02/aeternum-c2-botnet-stores-encrypted.html
• https://www.infosecurity-magazine.com/news/aeternum-botnet-c2-polygon/
• https://www.securityweek.com/aeternum-botnet-loader-employs-polygon-blockchain-cc-to-boost-resilience/
• https://hackread.com/aeternum-c2-botnet-polygon-blockchain/
• https://www.scworld.com/brief/aeternum-c2-botnet-leverages-blockchain-for-resilient-command-and-control

The Death of Human Error

Board-level strategic briefing on the defining risk of 2026: AI agents are being deployed across enterprises as autonomous actors with credentials, permissions, and action authority — but without the identity governance applied to human employees. Gartner projects 40% of enterprise applications will embed AI agents by year-end 2026 (up from 5% in 2025). 92% of security leaders are concerned about agent security implications. 48% believe agentic AI will be the top attack vector by year-end. The attack surface spans four layers: endpoints (coding agents), APIs/integrations (tool connectors), platforms (business workflow agents), and identity (credential accumulation). The most dangerous risk is not compromised agents but over-permissioned agents functioning as designed. Four board-level questions address agent inventory, identity lifecycle governance, human-in-the-loop controls, and organizational AI posture clarity.

• https://cloudsecurityalliance.org/blog/2026/04/02/the-state-of-ai-cybersecurity-2026-unveiling-insights-from-over-1-500-security-leaders
• https://www.bvp.com/atlas/securing-ai-agents-the-defining-cybersecurity-challenge-of-2026
• https://www.cyberark.com/resources/blog/ai-agents-and-identity-risks-how-security-will-shift-in-2026
• https://www.proofpoint.com/us/blog/ciso-perspectives/cybersecurity-2026-agentic-ai-cloud-chaos-and-human-factor
• https://www.darkreading.com/threat-intelligence/2026-agentic-ai-attack-surface-poster-child
• https://blog.barracuda.com/2026/02/27/agentic-ai--the-2026-threat-multiplier-reshaping-cyberattacks
• https://blog.denexus.io/resources/ai-agents-in-cybersecurity-and-cyber-risk-management-5-critical-trends-for-2026
• https://www.weforum.org/publications/global-cybersecurity-outlook-2026/digest/