Week in review: Self-spreading npm malware hits developers, Cisco SD-WAN 0-day exploited since 2023
2026-03-04T21:09:24Z•c5f238f9e91493d799c3af34783247d4a3426ecd2b0ab51db09135f2073e69fe
AI agent securityAndroid 17AuthMindCisco SD‑WANCloud PCContacts PickerEuropolIllumio InsightsIronCurtainMeta scamsSophos reportThe ComWindows 365advertiser fraudagentless visibilityexploitextortionidentity observabilitynpm malwareprivacy controlsprompt injectionransomwaresecrets managementsupply chainzero‑day
What happened
Weekly security roundup: reports of self‑spreading npm malware targeting developers and an actively exploited Cisco SD‑WAN zero‑day (exploitation traced back to 2023) highlight ongoing supply‑chain and infrastructure risk. New open‑source project IronCurtain aims to constrain autonomous LLM agents and mitigate prompt‑injection/agent drift. Meta pursued legal and technical actions against scam advertisers. Europol’s Project Compass produced arrests and IDs tied to The Com ransomware/extortion network. Google’s Android 17 beta tightens privacy (Contacts Picker, EyeDropper, SMS/local network APIs
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- c5f238f9e91493d799c3af34783247d4a3426ecd2b0ab51db09135f2073e69fe
- Enrichment time
- 2026-03-04T21:09:24Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.