Cybercriminals take aim at Hasbro, weeks of recovery ahead
2026-04-01T20:51:51Z•d731ef8cebd9020ec1a994c20c8fe943af6ffa373eac3613c49dd590189edee9
CVE-2026-5281DawnUNC1069WebGPUagent-detectionai-governanceai-safeguardsaxioschatgptchromecis-benchmarkscopilotdata-breachegnyteemail-security-api-based-protection','ai-identity-fraud','deepfexabeamgeminihasbromimecastnorth-koreanpmnpm-backdoorsupply-chainuse-after-freezero-day
What happened
This collection of security news covers multiple high-impact incidents and industry updates: Hasbro confirmed a cyber intrusion detected March 28 and took systems offline while investigating; the popular Axios npm packages were backdoored after an attacker gained a maintainer’s npm account—introducing a hidden post-install dependency—and the activity is attributed to financially motivated North Korean operators linked to UNC1069. Google patched 21 Chrome flaws including an in-the-wild zero-day, CVE-2026-5281, a use-after-free in Dawn (WebGPU) exploited in the wild. Other items: Exabeam added/扩
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- d731ef8cebd9020ec1a994c20c8fe943af6ffa373eac3613c49dd590189edee9
- Enrichment time
- 2026-04-01T20:51:51Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.