Google fixes fourth actively exploited Chrome zero-day of 2026
2026-04-01T20:51:47Z•4ee913d072225f80b9e1d6c1b632fa697716d8f0c88a1335cad12a95c3d733c9
CISA-KEVCVE-2026-3055CVE-2026-5281UNC1069anthropicaxioschrome-zero-daycitrix-netscalerclaude-codedata-leakdawndow-incdutch-ministry-financefree-vpnlitellmlloyds-bankingnpmqilin-ransomwareratsentinelonesupply-chainuse-after-freewebgpu
What happened
Multiple high-impact security incidents and disclosures: Google patched a fourth actively exploited Chrome zero-day (CVE-2026-5281), a WebGPU (Dawn) use-after-free exploited in the wild. Google also attributed the Axios npm supply-chain compromise to North Korea-linked UNC1069; attackers hijacked the Axios npm account to push malicious releases distributing RATs. SentinelOne’s autonomous detection blocked a trojanized LiteLLM package that was triggered by Anthropic’s Claude Code; separately Anthropic accidentally leaked Claude Code source via a public npm release. Analysis and advisories also:
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 4ee913d072225f80b9e1d6c1b632fa697716d8f0c88a1335cad12a95c3d733c9
- Enrichment time
- 2026-04-01T20:51:47Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.