Depthfirst Raises $80 Million in Series B Funding

This SecurityWeek feed reports multiple high-impact developments: Google patched an exploited Chrome zero-day (CVE-2026-5281) among 21 fixes; a new DeepLoad malware campaign (delivered via ClickFix) steals credentials, installs malicious browser extensions and can spread via USB; the widely used Axios npm package was backdoored in a North Korean supply-chain attack after abuse of a long-lived NPM access token that bypassed GitHub Actions OIDC; toy maker Hasbro is investigating a cyberattack of unknown scope; Palo Alto disclosed weaponization of Google Vertex AI and Google has addressed related