Linx Security Raises $50 Million for Identity Security and Governance

SecurityWeek roundup: Multiple high-impact incidents and disclosures — Google patched an exploited Chrome zero-day (CVE-2026-5281). A North Korean supply‑chain compromise hijacked the axios NPM package by abusing a long-lived token and CI/CD OIDC bypass. New DeepLoad malware campaigns steal credentials, install malicious browser extensions and spread via USB. Toy maker Hasbro is investigating a cyberattack. US authorities charged the hacker behind the Uranium crypto exchange theft (~$55M) that exploited smart contract vulnerabilities. Researchers also weaponized AI agents against Google Vertex