Don't open that WhatsApp message, Microsoft warns
2026-04-01T07:23:56Z•eb47164a6074287a92cf751a47c53780a04b0b64885152aa0a2ace53adc4e98d
LiteLLMPyPIRATTrivyaxioschatgptcitrix-netscalercloud-infectioncredential-theftdata-breachdns-exfiltrationiranm365microsoftnpmopenaipassword-sprayingsocial-engineeringsupply-chainwhatsappzero-day
What happened
Late-March 2026 security roundup: multiple high-impact supply-chain attacks and in-the-wild exploits. Attackers backdoored top open-source packages (notably an axios npm release and multiple PyPI packages tied to the Trivy compromise), delivering credential-stealing malware and a cross-platform RAT that has infected cloud environments and developer machines. The Trivy CI compromise has led to widespread secret theft and at least 1,000+ cloud infections. Citrix NetScaler disclosure is being actively exploited in the wild. OpenAI fixed a ChatGPT DNS side-channel data exfiltration flaw, and MSFT/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- theregister_security
- Record identifier
- eb47164a6074287a92cf751a47c53780a04b0b64885152aa0a2ace53adc4e98d
- Enrichment time
- 2026-04-01T07:23:56Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.