41:I[185,["/_next/static/chunks/2ys9ev5m3_24i.js","/_next/static/chunks/3pomb8r7ja54n.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/178kgr5-cejk9.js","/_next/static/chunks/1v5ewlr55okcj.js","/_next/static/chunks/3jnlvw-emqotx.js"],"SendEmailButton"] 43:I[63625,["/_next/static/chunks/2ys9ev5m3_24i.js","/_next/static/chunks/3pomb8r7ja54n.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/178kgr5-cejk9.js","/_next/static/chunks/1v5ewlr55okcj.js","/_next/static/chunks/3jnlvw-emqotx.js"],"AddToLibraryButton"] 44:I[29721,["/_next/static/chunks/2ys9ev5m3_24i.js","/_next/static/chunks/3pomb8r7ja54n.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/178kgr5-cejk9.js","/_next/static/chunks/1v5ewlr55okcj.js","/_next/static/chunks/3jnlvw-emqotx.js"],"ShareButton"] 45:I[58016,["/_next/static/chunks/2ys9ev5m3_24i.js","/_next/static/chunks/3pomb8r7ja54n.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/178kgr5-cejk9.js","/_next/static/chunks/1v5ewlr55okcj.js","/_next/static/chunks/3jnlvw-emqotx.js"],"ProcessEpisodeButton"] 46:I[45269,["/_next/static/chunks/2ys9ev5m3_24i.js","/_next/static/chunks/3pomb8r7ja54n.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/178kgr5-cejk9.js","/_next/static/chunks/1v5ewlr55okcj.js","/_next/static/chunks/3jnlvw-emqotx.js"],"SignupCTA"] 3b:["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 font-mono text-[12px] uppercase tracking-[0.1em] text-[color:var(--fg-3)]","children":[["$","time",null,{"dateTime":"2026-04-03T13:55:01.000Z","children":"April 3, 2026"}],["$","span",null,{"aria-hidden":true,"children":"·"}],["$","span",null,{"children":"00:06:12"}],false]}] 42:T47a,

In today’s episode of Cybersecurity Today, we break down the most critical cyber threats shaping April 2026. A major European Commission cloud breach linked to a stolen AWS key highlights the cascading impact of supply chain attacks, exposing data across dozens of EU institutions.

We also uncover a sophisticated Axios npm supply chain compromise tied to North Korean actors, showing how social engineering is now targeting open-source maintainers at scale. Meanwhile, attackers are actively exploiting the React2Shell vulnerability in Next.js apps, compromising hundreds of systems and harvesting cloud credentials, API keys, and sensitive secrets.

Plus, we analyze a $285 million crypto governance takeover, new ShareFile pre-auth RCE vulnerabilities, and SparkCat mobile malware stealing crypto wallet recovery phrases directly from photo galleries.

This episode explores a key theme: identity, trust, and human workflows are now the primary attack surface not just code vulnerabilities.