42:I[185,["/_next/static/chunks/2ys9ev5m3_24i.js","/_next/static/chunks/3pomb8r7ja54n.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/178kgr5-cejk9.js","/_next/static/chunks/1v5ewlr55okcj.js","/_next/static/chunks/3jnlvw-emqotx.js"],"SendEmailButton"] 44:I[63625,["/_next/static/chunks/2ys9ev5m3_24i.js","/_next/static/chunks/3pomb8r7ja54n.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/178kgr5-cejk9.js","/_next/static/chunks/1v5ewlr55okcj.js","/_next/static/chunks/3jnlvw-emqotx.js"],"AddToLibraryButton"] 45:I[29721,["/_next/static/chunks/2ys9ev5m3_24i.js","/_next/static/chunks/3pomb8r7ja54n.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/178kgr5-cejk9.js","/_next/static/chunks/1v5ewlr55okcj.js","/_next/static/chunks/3jnlvw-emqotx.js"],"ShareButton"] 46:I[58016,["/_next/static/chunks/2ys9ev5m3_24i.js","/_next/static/chunks/3pomb8r7ja54n.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/178kgr5-cejk9.js","/_next/static/chunks/1v5ewlr55okcj.js","/_next/static/chunks/3jnlvw-emqotx.js"],"ProcessEpisodeButton"] 47:I[45269,["/_next/static/chunks/2ys9ev5m3_24i.js","/_next/static/chunks/3pomb8r7ja54n.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/178kgr5-cejk9.js","/_next/static/chunks/1v5ewlr55okcj.js","/_next/static/chunks/3jnlvw-emqotx.js"],"SignupCTA"] 3a:["$","time",null,{"dateTime":"2026-04-05T13:30:09.000Z","children":"April 5, 2026"}] 3b:["$","span",null,{"aria-hidden":true,"children":"·"}] 3c:["$","span",null,{"children":"00:06:38"}] 43:T48c,

In today’s Cybersecurity Daily, we break down the biggest threats shaping April 2026. A coordinated npm supply chain attack involving 36 malicious packages is targeting developers through post-install scripts, exploiting Redis and PostgreSQL to deploy persistent backdoors and steal sensitive data.

We also uncover new details behind the Axios npm hack, where attackers used a fake Microsoft Teams error to socially engineer a maintainer and inject malware into widely used packages. Meanwhile, device code phishing attacks have surged over 37x, allowing attackers to hijack sessions and bypass traditional credential-based defenses.

Plus, we analyze the European Commission cloud breach, showing how a single compromised AWS key led to multi-entity data exposure, along with critical ShareFile RCE vulnerabilities and stealthy Linux PHP web shell persistence techniques.

The key takeaway: modern cyber attacks are shifting from exploits to identity, trust, and automation abuse and defenders must adapt fast.