There are too many stories to cover! - Threat Wire

Weekly cybersecurity news roundup covering several major stories: Team PCP's ongoing supply chain attacks including a Cisco data breach via stolen AWS keys; malicious versions of the Axios npm package (versions 1.14.1 and 0.3.4) attributed to North Korean threat actors, containing a multi-stage payload with arbitrary code execution and data exfiltration; zero-day use-after-free vulnerabilities in Chrome (CVE-2026-5281 affecting WebGPU/Dawn) and Firefox (CVE-2022-4688, CVSS 10, sandbox escape); AWS launching AI-powered security and DevOps agents for autonomous pentesting; Railway's CDN misconfiguration leaking authenticated data; AI-discovered vulnerabilities in Vim and Emacs using a single prompt; LinkedIn illegally collecting browser plugin data; Anthropic's Claude source code accidentally pushed to an npm package; and NIST updating DNS security guidance for the first time in over a decade.