https://blog.dansec.red/vendors/european-commission/Recent content in European Commission on DanSec DailyHugoen-gbSun, 05 Apr 2026 00:00:00 +0000https://blog.dansec.red/posts/2026-04-05-cybersecurity-news/Sun, 05 Apr 2026 00:00:00 +0000https://blog.dansec.red/posts/2026-04-05-cybersecurity-news/<h2 id="major-incidents-or-breaches">Major Incidents or Breaches</h2> <ul> <li>The European Commission confirmed a data breach resulting from the Trivy supply chain attack, with attackers exfiltrating over 300GB of data from the Commission’s AWS environment, including personal information.</li> <li>Hackers reportedly stole Cisco source code as part of an ongoing supply chain hacking campaign.</li> <li>The FBI disclosed that a recent hack of its wiretap tools poses a national security risk.</li> </ul> <h2 id="newly-discovered-vulnerabilities">Newly Discovered Vulnerabilities</h2> <ul> <li>Fortinet released out-of-band patches for a critical vulnerability in FortiClient EMS, tracked as CVE-2026-35616. The flaw has a high CVSS score and has been actively exploited in the wild.</li> </ul> <h2 id="notable-threat-actor-activity">Notable Threat Actor Activity</h2> <ul> <li>Researchers identified 36 malicious npm packages disguised as Strapi CMS plugins. These packages delivered various payloads to exploit Redis and PostgreSQL databases, enabling persistent implants.</li> <li>Axios maintainers detailed a targeted social engineering campaign where a developer was tricked by a fake Microsoft Teams error fix, leading to the hijacking of a maintainer account. The campaign is believed to be linked to a sophisticated threat actor.</li> </ul> <h2 id="trends-tools-or-tactics-of-interest">Trends, Tools, or Tactics of Interest</h2> <ul> <li>Device code phishing attacks leveraging the OAuth 2.0 Device Authorization Grant flow have surged 37-fold this year, driven by the proliferation of new phishing kits available online.</li> <li>Malicious actors are distributing the leaked Claude AI code online, bundling it with additional malware.</li> </ul>