OpenAI Identifies Third-Party Security Issue

OpenAI discovered a security issue with third-party tool Axios, compromised on March 31 in a North Korea-linked supply chain attack. No user data was accessed or systems compromised.

North Korean SW Supply Chain Attack

North Korean hackers compromised Axios JavaScript library through social engineering attack, impersonating company founder using AI-generated videos. Malicious code was inserted into npm repository, affecting nearly 100 million weekly downloads.

Daily Cybersecurity Threats and Vulnerabilities

Multiple cybersecurity incidents reported including F5 BIG-IP vulnerabilities, Axios NPM supply chain compromise, NoVoice Android malware affecting 2.3M devices, and targeted attacks by China-linked TA416 and North Korean Kimsuky groups.