⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and More

Weekly cybersecurity roundup reporting a high-risk supply-chain compromise of the Axios npm package (malicious WAVESHAPER.V2 pushed via a maintainer account, attributed to UNC1069), multiple zero-day vulnerabilities actively exploited (Chrome CVE-2026-5281; TrueConf CVE-2026-3502; FortiClient EMS CVE-2026-35616), a large source-code leak from Anthropic's Claude Code, and numerous malware/infostealer campaigns (DeepLoad, Venom Stealer, Mirax, Phantom/SHub/PXA stealers). The report emphasizes systemic trends: attackers targeting CI/CD and build pipelines, escalation of device-code phishing, ClickFix social engineering, and broad downstream exposure from compromised widely used components.