6 Zero-Days Exploited NOW, Lazarus Poisons npm, AI-Generated Malware & More | HN62

About this episode

This episode covers the latest cybersecurity threats including zero-day vulnerabilities and major data breaches.

Microsoft just dropped patches for SIX actively exploited zero-day vulnerabilities — and that's just the beginning. In this week's Hacking News, we break down the February 2026 Patch Tuesday emergency, North Korea's Lazarus Group poisoning npm and PyPI through fake job recruiters, nation-state hackers weaponizing Google's Gemini AI (including malware that writes its own payloads), a massive Dutch telecom breach affecting 6.2 million people, and a U.S. government contractor breach that ballooned from 4 million to potentially tens of millions affected. This is Exploit Brokers by Forgebound Research — cybersecurity news, threat intelligence, and insights. Whether you're a security analyst, developer, or just someone who wants to stay informed, this episode has something for you. 🔔 Subscribe and hit the bell so you never miss an episode. ⭐ Listening on Spotify or Apple Podcasts? A follow and 5-star rating helps others find the show. --- ⏱️ TIMESTAMPS 0:00 — Cold Open: Did You Run Windows Update? 0:51 — Forge OS Intro 0:55 — Welcome & CTA 1:20 — Microsoft Patch Tuesday: 6 Actively Exploited Zero-Days 6:08 — Lazarus Group "GraphAlgo": Fake Recruiters Poison npm & PyPI 10:02 —…

People in this episode

Host: Cipherceval

Topics covered

• zero-day vulnerabilities
• cybersecurity
• malware
• nation-state hacking
• data breaches
• threat intelligence

Keywords

• zero-day
• cybersecurity
• malware
• data breach
• Lazarus Group
• Google Gemini AI
• Patch Tuesday

Mentioned in this episode

Organizations: Microsoft, Lazarus Group, npm, PyPI, Google, Odido, Conduent

Products: Gemini AI

Places: Dutch, U.S.

More episodes of Exploit Brokers By Forgebound Research - Tech and Hacking News Commentary

• Dual CVSS 10.0 Cisco Flaws, AI Malware Assembly Line, Qualcomm Zero-Day & More | HN65 · March 26, 2026 · 23 min
• Cisco & Dell CVSS 10.0 Exploited for YEARS, Claude AI Jailbroken, ScarCruft Jumps Air Gaps | HN64 · March 12, 2026 · 28 min
• 600 Firewalls Breached by AI in 5 Weeks — Plus Chrome Zero-Day, CVSS 9.9 RCE & AI-Powered Malware | HN63 · March 5, 2026 · 29 min
• State Hackers Hit 37 Countries, BeyondTrust CVSS 9.9 RCE, Signal Hijacked & More | HN Ep. 61 · February 19, 2026 · 22 min
• CRITICAL: Office Zero-Day + WordPress Admin Takeover + Chrome Extensions Stealing AI Chats | EP 60 · January 29, 2026 · 25 min
• I'm Back and Introducing Forgebound Research | The Rebrand · January 12, 2026 · 9 min