Weekly news update - 20.2.2026

Cloud: The npm Supply Chain Breach A significant breach in the npm registry has exposed sensitive cloud secrets, highlighting a persistent weakness in how we manage dependencies. For Cloud Architects and CISOs, this serves as a blunt reminder that your security is only as strong as your third-party code. The takeaway: it is time to move beyond trust and implement rigorous audits of all external dependencies and service connections. Cybersecurity: The Rise of Autonomous AI Threats We are entering a new era where autonomous AI threats are no longer theoretical. Global data leaks involving billions of records have surged as companies struggle to secure privileged user accounts against AI-driven intrusions. As attackers move from manual exploits to automated, self-evolving scripts, traditional defense perimeters are proving insufficient. AI/ML: The Asymmetry of Risk AI has officially become a force multiplier for attackers, compressing weeks of reconnaissance into mere days. The current challenge lies in the asymmetry of defense: while attackers can iterate rapidly with little oversight, defensive AI must operate within strict governance and human review frameworks. To close this gap, organizations must prioritize real-time, machine-readable visibility of their entire attack surface. https://www.linkedin.com/pulse/weekly-news-update-2022026-eyal-estrin--ajsuf/