BeazleySecurity-Quarterly-Threat-Report-Q1-2026.md

Q1 2026 threat report: Beazley Security Labs documents a major AI-assisted developer supply-chain campaign (TeamPCP) that backdoored Trivy and propagated to Checkmarx, LiteLLM and 66+ packages with confirmed downstream breaches (Cisco, EU Commission), highlights Anthropic Mythos accelerating AI-driven vulnerability discovery and shrinking exploit timelines, details a destructive Iran-linked Handala attack that used Microsoft Intune to wipe >200,000 devices at Stryker, and reviews persistent ransomware, BEC, and infostealer trends — concluding defenders must prioritize rapid detection/response, assume potential compromise on exposed systems, and enforce defense-in-depth.