Thinkst-Scapes-Q1-2026.md

ThinkstScapes Q1 2026 is a curated quarterly roundup of security research and incidents (Jan–Mar 2026) covering browser-based phishing and UI-deception techniques, CSS/SVG abuse, proposals for JavaScript integrity (WAICT), the accelerating role of LLMs in finding and weaponizing vulnerabilities, tooling and attack classes for AI agents (prompt injection, invisible Unicode in skills), accidental secret leakage from LLM tool directories, cloud honeytoken approaches, IaC/AWS-Terraform default gaps, hardware bit-flip research, and a notable active exploitation case: the Coruna iOS exploit kit that has been observed in multiple real-world campaigns.