CSO Online
Dark Reading
Dark Web Informer
Europol
Krebs on Security
NSA
Reuters
Security Affairs
The Hacker News
Wired
ZDNET
Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets
Wed Mar 11 2026
Cybersecurity researchers have discovered five malicious Rust crates that masquerade as time-related utilities to transmit .env file data to the threat actors. The Rust packages, published to crates.io, are listed below - chrono_anchor dnp3times time_calibrator time_calibrators time-sync The crates, per Socket, impersonate timeapi.io and were published between late February and early March...
The Hacker News
6 Mittel gegen Security-Tool-Wildwuchs
Wed Mar 11 2026
loading="lazy" width="400px">Viel hilft nicht immer viel.
CSO Online
Jack & Jill went up the hill — and an AI tried to hack them
Wed Mar 11 2026
What happens when an autonomous AI agent is turned loose on another autonomous AI agent? It chains together bugs that humans would consider benign, easily bypasses authentication controls, and even un
CSO Online
Microsoft Patch Tuesday, March 2026 Edition
Wed Mar 11 2026
Microsoft Corp. today pushed security updates to fix at least 77 vulnerabilities in its Windows operating systems and other software. There are no pressing "zero-day" flaws this month (compared to February's five zero-day treat), but as usual some patches may deserve more rapid attention from organizations using Windows. Here are a few highlights from this month's Patch Tuesday.
Krebs on Security
Microsoft Patch Tuesday security updates for March 2026 fixed 84 bugs
Tue Mar 10 2026
Microsoft Patch Tuesday security updates for March 2026 addressed 84 vulnerabilities in its products. None of the flaws are known to be exploited so far. Microsoft Patch Tuesday security updates for March 2026 addressed 84 vulnerabilities across its products. The IT giant addressed flaws across Windows, Office, Edge, Azure, SQL Server, Hyper-V, and ReFS. Including […]
Security Affairs
Threat intelligence by ESET is a game changer
Tue Mar 10 2026
Cyber threats have gained the upper hand on many global organizations, attacking through a relentless cycle of new phishing scams, malware attacks and deepfake incidents.
CSO Online
The CSO role is evolving fast with AI in Cyber Defense strategy
Tue Mar 10 2026
AI and cybersecurity are proving to be extremely challenging for organisations.
CSO Online
Attackers exploit FortiGate devices to access sensitive network information
Tue Mar 10 2026
Attackers are exploiting FortiGate devices to breach networks and steal configuration data containing service account credentials and network details. SentinelOne researchers warn that attackers are exploiting vulnerabilities or weak credentials in FortiGate devices to gain initial access to corporate networks. Once inside, they extract configuration files that may contain service account credentials and information about […]
Security Affairs
March Patch Tuesday: Three high severity holes in Microsoft Office
Tue Mar 10 2026
Three high severity holes in Microsoft’s Office suite headline the 78 issues listed in the March Patch Tuesday releases, which, grateful CSOs will notice, contain no surprise zero day vulnerabilities.
CSO Online
DHS Ousts CBP Privacy Officers Who Questioned ‘Illegal’ Orders
Tue Mar 10 2026
Department of Homeland Security leaders removed top privacy officers who objected to mislabeling government records to block their public release, WIRED has learned.
Wired
How to Stop AI Data Leaks: A Webinar Guide to Auditing Modern Agentic Workflows
Tue Mar 10 2026
Artificial Intelligence (AI) is no longer just a tool we talk to; it is a tool that does things for us. These are called AI Agents. They can send emails, move data, and even manage software on their own. But there is a problem. While these agents make work faster, they also open a new "back door" for hackers. The Problem: "The Invisible Employee" Think of an AI Agent like a new employee who has...
The Hacker News
FortiGate Devices Exploited to Breach Networks and Steal Service Account Credentials
Tue Mar 10 2026
Cybersecurity researchers are calling attention to a new campaign where threat actors are abusing FortiGate Next-Generation Firewall (NGFW) appliances as entry points to breach victim networks. The activity involves the exploitation of recently disclosed security vulnerabilities or weak credentials to extract configuration files containing service account credentials and network topology...
The Hacker News
KadNap Malware Infects 14,000+ Edge Devices to Power Stealth Proxy Botnet
Tue Mar 10 2026
Cybersecurity researchers have discovered a new malware called KadNap that's primarily targeting Asus routers to enlist them into a botnet for proxying malicious traffic. The malware, first detected in the wild in August 2025, has expanded to over 14,000 infected devices, with more than 60% of victims located in the U.S., according to the Black Lotus Labs team at Lumen. A lesser number of...
The Hacker News
GPS Attacks Near Iran Are Wreaking Havoc on Delivery and Mapping Apps
Tue Mar 10 2026
Delivery apps are glitching and navigation routes are changing abruptly thanks to electronic warfare disrupting the satellite signals that power everything from missiles to your ride home.
Wired
APT28 conducts long-term espionage on Ukrainian forces using custom malware
Tue Mar 10 2026
APT28 used BEARDSHELL and COVENANT malware to spy on Ukrainian military personnel, enabling long-term surveillance since April 2024. The Russia-linked group APT28 (aka UAC-0001, aka Fancy Bear, Pawn Storm, Sofacy Group, Sednit, BlueDelta, and STRONTIUM) has used BEARDSHELL and COVENANT malware to conduct long-term surveillance of Ukrainian military personnel. According to ESET, the campaign began in April 2024 and relies on […]
Security Affairs
Threat actors use custom AuraInspector to harvest data from Salesforce systems
Tue Mar 10 2026
Attackers are mass-scanning Salesforce Experience Cloud sites using a modified AuraInspector tool to exploit misconfigurations and access sensitive data. Salesforce CSOC warns that threat actors are mass-scanning publicly accessible Experience Cloud sites using a modified version of the AuraInspector tool. AuraInspector is an open‑source command‑line tool released by Google/Mandiant to audit Salesforce Aura and Experience […]
Security Affairs
New "LeakyLooker" Flaws in Google Looker Studio Could Enable Cross-Tenant SQL Queries
Tue Mar 10 2026
Cybersecurity researchers have disclosed nine cross-tenant vulnerabilities in Google Looker Studio that could have permitted attackers to run arbitrary SQL queries on victims' databases and exfiltrate sensitive data within organizations' Google Cloud environments. The shortcomings have been collectively named LeakyLooker by Tenable. There is no evidence that the vulnerabilities were exploited in...
The Hacker News
Devs looking for OpenClaw get served a GhostClaw RAT
Tue Mar 10 2026
A malicious npm package posing as an OpenClaw Installer has been caught deploying a remote access trojan (RAT) on victim machines, according to new JFrog research.
CSO Online
The Zero-Day Scramble is Avoidable: A Guide to Attack Surface Reduction
Tue Mar 10 2026
You can't control when the next critical vulnerability drops. You can control how much of your environment is exposed when it does. The problem is that most teams have more internet-facing exposure than they realise. Intruder's Head of Security digs into why this happens and how teams can manage it deliberately. Time-to-exploit is shrinking The larger and less controlled your attack surface is,...
The Hacker News
U.S. CISA adds Ivanti EPM, SolarWinds, and Omnissa Workspace One flaws to its Known Exploited Vulnerabilities catalog
Tue Mar 10 2026
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds EPM, SolarWinds, and Omnissa Workspace One flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Apple, Rockwell, and Hikvision flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the flaws added to the catalog: The first vulnerability added to the catalog is […]
Security Affairs
APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military
Tue Mar 10 2026
The Russian state-sponsored hacking group tracked as APT28 has been observed using a pair of implants dubbed BEARDSHELL and COVENANT to facilitate long‑term surveillance of Ukrainian military personnel. The two malware families have been put to use since April 2024, ESET said in a new report shared with The Hacker News. APT28, also tracked as Blue Athena, BlueDelta, Fancy Bear, Fighting Ursa,...
The Hacker News
The OT security time bomb: Why legacy industrial systems are the biggest cyber risk nobody wants to fix
Tue Mar 10 2026
When I first secured a production line, part of the control system was still running on an unpatched Windows XP machine tucked under a lab table — right next to the state-of-the-art GMP manufacturing
CSO Online
OpenAI to acquire Promptfoo to strengthen AI agent security testing
Tue Mar 10 2026
OpenAI said it plans to acquire AI testing startup Promptfoo, a move aimed at strengthening security checks for AI agents as enterprises move toward deploying autonomous systems in business workflows.
CSO Online
Ericsson US confirms breach after third-party provider attack
Tue Mar 10 2026
Ericsson US reports a data breach after attackers hacked a service provider, exposing employee and customer information. Ericsson Inc., the U.S. branch of the Swedish telecom giant, disclosed a data breach after a service provider was hacked. The attack compromised the personal information of an unspecified number of employees and customers. “On April 28, 2025, […]
Security Affairs
Law enforcement disrupted Tycoon 2FA phishing-as-a-service platform
Tue Mar 10 2026
Authorities disrupted the Tycoon 2FA phishing-as-a-service platform used to send millions of phishing emails to over 500,000 orgs worldwide. The joint effort, led by Microsoft, Europol, and industry partners, aimed to target the infrastructure of Tycoon 2FA phishing-as-a-service platform responsible for tens of millions of fraudulent emails reaching over 500,000 organizations each month worldwide. By […]
Security Affairs
Why access decisions are becoming the weakest link in identity security
Tue Mar 10 2026
In my nearly two decades leading identity and risk programs, I’ve learned a sobering truth that every CISO eventually confronts: hackers don’t hack in — they log in.
CSO Online
I replaced manual pen tests with automation. Here’s what I learned.
Tue Mar 10 2026
More accreditation and compliance requirements have been added in response to cyber incidents.
CSO Online
Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool
Tue Mar 10 2026
Salesforce has warned of an increase in threat actor activity that's aimed at exploiting misconfigurations in publicly accessible Experience Cloud sites by making use of a customized version of an open-source tool called AuraInspector. The activity, per the company, involves the exploitation of customers' overly permissive Experience Cloud guest user configurations to obtain access to sensitive...
The Hacker News
Security-Tools für KI-Infrastrukturen – ein Kaufratgeber
Tue Mar 10 2026
Tools, die die KI-Infrastruktur unter die Lupe nehmen, optimieren und absichern, liegen im Trend.
CSO Online
When AI safety constrains defenders more than attackers
Tue Mar 10 2026
Security teams are being urged to adopt AI copilots for threat modeling, phishing simulations, and SOC workflows.
CSO Online
CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploited
Tue Mar 10 2026
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerability list is as follows - CVE-2021-22054 (CVSS score: 7.5) - A server-side request forgery (SSRF) vulnerability in Omnissa Workspace One UEM (formerly VMware Workspace One UEM) that...
The Hacker News
Hacker abusing .arpa domain to evade phishing detection, says Infoblox
Tue Mar 10 2026
A threat actor has found a new way to evade phishing detection defenses: Manipulate the .
CSO Online
FBI alert: scammers target zoning permit applicants
Mon Mar 09 2026
The FBI warns of phishing attacks where crooks impersonate U.S. city and county officials to target people requesting planning and zoning permits. The FBI warns that scammers are impersonating U.S. city and county officials in phishing campaigns targeting businesses and individuals applying for planning or zoning permits. Using publicly available information, attackers craft messages that […]
Security Affairs
Russia-linked hackers target Signal, WhatsApp of officials globally
Mon Mar 09 2026
Russia-linked hackers are targeting Signal and WhatsApp accounts of government and military officials worldwide, warns Dutch intelligence. Dutch intelligence agencies (MIVD and AIVD) warn of a global campaign by Russia-linked threat actors aiming to compromise Signal and WhatsApp accounts. The operation targets government officials, civil servants, and military personnel, highlighting growing cyber risks to sensitive […]
Security Affairs
Malicious npm Package Posing as OpenClaw Installer Deploys RAT, Steals macOS Credentials
Mon Mar 09 2026
Cybersecurity researchers have discovered a malicious npm package that masquerades as an OpenClaw installer to deploy a remote access trojan (RAT) and steal sensitive data from compromised hosts. The package, named "@openclaw-ai/openclawai," was uploaded to the registry by a user named "openclaw-ai" on March 3, 2026. It has been downloaded 178 times to date. The library is still available for...
The Hacker News
CVE program funding secured, easing fears of repeat crisis
Mon Mar 09 2026
The Cybersecurity and Infrastructure Security Agency and the MITRE Corporation have renegotiated the contract supporting the 26-year-old Common Vulnerabilities and Exposures Program in a way that elim
CSO Online
UNC4899 Breached Crypto Firm After Developer AirDropped Trojanized File to Work Device
Mon Mar 09 2026
The North Korean threat actor known as UNC4899 is suspected to be behind a sophisticated cloud compromise campaign targeting a cryptocurrency organization in 2025 to steal millions of dollars in cryptocurrency. The activity has been attributed with moderate confidence to the state-sponsored adversary, which is also tracked under the cryptonyms Jade Sleet, PUKCHONG, Slow Pisces, and...
The Hacker News
⚡ Weekly Recap: Qualcomm 0-Day, iOS Exploit Chains, AirSnitch Attack & Vibe-Coded Malware
Mon Mar 09 2026
Another week in cybersecurity. Another week of "you've got to be kidding me." Attackers were busy. Defenders were busy. And somewhere in the middle, a whole lot of people had a very bad Monday morning. That's kind of just how it goes now. The good news? There were some actual wins this week. Real ones. The kind where the good guys showed up, did the work, and made a dent. It doesn't always...
The Hacker News
OpenAI says Codex Security found 11,000 high-impact bugs in a month
Mon Mar 09 2026
OpenAI’s new AppSec agent, Codex Security, has already flagged over 11,000 high-severity and critical flaws in real-world codebases during its first 30 days of research testing.
CSO Online
Can the Security Platform Finally Deliver for the Mid-Market?
Mon Mar 09 2026
Mid-market organizations are constantly striving to achieve security levels on a par with their enterprise peers. With heightened awareness of supply chain attacks, your customers and business partners are defining the security level you must meet. What if you could be the enabler for your organization to remain competitive — and help win business — by easily demonstrating that you meet these...
The Hacker News
Cognizant’s TriZetto Provider Solutions data breach impacted over 3.4 million patients
Mon Mar 09 2026
A breach at Cognizant’s TriZetto Provider Solutions exposed sensitive health data belonging to more than 3.4 million patients. A data breach at Cognizant’s TriZetto Provider Solutions exposed sensitive information belonging to more than 3.4 million patients. At this time, no ransomware group has claimed responsibility for the attack yet. TriZetto Provider Solutions is a healthcare […]
Security Affairs
NIS-2: Tausende reißen BSI-Frist und riskieren Strafen
Mon Mar 09 2026
Das deutsche Gesetz zur Umsetzung der NIS-2-Richtlinie ist am 6.
CSO Online
Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection and Data Theft
Mon Mar 09 2026
Two Google Chrome extensions have turned malicious after what appears to be a case of ownership transfer, offering attackers a way to push malware to downstream customers, inject arbitrary code, and harvest sensitive data. The extensions in question, both originally associated with a developer named "akshayanuonline@gmail.com" (BuildMelon), are listed below - QuickLens - Search Screen with...
The Hacker News
Rogues gallery: 15 worst ransomware groups active today
Mon Mar 09 2026
Ransomware-as-a-service (RaaS) models, double extortion tactics, and increasing adoption of AI characterize the evolving ransomware threat landscape.
CSO Online
Anthropic Claude Opus AI model discovers 22 Firefox bugs
Mon Mar 09 2026
Anthropic used Claude Opus 4.6 to identify 22 Firefox vulnerabilities, most of which were high severity, all of which were fixed in Firefox 148, released in January 2026. Anthropic discovered 22 security vulnerabilities in Firefox using its Claude Opus 4.6 AI model in January 2026. Mozilla addressed these issues in Firefox 148. The researchers state […]
Security Affairs
Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure
Mon Mar 09 2026
High-value organizations located in South, Southeast, and East Asia have been targeted by a Chinese threat actor as part of a years-long campaign. The activity, which has targeted aviation, energy, government, law enforcement, pharmaceutical, technology, and telecommunications sectors, has been attributed by Palo Alto Networks Unit 42 to a previously undocumented threat activity group dubbed...
The Hacker News
4 ways to prepare your SOC for agentic AI
Mon Mar 09 2026
a way to automate alert triage, threat investigation and eventually higher-level functions.
CSO Online
PQC roadmap remains hazy as vendors race for early advantage
Mon Mar 09 2026
Post-quantum cryptography (PQC) has long sat on the periphery of enterprise security, with experts calling it inevitable but not urgent.
CSO Online
How AI Assistants are Moving the Security Goalposts
Sun Mar 08 2026
AI-based assistants or "agents" -- autonomous programs that have access to the user's computer, files, online services and can automate virtually any task -- are growing in popularity with developers and IT workers. But as so many eyebrow-raising headlines over the past few weeks have shown, these powerful and assertive new tools are rapidly shifting the security priorities for organizations, while blurring the lines between data and code, trusted co-worker and insider threat, ninja hacker and novice code jockey.
Krebs on Security
Critical Nginx UI flaw CVE-2026-27944 exposes server backups
Sun Mar 08 2026
Nginx UI flaw CVE-2026-27944 lets attackers download and decrypt server backups without authentication, exposing sensitive data on public management interfaces. A critical vulnerability in Nginx UI, tracked as CVE-2026-27944 (CVSS score of 9.8), allows attackers to download and decrypt full server backups without authentication. The flaw poses a serious risk to organizations exposing the management […]
Security Affairs
Massive GitHub malware operation spreads BoryptGrab stealer
Sun Mar 08 2026
Trend Micro found BoryptGrab stealer spreading through 100+ GitHub repositories, stealing browser data, crypto wallets, system information, and user files. Trend Micro uncovered a campaign distributing the BoryptGrab information stealer through more than 100 GitHub repositories. BoryptGrab is designed to collect browser and cryptocurrency wallet data, system details, and common files. Some variants also deploy […]
Security Affairs
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 87
Sun Mar 08 2026
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Malware Reverse Engineering is no longer a human problem! StegaBin: 26 Malicious npm Packages Use Pastebin Steganography to Deploy Multi-Stage Credential Stealer Inside a fake Google security check that becomes a browser RAT SloppyLemming […]
Security Affairs
Security Affairs newsletter Round 566 by Pierluigi Paganini – INTERNATIONAL EDITION
Sun Mar 08 2026
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. FBI probing intrusion into a system managing sensitive surveillance information Reading White House President Trump’s Cyber […]
Security Affairs
FBI probing intrusion into a system managing sensitive surveillance information
Sat Mar 07 2026
The Federal Bureau of Investigation (FBI) is probing suspicious activity on an internal system containing sensitive surveillance and investigation data. The FBI is investigating suspicious cyber activity affecting an internal system that stores sensitive data tied to surveillance operations and investigations, The Associated Press reports. According to a notification sent to members of the United […]
Security Affairs
Reading White House President Trump’s Cyber Strategy for America (March 2026)
Sat Mar 07 2026
White House released President Trump’s Cyber Strategy for America, framing cyberspace as a strategic domain to project power and counter growing cyber threats The White House has released “President Trump’s Cyber Strategy for America,” a document that outlines how the United States intends to maintain dominance in cyberspace and confront an increasingly hostile digital landscape. […]
Security Affairs
Tarnung als Taktik: Warum Ransomware-Angriffe raffinierter werden
Mon Mar 09 2026
Statt eines kurzen, aber sehr schmerzhaften Stiches setzen Cyberkrimelle zunehmend darauf, sich in ihren Opfern festzubeißen und beständig auszusaugen.
CSO Online
OpenAI Codex Security Scanned 1.2 Million Commits and Found 10,561 High-Severity Issues
Sat Mar 07 2026
OpenAI on Friday began rolling out Codex Security, an artificial intelligence (AI)-powered security agent that's designed to find, validate, and propose fixes for vulnerabilities. The feature is available in a research preview to ChatGPT Pro, Enterprise, Business, and Edu customers via the Codex web with free usage for the next month. "It builds deep context about your project to identify...
The Hacker News
CBP Used Online Ad Data to Track Phone Locations
Sat Mar 07 2026
Plus: Proton helped the FBI identify a protester, the Leakbase cybercrime forum was busted in an international operation, and more.
Wired
Iran-linked hackers target IP cameras across Israel and Gulf states for military intelligence
Sat Mar 07 2026
Researchers observed Iran-linked actors targeting IP cameras across Israel and Gulf countries, likely to support military intelligence and battle damage assessment. According to the Check Point Cyber Security Report 2026, cyber operations are increasingly used to support military activity and battle damage assessment (BDA). During the Israel-Iran tensions, researchers from Check Point Software Technologies observed […]
Security Affairs
Anthropic Finds 22 Firefox Vulnerabilities Using Claude Opus 4.6 AI Model
Sat Mar 07 2026
Anthropic on Friday said it discovered 22 new security vulnerabilities in the Firefox web browser as part of a security partnership with Mozilla. Of these, 14 have been classified as high, seven have been classified as moderate, and one has been rated low in severity. The issues were addressed in Firefox 148, released late last month. The vulnerabilities were identified over a two-week period in...
The Hacker News
How Each Gulf Country Is Intercepting Iranian Missiles and Drones
Sat Mar 07 2026
As missiles and drones cross the region’s skies, the Gulf’s layered air-defense networks—from THAAD to Patriot batteries—are being tested in real time.
Wired
Trump’s cyber strategy emphasizes offensive operations, deregulation, AI
Fri Mar 06 2026
The White House released President Donald Trump’s long-awaited cybersecurity strategy, a lean seven-page blueprint that breaks from past approaches by placing offensive cyber operations at the center
CSO Online
Iran-linked MuddyWater deploys Dindoor malware against U.S. organizations
Fri Mar 06 2026
Iran-linked APT MuddyWater targeted U.S. organizations, deploying the new Dindoor backdoor across sectors including banks, airports, and nonprofits. Broadcom’s Symantec Threat Hunter Team uncovered a campaign by the Iran-linked MuddyWater (aka SeedWorm, TEMP.Zagros, Mango Sandstorm, TA450, and Static Kitten) APT group targeting several U.S. organizations. “Activity associated with Iranian APT group Seedworm has been spotted on the networks of multiple […]
Security Affairs
ClickFix attackers using new tactic to evade detection, says Microsoft
Fri Mar 06 2026
Threat actors are trying a different tactic to sucker employees into falling for ClickFix phishing attacks that install malware, says Microsoft.
CSO Online
The Future of Iran’s Internet Is More Uncertain Than Ever
Fri Mar 06 2026
Iran’s internet shutdown has reduced connectivity by 99 percent, with air strikes likely causing additional outages, and few workarounds remaining.
Wired
Only 30 minutes per quarter on cyber risk: Why CISO-board conversations are falling short
Fri Mar 06 2026
Cybersecurity is, as it should be in this era of AI-driven cyberattacks, a regular item on enterprise board agendas.
CSO Online
Cisco flags ongoing exploitation of two recently patched Catalyst SD-WAN flaws
Fri Mar 06 2026
Cisco warns that two recently patched Catalyst SD-WAN flaws, CVE-2026-20128 and CVE-2026-20122, are already being actively exploited in the wild. Cisco warned customers that threat actors are actively exploiting two recently patched Catalyst SD-WAN vulnerabilities, CVE-2026-20128 and CVE-2026-20122. The networking giant urged organizations to apply the latest security updates to reduce the risk of compromise. […]
Security Affairs
FBI wiretap system tapped by hackers
Fri Mar 06 2026
The US Federal Bureau of Investigation (FBI) has identified a suspected incident on a network used to manage wiretaps and foreign intelligence surveillance warrants, CNN reported.
CSO Online
OAuth vulnerability in n8n automation platform could lead to system compromise
Fri Mar 06 2026
A weakness in the configuration of OAuth credentials opens up a stored XSS vulnerability in the n8n automation platform, researchers at Imperva have discovered.
CSO Online
Transparent Tribe Uses AI to Mass-Produce Malware Implants in Campaign Targeting India
Fri Mar 06 2026
The Pakistan-aligned threat actor known as Transparent Tribe has become the latest hacking group to embrace artificial intelligence (AI)-powered coding tools to strike targets with various implants. The activity is designed to produce a "high-volume, mediocre mass of implants" that are developed using lesser-known programming languages like Nim, Zig, and Crystal and rely on trusted services like...
The Hacker News
Microsoft warns of ClickFix campaign exploiting Windows Terminal to deliver Lumma Stealer
Fri Mar 06 2026
Microsoft warns of ClickFix campaign using Windows Terminal to deliver Lumma Stealer via social engineering attacks. Microsoft revealed a new ClickFix campaign where attackers exploit Windows Terminal to run a complex attack chain, ultimately deploying Lumma Stealer malware. The campaign uses social engineering to trick users into executing malicious commands, highlighting growing risks to Windows […]
Security Affairs
Multi-Stage VOID#GEIST Malware Delivering XWorm, AsyncRAT, and Xeno RAT
Fri Mar 06 2026
Cybersecurity researchers have disclosed details of a multi-stage malware campaign that uses batch scripts as a pathway to deliver various encrypted remote access trojan (RATs) payloads that correspond to XWorm, AsyncRAT, and Xeno RAT. The stealthy attack chain has been codenamed VOID#GEIST by Securonix Threat Research. At a high level, the obfuscated batch script is used to deploy a second...
The Hacker News
Targeted advertising is also targeting malware
Fri Mar 06 2026
Online ads are increasingly being used a means of introducing malware into organizations, according to The Media Trust.
CSO Online
From Ukraine to Iran, Hacking Security Cameras Is Now Part of War’s ‘Playbook’
Fri Mar 06 2026
New research shows hundreds of attempts by apparent Iranian state hackers to hijack consumer-grade cameras, timed to missile and drone strikes. Israel, Russia, and Ukraine have also adopted this trick.
Wired
Iran-nexus APT Dust Specter targets Iraq officials with new malware
Fri Mar 06 2026
A campaign by Iran-linked group Dust Specter is targeting Iraqi officials with phishing emails delivering new malware families. Zscaler ThreatLabz researchers linked the Iran-nexus group Dust Specter to a campaign targeting Iraqi government officials. Threat actors impersonated the country’s Ministry of Foreign Affairs in phishing messages that delivered previously unseen malware, including SPLITDROP, TWINTASK, TWINTALK, […]
Security Affairs
The MSP Guide to Using AI-Powered Risk Management to Scale Cybersecurity
Fri Mar 06 2026
Scaling cybersecurity services as an MSP or MSSP requires technical expertise and a business model that delivers measurable value at scale. Risk-based cybersecurity is the foundation of that model. When done right, it builds client trust, increases upsell opportunities, and drives recurring revenue. But to deliver this consistently and efficiently, you need the right technology and processes....
The Hacker News
Iran-Linked MuddyWater Hackers Target U.S. Networks With New Dindoor Backdoor
Fri Mar 06 2026
New research from Broadcom's Symantec and Carbon Black Threat Hunter Team has discovered evidence of an Iranian hacking group embedding itself in several U.S. companies' networks, including banks, airports, non-profit, and the Israeli arm of a software company. The activity has been attributed to a state-sponsored hacking group called MuddyWater (aka Seedworm). It's affiliated with the Iranian...
The Hacker News
Teenage hacker myth primed for a middle-age criminal makeover
Fri Mar 06 2026
The Hollywood image of criminal hackers being largely teenage ne’er do wells is due for an update.
CSO Online
U.S. CISA adds Apple, Rockwell, and Hikvision flaws to its Known Exploited Vulnerabilities catalog
Fri Mar 06 2026
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple, Rockwell, and Hikvision flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Apple, Rockwell, and Hikvision flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the flaws added to the catalog: CVE-2023-43000 is a use-after-free issue in the WebKit component. Apple […]
Security Affairs
Google GTIG: 90 zero-day flaws exploited in 2025 as enterprise targets grow
Fri Mar 06 2026
Google’s GTIG reports 90 zero-day vulnerabilities exploited in the wild in 2025, up from 78 in 2024, with a growing share targeting enterprise systems. Google’s Threat Intelligence Group (GTIG) identified 90 zero-day vulnerabilities exploited in the wild in 2025. While slightly below the 100 observed in 2023, the number increased from 78 in 2024, with […]
Security Affairs
China-Linked Hackers Use TernDoor, PeerTime, BruteEntry in South American Telecom Attacks
Fri Mar 06 2026
A China-linked advanced persistent threat (APT) actor has been targeting critical telecommunications infrastructure in South America since 2024, targeting Windows and Linux systems and edge devices with three different implants. The activity is being tracked by Cisco Talos under the moniker UAT-9244, describing it as closely associated with another cluster known as FamousSparrow. It's worth...
The Hacker News
Challenges and projects for the CISO in 2026
Fri Mar 06 2026
Sophisticated attacks and the incorporation of AI tools, talent shortages, and tight budgets are some of the challenges commonly cited when it comes to managing cybersecurity in organizations.
CSO Online
Zero-day exploits hit enterprises faster and harder
Fri Mar 06 2026
Google tracked 90 vulnerabilities exploited as zero-days last year, with Chinese cyberespionage groups doubling their count from 2024 and commercial surveillance vendors overtaking state-sponsored hac
CSO Online
Microsoft Reveals ClickFix Campaign Using Windows Terminal to Deploy Lumma Stealer
Fri Mar 06 2026
Microsoft on Thursday disclosed details of a new widespread ClickFix social engineering campaign that has leveraged the Windows Terminal app as a way to activate a sophisticated attack chain and deploy the Lumma Stealer malware. The activity, observed in February 2026, makes use of the terminal emulator program instead of instructing users to launch the Windows Run dialog and paste a command...
The Hacker News
Hikvision and Rockwell Automation CVSS 9.8 Flaws Added to CISA KEV Catalog
Fri Mar 06 2026
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Hikvision and Rockwell Automation products to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The critical-severity vulnerabilities are listed below - CVE-2017-7921 (CVSS score: 9.8) - An improper authentication vulnerability affecting...
The Hacker News
7 Anzeichen für akuten MSSP-Bedarf
Fri Mar 06 2026
Managed Security Service Provider können das Sicherheitsniveau nachhaltig steigern.
CSO Online
Europa im Visier von Cyber-Identitätsdieben
Fri Mar 06 2026
Deutsche Unternehmen müssen sich warm anziehen: Sowohl staatliche als auch „private“ Akteure haben es auf sie abgesehen.
CSO Online
LeakBase marketplace unplugged by cops in 14 countries
Fri Mar 06 2026
The LeakBase cyberforum, considered one of the world’s largest online marketplaces for cybercriminals to buy and sell stolen data and cybercrime tools, has been seized by the US, and arrests have also
CSO Online
Here’s Every Country Directly Impacted by the War on Iran
Thu Mar 05 2026
As the conflict in the Middle East continues to escalate, more than a dozen countries in the region have reportedly been affected by air strikes.
Wired
Phobos Ransomware admin faces up to 20 years after guilty plea
Thu Mar 05 2026
Russian national Evgenii Ptitsyn (43) pleaded guilty in the U.S. for his role in the Phobos ransomware operation. Russian national Evgenii Ptitsyn pleaded guilty in the US to wire fraud conspiracy for his role in the Phobos ransomware scheme. The man was arrested in South Korea in 2024 and extradited to the United States. He […]
Security Affairs
The Controversies Finally Caught Up to Kristi Noem
Thu Mar 05 2026
Donald Trump said he would replace the secretary of the Department of Homeland Security. Noem’s tenure was marked by aggressive anti-immigration tactics and ICE and CBP’s killing of two US protesters.
Wired
Cisco issues emergency patches for critical firewall vulnerabilities
Thu Mar 05 2026
Cisco has handed security teams one of the largest ever patching workloads affecting its firewall products, including fixes for two ‘perfect 10’ vulnerabilities in the company’s Secure Firewall Manage
CSO Online
Preparing for the Quantum Era: Post-Quantum Cryptography Webinar for Security Leaders
Thu Mar 05 2026
Most organizations assume encrypted data is safe. But many attackers are already preparing for a future where today’s encryption can be broken. Instead of trying to decrypt information now, they are collecting encrypted data and storing it so it can be decrypted later using quantum computers. This tactic—known as “harvest now, decrypt later”—means sensitive data transmitted today could become...
The Hacker News
Russian APT targets Ukraine with BadPaw and MeowMeow malware
Thu Mar 05 2026
Researchers uncovered a Russian campaign targeting Ukrainian entities with new malware families BadPaw and MeowMeow delivered through phishing emails. Researchers reported a phishing campaign linked to Russia that targets Ukrainian organizations using two new malware families, BadPaw and MeowMeow. The attack chain begins with a phishing email carrying a link to a ZIP archive. When […]
Security Affairs
Cisco Confirms Active Exploitation of Two Catalyst SD-WAN Manager Vulnerabilities
Thu Mar 05 2026
Cisco has disclosed that two more vulnerabilities affecting Catalyst SD-WAN Manager (formerly SD-WAN vManage) have come under active exploitation in the wild. The vulnerabilities in question are listed below - CVE-2026-20122 (CVSS score: 7.1) - An arbitrary file overwrite vulnerability that could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system....
The Hacker News
Coruna iOS exploit kit moved from spy tool to mass criminal campaign in under a year
Thu Mar 05 2026
Google’s threat intelligence researchers have identified a sophisticated exploit kit targeting iPhones that was first used by a commercial surveillance vendor’s customer before being repurposed by a s
CSO Online
ThreatsDay Bulletin: DDR5 Bot Scalping, Samsung TV Tracking, Reddit Privacy Fine & More
Thu Mar 05 2026
Some weeks in cybersecurity feel routine. This one doesn’t. Several new developments surfaced over the past few days, showing how quickly the threat landscape keeps shifting. Researchers uncovered fresh activity, security teams shared new findings, and a few unexpected moves from major tech companies also drew attention. Together, these updates offer a useful snapshot of what is happening...
The Hacker News
Europol schließt riesigen Markt für gestohlene Daten
Thu Mar 05 2026
loading="lazy" width="400px">LeakBase wird von den Strafverfolgungsbehörden untersucht.
CSO Online