Latest Cybersecurity News and Alerts

Security Week

• Allure Security Raises $17 Million for Online Brand Protection
  March 20, 2026
• Critical Langflow Vulnerability Exploited Hours After Public Disclosure
  March 20, 2026
• Aisuru and Kimwolf DDoS Botnets Disrupted in International Operation
  March 20, 2026
• Oasis Security Raises $120 Million for Agentic Access Management
  March 19, 2026
• 1stProtect Emerges From Stealth With $20 Million in Funding
  March 19, 2026
• Critical ScreenConnect Vulnerability Exposes Machine Keys
  March 19, 2026
• Privacy Platform Cloaked Raises $375M to Expand Enterprise Reach
  March 19, 2026
• Iran Readied Cyberattack Capabilities for Response Prior to Epic Fury
  March 19, 2026
• Marquis Data Breach Affects 672,000 Individuals
  March 19, 2026
• Security Firm Aura Discloses Data Breach Impacting 900,000 Records
  March 19, 2026

The Hacker News

• DoJ Disrupts 3 Million-Device IoT Botnets Behind Record 31.4 Tbps Global DDoS Attacks
  March 20, 2026
• Apple Warns Older iPhones Vulnerable to Coruna, DarkSword Exploit Kit Attacks
  March 20, 2026
• Speagle Malware Hijacks Cobra DocGuard to Steal Data via Compromised Servers
  March 19, 2026
• 54 EDR Killers Use BYOVD to Exploit 35 Signed Vulnerable Drivers and Disable Security
  March 19, 2026
• ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & More
  March 19, 2026
• New Perseus Android Banking Malware Monitors Notes Apps to Extract Sensitive Data
  March 19, 2026
• How Ceros Gives Security Teams Visibility and Control in Claude Code
  March 19, 2026
• DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeover
  March 19, 2026
• CISA Warns of Zimbra, SharePoint Flaw Exploits; Cisco Zero-Day Hit in Ransomware Attacks
  March 19, 2026
• OFAC Sanctions DPRK IT Worker Network Funding WMD Programs Through Fake Remote Jobs
  March 18, 2026
• Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access
  March 18, 2026
• Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE
  March 18, 2026
• Claude Code Security and Magecart: Getting the Threat Model Right
  March 18, 2026
• 9 Critical IP KVM Flaws Enable Unauthenticated Root Access Across Four Vendors
  March 18, 2026
• Product Walkthrough: How Mesh CSMA Reveals and Breaks Attack Paths to Crown Jewels
  March 18, 2026
• Ubuntu CVE-2026-3888 Bug Lets Attackers Gain Root via systemd Cleanup Timing Exploit
  March 18, 2026
• Apple Fixes WebKit Vulnerability Enabling Same-Origin Policy Bypass on iOS and macOS
  March 18, 2026
• AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCE
  March 17, 2026
• LeakNet Ransomware Uses ClickFix via Hacked Sites, Deploys Deno In-Memory Loader
  March 17, 2026

Dark Reading

• AI Conundrum: Why MCP Security Can't Be Patched Away
  March 19, 2026
• Native Launches With Security Control Plane for Multicloud
  March 19, 2026
• Post-Quantum Web Could be Safer, Faster
  March 19, 2026
• EU Sanctions Companies in China, Iran for Cyberattacks
  March 19, 2026
• C2 Implant 'SnappyClient' Targets Crypto Wallets
  March 18, 2026
• DarkSword: iPhone Exploit Kit Serves Spies & Thieves Alike
  March 18, 2026
• 'Claudy Day’ Trio of Flaws Exposes Claude Users to Data Theft
  March 18, 2026
• Researchers: Meta, TikTok Steal Personal & Financial Info When Users Click Ads
  March 18, 2026
• SideWinder Espionage Campaign Expands Across Southeast Asia
  March 18, 2026
• More Attackers Are Logging In, Not Breaking In
  March 17, 2026
• Clear Communication: The Missing Link in Cybersecurity Success
  March 17, 2026
• Less Lucrative Ransomware Market Makes Attackers Alter Methods
  March 17, 2026
• Hackers Target Cybersecurity Firm Outpost24 in 7-Stage Phish
  March 17, 2026
• Warlock Ransomware Group Augments Post-Exploitation Activities
  March 17, 2026
• China-Nexus Hackers Skulk in Southeast Asian Military Orgs for Years
  March 16, 2026

CSO

• The espionage reality: Your infrastructure is already in the collection path
  March 20, 2026
• Die besten IAM-Tools
  March 19, 2026
• CISA urges IT to harden endpoint management systems after cyberattack by pro-Iranian group
  March 19, 2026
• That cheap KVM device could expose your network to remote compromise
  March 19, 2026
• Ransomware group exploited Cisco firewall vulnerability as a zero day, weeks before a patch appeared
  March 19, 2026
• Beijing wants its own quantum-resistant encryption standards rather than adopt NIST’s
  March 19, 2026
• Telnet vulnerability opens door to remote code execution as root
  March 19, 2026
• SpyCloud’s 2026 Identity Exposure Report Reveals Explosion of Non-Human Identity Theft
  March 19, 2026
• The multi-billion dollar mistake: Why cloud misconfigurations are your biggest security threat
  March 19, 2026
• 5 key priorities for your RSAC 2026 agenda
  March 19, 2026
• Your MFA isn’t broken — it’s being bypassed, and your employees can’t tell the difference
  March 19, 2026
• Anthropic ban heralds new era of supply chain risk — with no clear playbook
  March 19, 2026
• Cloud Access Security Broker – ein Kaufratgeber
  March 18, 2026
• Reco targets AI agent blind spots with new security capability
  March 18, 2026
• BSI moniert Software-Sicherheit im Gesundheitswesen
  March 18, 2026

• CISO Whisperer Names 11 Vendors Leading the Shift from Tools to Outcomes at RSA Conference 2026
  March 19, 2026
• SpyCloud’s 2026 Identity Exposure Report Reveals Explosion of Non-Human Identity Theft
  March 19, 2026
• Fake Windsurf IDE Extension Uses Solana Blockchain to Steal Developer Data
  March 19, 2026
• Computer Vision Frameworks: Features And Future Trends
  March 18, 2026
• “Claudy Day” Flaws Allow Data Theft via Fake Claude AI Ads, Report
  March 18, 2026
• New .NET AOT Malware Hides Code as a Black Box to Evade Detection
  March 18, 2026
• New ClickFix Scam Tricks Users Into Mapping Hacker-Controlled Drives
  March 18, 2026
• Storm-2561 Uses Fake Fortinet, Ivanti VPN Sites to Drop Hyrax Infostealer
  March 17, 2026
• ClickFix Attack Targets Devs with MacSync Malware via Fake Claude Tools
  March 17, 2026
• Enterprise Cloud Network Solutions for Multi-Cloud Environments: Top Platforms
  March 17, 2026

Krebs On Security

• Feds Disrupt IoT Botnets Behind Huge DDoS Attacks
  March 19, 2026
• Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker
  March 11, 2026
• Microsoft Patch Tuesday, March 2026 Edition
  March 10, 2026
• How AI Assistants are Moving the Security Goalposts
  March 8, 2026
• Who is the Kimwolf Botmaster “Dort”?
  February 28, 2026

CISA Alerts

We Live Security

• EDR killers explained: Beyond the drivers
  March 19, 2026
• Face value: What it takes to fool facial recognition
  March 13, 2026
• Cyber fallout from the Iran war: What to have on your radar
  March 12, 2026
• Sednit reloaded: Back in the trenches
  March 10, 2026
• What cybersecurity actually does for your business
  March 6, 2026

Securelist Feed

CIS Security Advisories

• Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
  March 13, 2026
• Multiple Vulnerabilities in Mozilla Firefox Could Allow for Arbitrary Code Execution
  March 10, 2026
• Critical Patches Issued for Microsoft Products, March 10, 2026
  March 10, 2026
• Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution
  March 10, 2026
• A Vulnerability in pac4j-jwt (JwtAuthenticator) Could Allow for Authentication Bypass
  March 5, 2026

Deep Website Links