List cybersec
Max severity Ubiquiti UniFi flaw may allow account takeover
{ "priority": "CRITICAL", "cve": "N/A", "target": "Ubiquiti UniFi", "threat_actor": "N/A", "patch_ready": true, "insight": "Max severity Ubiquiti UniFi flaw may allow account takeover" }
1:10 pm, March 19, 2026 Cybersecurity
New ‘Perseus’ Android malware checks user notes for secrets
{ "priority": "MEDIUM", "cve": "N/A", "target": "Android", "threat_actor": "Perseus", "patch_ready": false, "insight": "New Android malware called Perseus checks user notes for sensitive i..
11:10 am, March 19, 2026 Cybersecurity
How Ceros Gives Security Teams Visibility and Control in Claude Code
{ "priority": "INFO", "cve": "N/A", "target": "Claude Code", "threat_actor": "N/A", "patch_ready": false, "insight": "Security teams face challenges in controlling AI coding agents like Cl..
11:10 am, March 19, 2026 Cybersecurity
CISA urges US orgs to secure Microsoft Intune systems after Stryker breach
CISA warned U.S. organizations to follow Microsoft guidance to strengthen the Intune endpoint management tool after a cyberattack exploited it to wipe medical technology giant Stryker's systems. [...]..
11:10 am, March 19, 2026 Cybersecurity
DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeover
{ "priority": "CRITICAL", "cve": "N/A", "target": "Apple iOS", "threat_actor": "Multiple threat actors", "patch_ready": false, "insight": "DarkSword iOS exploit kit uses 6 flaws, 3 zero-da..
10:10 am, March 19, 2026 Cybersecurity
Critical Microsoft SharePoint flaw now exploited in attacks
A critical Microsoft SharePoint vulnerability patched in January is now being exploited in attacks, the Cybersecurity and Infrastructure Security Agency (CISA) warned. [...]
10:10 am, March 19, 2026 Cybersecurity
CISA Warns of Zimbra, SharePoint Flaw Exploits; Cisco Zero-Day Hit in Ransomware Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has urged government agencies to apply patches for two security flaws impacting Synacor Zimbra Collaboration Suite (ZCS) and Microsoft ..
7:10 am, March 19, 2026 Cybersecurity
ISC Stormcast For Thursday, March 19th, 2026 https://isc.sans.edu/podcastdetail/9856, (Thu, Mar 19th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
2:10 am, March 19, 2026 Cybersecurity
Interesting Message Stored in Cowrie Logs, (Wed, Mar 18th)
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "A student found an interesting message in Cowrie logs, which included an echo ..
1:10 am, March 19, 2026 Cybersecurity
Aura confirms data breach exposing 900,000 marketing contacts
{ "priority": "HIGH", "cve": "N/A", "target": "Aura", "threat_actor": "N/A", "patch_ready": false, "insight": "Aura experienced a data breach exposing 900,000 marketing contacts with names..
11:10 pm, March 18, 2026 Cybersecurity
CISA orders feds to patch Zimbra XSS flaw exploited in attacks
{ "priority": "CRITICAL", "cve": "N/A", "target": "Zimbra Collaboration Suite (ZCS)", "threat_actor": "N/A", "patch_ready": true, "insight": "CISA orders U.S. government agencies to patch ..
8:10 pm, March 18, 2026 Cybersecurity
ConnectWise patches new flaw allowing ScreenConnect hijacking
{ "priority": "HIGH", "cve": "N/A", "target": "ConnectWise ScreenConnect", "threat_actor": "N/A", "patch_ready": true, "insight": "ConnectWise patches new flaw allowing ScreenConnect hijac..
7:10 pm, March 18, 2026 Cybersecurity
OFAC Sanctions DPRK IT Worker Network Funding WMD Programs Through Fake Remote Jobs
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "DPRK IT workers", "patch_ready": false, "insight": "OFAC sanctions DPRK IT worker network for funding WMD programs thr..
6:10 pm, March 18, 2026 Cybersecurity
Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access
{ "priority": "CRITICAL", "cve": "CVE-2026-20131", "target": "Cisco Secure Firewall Management Center (FMC) Software", "threat_actor": "Interlock", "patch_ready": false, "insight": "Interl..
5:10 pm, March 18, 2026 Cybersecurity
Ransomware gang exploits Cisco flaw in zero-day attacks since January
{ "priority": "CRITICAL", "cve": "N/A", "target": "Cisco Secure Firewall Management Center (FMC) software", "threat_actor": "Interlock ransomware gang", "patch_ready": false, "insight": "I..
5:10 pm, March 18, 2026 Cybersecurity
Marquis: Ransomware gang stole data of 672K people in cyberattack
{ "priority": "HIGH", "cve": "N/A", "target": "Marquis", "threat_actor": "Ransomware gang", "patch_ready": false, "insight": "Ransomware gang stole data of 672K people in cyberattack on Ma..
4:10 pm, March 18, 2026 Cybersecurity
Scans for "adminer", (Wed, Mar 18th)
{ "priority": "INFO", "cve": "N/A", "target": "Adminer", "threat_actor": "N/A", "patch_ready": false, "insight": "Attackers are scanning for Adminer, a popular alternative to phpMyAdmin, w..
2:10 pm, March 18, 2026 Cybersecurity
Nordstrom's email system abused to send crypto scams to customers
{ "priority": "HIGH", "cve": "N/A", "target": "Nordstrom", "threat_actor": "N/A", "patch_ready": false, "insight": "Nordstrom's email system was abused to send cryptocurrency scams to cust..
2:10 pm, March 18, 2026 Cybersecurity
New “Darksword” iOS exploit used in infostealer attack on iPhones
A new exploit kit for iOS devices and delivery framework dubbed "Darksword" has been used to steal a wide range of personal information, including data from cryptocurrency wallet app. [...]
2:10 pm, March 18, 2026 Cybersecurity
The Refund Fraud Economy: Exploiting Major Retailers and Payment Platforms
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "Refund fraud has become a business with methods and tutorials sold to exploit ..
2:10 pm, March 18, 2026 Cybersecurity
9 Critical IP KVM Flaws Enable Unauthenticated Root Access Across Four Vendors
{ "priority": "CRITICAL", "cve": "N/A", "target": "IP KVM devices from GL-iNet Comet RM-1, Angeet/Yeeso ES3 KVM, Sipeed NanoKVM, and JetKVM", "threat_actor": "Eclypsium", "patch_ready": fals..
1:10 pm, March 18, 2026 Cybersecurity
Claude Code Security and Magecart: Getting the Threat Model Right
{"priority": "MEDIUM", "cve": "N/A", "target": "Claude Code Security", "threat_actor": "Magecart", "patch_ready": false, "insight": "Magecart payload hidden in EXIF data of favicon evades repository s..
1:10 pm, March 18, 2026 Cybersecurity
Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE
{"priority":"CRITICAL","cve":"CVE-2026-32746","target":"GNU InetUtils telnet daemon","threat_actor":"N/A","patch_ready":false,"insight":"Unauthenticated remote attacker can execute arbitrary code with..
1:10 pm, March 18, 2026 Cybersecurity
Product Walkthrough: How Mesh CSMA Reveals and Breaks Attack Paths to Crown Jewels
Security teams today are not short on tools or data. They are overwhelmed by both. Yet within the terabytes of alerts, exposures, and misconfigurations – security teams still struggle to understan..
12:10 pm, March 18, 2026 Cybersecurity
ISC Stormcast For Wednesday, March 18th, 2026 https://isc.sans.edu/podcastdetail/9854, (Wed, Mar 18th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
11:10 am, March 18, 2026 Cybersecurity
Ubuntu CVE-2026-3888 Bug Lets Attackers Gain Root via systemd Cleanup Timing Exploit
{ "priority": "HIGH", "cve": "CVE-2026-3888", "target": "Ubuntu Desktop", "threat_actor": "N/A", "patch_ready": true, "insight": "A high-severity security flaw in Ubuntu Desktop versions 2..
9:10 am, March 18, 2026 Cybersecurity
Apple Fixes WebKit Vulnerability Enabling Same-Origin Policy Bypass on iOS and macOS
{ "priority": "HIGH", "cve": "CVE-2026-20643", "target": "Apple iOS, iPadOS, macOS", "threat_actor": "N/A", "patch_ready": true, "insight": "Apple fixes WebKit vulnerability CVE-2026-20643..
7:10 am, March 18, 2026 Cybersecurity
Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE via Port 23
{"priority":"CRITICAL","cve":"CVE-2026-32746","target":"GNU InetUtils telnet daemon (telnetd)","threat_actor":"N/A","patch_ready":false,"insight":"Critical Unpatched Telnetd Flaw Enables Unauthenticat..
6:10 am, March 18, 2026 Cybersecurity
Apple pushes first Background Security Improvements update to fix WebKit flaw
{ "priority": "MEDIUM", "cve": "CVE-2026-20643", "target": "Apple WebKit", "threat_actor": "N/A", "patch_ready": true, "insight": "Apple releases Background Security Improvements update to..
1:10 am, March 18, 2026 Cybersecurity
GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX
{ "priority": "HIGH", "cve": "N/A", "target": "GitHub, npm, VSCode, OpenVSX", "threat_actor": "GlassWorm", "patch_ready": false, "insight": "GlassWorm malware campaign targets over 400 cod..
10:10 pm, March 17, 2026 Cybersecurity
Europe sanctions Chinese and Iranian firms for cyberattacks
{ "priority": "MEDIUM", "cve": "N/A", "target": "Chinese and Iranian firms", "threat_actor": "N/A", "patch_ready": false, "insight": "The European Union Council has announced sanctions aga..
7:10 pm, March 17, 2026 Cybersecurity
AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCE
{ "priority": "HIGH", "cve": "N/A", "target": "Amazon Bedrock", "threat_actor": "N/A", "patch_ready": false, "insight": "Researchers disclose method to exfiltrate sensitive data from AI en..
6:10 pm, March 17, 2026 Cybersecurity
LeakNet Ransomware Uses ClickFix via Hacked Sites, Deploys Deno In-Memory Loader
The ransomware operation known as LeakNet has adopted the ClickFix social engineering tactic delivered through compromised websites as an initial access method. The use of ClickFix, where users are tr..
3:10 pm, March 17, 2026 Cybersecurity
Microsoft stops force-installing the Microsoft 365 Copilot app
Microsoft has stopped automatically installing the Microsoft 365 Copilot app on Windows devices outside the European Economic Area (EEA) that have the Microsoft 365 desktop client apps. [...]
2:10 pm, March 17, 2026 Cybersecurity
New font-rendering trick hides malicious commands from AI tools
{ "priority": "HIGH", "cve": "N/A", "target": "AI tools", "threat_actor": "N/A", "patch_ready": false, "insight": "A new font-rendering attack causes AI assistants to miss malicious comman..
2:10 pm, March 17, 2026 Cybersecurity
Top 5 Things CISOs Need to Do Today to Secure AI Agents
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "The article highlights the importance of securing AI agents by implementing id..
2:10 pm, March 17, 2026 Cybersecurity
LeakNet ransomware uses ClickFix, Deno runtime in stealthy attacks
The LeakNet ransomware gang is now using the ClickFix technique for initial access into corporate environments and deploys a malware loader based on the open-source Deno runtime for JavaScript and Ty..
1:10 pm, March 17, 2026 Cybersecurity
AI is Everywhere, But CISOs are Still Securing It with Yesterday's Skills and Tools, Study Finds
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "A study finds that most security leaders are struggling to defend AI systems w..
12:10 pm, March 17, 2026 Cybersecurity
IPv4 Mapped IPv6 Addresses, (Tue, Mar 17th)
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "Attackers are using IPv4-mapped IPv6 addresses to possibly obfuscate their att..
12:10 pm, March 17, 2026 Cybersecurity
Microsoft shares fix for Windows C: drive access issues on Samsung PCs
{ "priority": "MEDIUM", "cve": "N/A", "target": "Windows 11 on Samsung PCs", "threat_actor": "N/A", "patch_ready": true, "insight": "Microsoft provides a fix for C: drive access issues on ..
12:10 pm, March 17, 2026 Cybersecurity
LeakNet ransomware uses ClickFix and Deno runtime for stealthy attacks
{ "priority": "HIGH", "cve": "N/A", "target": "Corporate environments", "threat_actor": "LeakNet ransomware gang", "patch_ready": false, "insight": "LeakNet ransomware gang uses ClickFix a..
12:10 pm, March 17, 2026 Cybersecurity
Konni Deploys EndRAT Through Phishing, Uses KakaoTalk to Propagate Malware
North Korean threat actors have been observed sending phishing to compromise targets and obtain access to a victim's KakaoTalk desktop application to distribute malicious payloads to certain contacts...
11:10 am, March 17, 2026 Cybersecurity
Microsoft: Enabling Teams Meeting add-in breaks Outlook Classic
{ "priority": "MEDIUM", "cve": "N/A", "target": "Microsoft Outlook Classic", "threat_actor": "N/A", "patch_ready": false, "insight": "Enabling Microsoft Teams Meeting add-in causes classic..
11:10 am, March 17, 2026 Cybersecurity
New Windows 11 hotpatch fixes Bluetooth device visibility issue
{ "priority": "MEDIUM", "cve": "N/A", "target": "Windows 11", "threat_actor": "N/A", "patch_ready": true, "insight": "Microsoft released an emergency update to fix a Bluetooth device visib..
11:10 am, March 17, 2026 Cybersecurity
CISA Flags Actively Exploited Wing FTP Vulnerability Leaking Server Paths
{"priority": "HIGH", "cve": "CVE-2025-47813", "target": "Wing FTP", "threat_actor": "N/A", "patch_ready": true, "insight": "CISA flags actively exploited Wing FTP vulnerability leaking server paths"}
6:10 am, March 17, 2026 Cybersecurity
ISC Stormcast For Tuesday, March 17th, 2026 https://isc.sans.edu/podcastdetail/9852, (Tue, Mar 17th)
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "SANS Internet Storm Center podcast for March 17th, 2026." }
2:10 am, March 17, 2026 Cybersecurity
Stryker attack wiped tens of thousands of devices, no malware needed
{ "priority": "HIGH", "cve": "N/A", "target": "Stryker's Microsoft environment", "threat_actor": "N/A", "patch_ready": false, "insight": "A cyberattack on Stryker's internal Microsoft envi..
8:10 pm, March 16, 2026 Cybersecurity
GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos
```json { "priority": "HIGH", "cve": "N/A", "target": "Python repositories on GitHub", "threat_actor": "N/A", "patch_ready": false, "insight": "The GlassWorm malware campaign is leveraging..
8:10 pm, March 16, 2026 Cybersecurity
CISA flags Wing FTP Server flaw as actively exploited in attacks
{ "priority": "CRITICAL", "cve": "N/A", "target": "Wing FTP Server", "threat_actor": "N/A", "patch_ready": false, "insight": "An actively exploited vulnerability in Wing FTP Server may be ..
6:10 pm, March 16, 2026 Cybersecurity
UK’s Companies House confirms security flaw exposed business data
{ "priority": "MEDIUM", "cve": "N/A", "target": "Companies House WebFiling service", "threat_actor": "N/A", "patch_ready": "true", "insight": "A security flaw in the UK's Companies House W..
5:10 pm, March 16, 2026 Cybersecurity
AI Testing
