List cybersec
GitHub adds AI-powered bug detection to expand security coverage
{ "priority": "INFO", "cve": "N/A", "target": "GitHub Code Security", "threat_actor": "N/A", "patch_ready": false, "insight": "GitHub introduces AI-powered bug detection to enhance securit..
12:10 am, March 26, 2026 Cybersecurity
Apple Patches (almost) everything again. March 2026 edition., (Wed, Mar 25th)
{ "priority": "MEDIUM", "cve": "N/A", "target": "Apple OS", "threat_actor": "N/A", "patch_ready": true, "insight": "Apple patches 85 vulnerabilities across multiple operating systems, with..
10:10 pm, March 25, 2026 Cybersecurity
PolyShell attacks target 56% of all vulnerable Magento stores
{ "priority": "HIGH", "cve": "N/A", "target": "Magento Open Source and Adobe Commerce", "threat_actor": "N/A", "patch_ready": false, "insight": "Active attacks exploiting the PolyShell vul..
10:10 pm, March 25, 2026 Cybersecurity
Bubble AI app builder abused to steal Microsoft account credentials
{ "priority": "HIGH", "cve": "N/A", "target": "Microsoft accounts", "threat_actor": "N/A", "patch_ready": false, "insight": "Threat actors are abusing Bubble AI app builder to steal Micros..
8:10 pm, March 25, 2026 Cybersecurity
New Torg Grabber infostealer malware targets 728 crypto wallets
{ "priority": "HIGH", "cve": "N/A", "target": "crypto wallets", "threat_actor": "Torg Grabber", "patch_ready": false, "insight": "Torg Grabber malware targets 728 crypto wallets and 850 br..
7:10 pm, March 25, 2026 Cybersecurity
LeakBase Admin Arrested in Russia Over Massive Stolen Credential Marketplace
The alleged administrator of the LeakBase cybercrime forum has been arrested by Russian law enforcement authorities, state media reported Thursday. According to TASS and MVD Media, a news website link..
6:10 pm, March 25, 2026 Cybersecurity
Citrix urges admins to patch NetScaler flaws as soon as possible
{ "priority": "HIGH", "cve": "N/A", "target": "Citrix NetScaler ADC and NetScaler Gateway", "threat_actor": "N/A", "patch_ready": true, "insight": "Citrix urges admins to patch NetScaler f..
4:10 pm, March 25, 2026 Cybersecurity
GlassWorm Malware Uses Solana Dead Drops to Deliver RAT and Steal Browser, Crypto Data
Cybersecurity researchers have flagged a new evolution of the GlassWorm campaign that delivers a multi-stage framework capable of comprehensive data theft and installing a remote access trojan (RAT), ..
3:10 pm, March 25, 2026 Cybersecurity
Paid AI Accounts Are Now a Hot Underground Commodity
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "AI accounts are being sold as part of the cybercrime supply chain on undergrou..
2:10 pm, March 25, 2026 Cybersecurity
Device Code Phishing Hits 340+ Microsoft 365 Orgs Across Five Countries via OAuth Abuse
{ "priority": "HIGH", "cve": "N/A", "target": "Microsoft 365", "threat_actor": "N/A", "patch_ready": false, "insight": "An active device code phishing campaign is targeting over 340 Micros..
1:10 pm, March 25, 2026 Cybersecurity
Russian Hacker Sentenced to 2 Years for TA551 Botnet-Driven Ransomware Attacks
``` { "priority": "INFO", "cve": "N/A", "target": "U.S. companies", "threat_actor": "TA551", "patch_ready": false, "insight": "A Russian hacker was sentenced to 2 years in prison for manag..
1:10 pm, March 25, 2026 Cybersecurity
The Kill Chain Is Obsolete When Your AI Agent Is the Threat
{ "priority": "HIGH", "cve": "N/A", "target": "N/A", "threat_actor": "State-sponsored threat actor", "patch_ready": false, "insight": "A state-sponsored threat actor used an AI coding agen..
1:10 pm, March 25, 2026 Cybersecurity
Kali Linux 2026.1 released with 8 new tools, new BackTrack mode
{ "priority": "INFO", "cve": "N/A", "target": "Kali Linux", "threat_actor": "N/A", "patch_ready": false, "insight": "Kali Linux 2026.1 release features 8 new tools, a theme refresh, and a ..
1:10 pm, March 25, 2026 Cybersecurity
TP-Link warns users to patch critical router auth bypass flaw
TP-Link has patched several vulnerabilities in its Archer NX router series, including a critical-severity flaw that may allow attackers to bypass authentication and upload new firmware. [...]
12:10 pm, March 25, 2026 Cybersecurity
Manager of botnet used in ransomware attacks gets 2 years in prison
{"priority":"LOW","cve":"N/A","target":"N/A","threat_actor":"N/A","patch_ready":false,"insight":"A Russian national was sentenced to 2 years in prison for managing a phishing botnet used in BitPaymer ..
9:10 am, March 25, 2026 Cybersecurity
FCC Bans New Foreign-Made Routers Over Supply Chain and Cyber Risk Concerns
{ "priority": "HIGH", "cve": "N/A", "target": "Foreign-made consumer routers", "threat_actor": "N/A", "patch_ready": false, "insight": "The FCC has banned the import of new foreign-made co..
8:10 am, March 25, 2026 Cybersecurity
TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 via Trivy CI/CD Compromise
{ "priority": "CRITICAL", "cve": "N/A", "target": "LiteLLM", "threat_actor": "TeamPCP", "patch_ready": false, "insight": "TeamPCP compromised LiteLLM versions 1.82.7-1.82.8 via Trivy CI/CD..
7:10 am, March 25, 2026 Cybersecurity
ISC Stormcast For Wednesday, March 25th, 2026 https://isc.sans.edu/podcastdetail/9864, (Wed, Mar 25th)
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "SANS Internet Storm Center podcast for March 25th, 2026." }
2:10 am, March 25, 2026 Cybersecurity
SmartApeSG campaign pushes Remcos RAT, NetSupport RAT, StealC, and Sectop RAT (ArechClient2), (Wed, Mar 25th)
{ "priority": "HIGH", "cve": "N/A", "target": "N/A", "threat_actor": "SmartApeSG", "patch_ready": false, "insight": "SmartApeSG campaign distributes multiple RATs and malware including Rem..
1:10 am, March 25, 2026 Cybersecurity
Popular LiteLLM PyPI package backdoored to steal credentials, auth tokens
The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package on PyPI and claiming to have stolen data from hundreds of thousands of dev..
12:10 am, March 25, 2026 Cybersecurity
Popular LiteLLM PyPI package compromised in TeamPCP supply chain attack
{ "priority": "HIGH", "cve": "N/A", "target": "LiteLLM PyPI package", "threat_actor": "TeamPCP", "patch_ready": false, "insight": "The TeamPCP hacking group compromised the popular LiteLLM..
11:10 pm, March 24, 2026 Cybersecurity
PTC warns of imminent threat from critical Windchill, FlexPLM RCE bug
PTC Inc. is warning of a critical vulnerability in Windchill and FlexPLM, widely used product lifecycle management (PLM) solutions, that could allow remote code execution. [...]
11:10 pm, March 24, 2026 Cybersecurity
FCC bans new routers made outside the USA over security risks
{ "priority": "MEDIUM", "cve": "N/A", "target": "Routers made outside the USA", "threat_actor": "N/A", "patch_ready": false, "insight": "The FCC has banned new routers made outside the USA..
9:10 pm, March 24, 2026 Cybersecurity
TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 Likely via Trivy CI/CD Compromise
{ "priority": "CRITICAL", "cve": "N/A", "target": "LiteLLM", "threat_actor": "TeamPCP", "patch_ready": false, "insight": "TeamPCP compromised LiteLLM versions 1.82.7-1.82.8 via Trivy CI/CD..
8:10 pm, March 24, 2026 Cybersecurity
Tax Search Ads Deliver ScreenConnect Malware Using Huawei Driver to Disable EDR
{ "priority": "HIGH", "cve": "N/A", "target": "ConnectWise ScreenConnect", "threat_actor": "N/A", "patch_ready": false, "insight": "A large-scale malvertising campaign delivers ScreenConne..
6:10 pm, March 24, 2026 Cybersecurity
Firefox now has a free built-in VPN with 50GB monthly data limit
{"priority":"INFO","cve":"N/A","target":"Firefox","threat_actor":"N/A","patch_ready":false,"insight":"Mozilla released Firefox 149 with a built-in VPN tool offering 50GB of monthly traffic."}
6:10 pm, March 24, 2026 Cybersecurity
Hackers Use Fake Resumes to Steal Enterprise Credentials and Deploy Crypto Miner
{"priority":"HIGH","cve":"N/A","target":"Enterprise Environments","threat_actor":"N/A","patch_ready":false,"insight":"Hackers use fake resumes to steal enterprise credentials and deploy crypto miners ..
5:10 pm, March 24, 2026 Cybersecurity
Microsoft fixes bug causing Classic Outlook sync issues with Gmail
Microsoft has fixed a known issue causing Gmail and Yahoo email synchronization and connection problems for classic Outlook users. [...]
4:10 pm, March 24, 2026 Cybersecurity
Yanluowang ransomware access broker gets 81 months in prison
{ "priority": "LOW", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "A Russian national was sentenced to 81 months in prison for acting as an initia..
2:10 pm, March 24, 2026 Cybersecurity
Infinite Campus warns of breach after ShinyHunters claims data theft
{ "priority": "HIGH", "cve": "N/A", "target": "Infinite Campus", "threat_actor": "ShinyHunters", "patch_ready": false, "insight": "Infinite Campus warns of data breach after ShinyHunters c..
2:10 pm, March 24, 2026 Cybersecurity
Detecting IP KVMs, (Tue, Mar 24th)
{ "priority": "LOW", "cve": "N/A", "target": "IP KVMs", "threat_actor": "North Koreans", "patch_ready": false, "insight": "Rogue IP KVMs can be used by threat actors to gain remote access ..
2:10 pm, March 24, 2026 Cybersecurity
HackerOne discloses employee data breach after Navia hack
Bug bounty platform HackerOne is notifying hundreds of employees that their data was stolen after attackers hacked Navia, one of its U.S. benefits administrators. [...]
2:10 pm, March 24, 2026 Cybersecurity
Zero Trust: Bridging the Gap Between Authentication and Trust
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "The article discusses the limitations of Multi-Factor Authentication (MFA) and..
2:10 pm, March 24, 2026 Cybersecurity
5 Learnings from the First-Ever Gartner Market Guide for Guardian Agents
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "Gartner published its first Market Guide for Guardian Agents on February 25, 2..
12:10 pm, March 24, 2026 Cybersecurity
Ghost Campaign Uses 7 npm Packages to Steal Crypto Wallets and Credentials
Cybersecurity researchers have uncovered a new set of malicious npm packages that are designed to steal cryptocurrency wallets and sensitive data. The activity is being tracked by ReversingLabs as the..
12:10 pm, March 24, 2026 Cybersecurity
Dutch Ministry of Finance discloses breach affecting employees
The Dutch Ministry of Finance confirmed on Monday that some of its systems were breached in a cyberattack detected last week. [...]
12:10 pm, March 24, 2026 Cybersecurity
TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI Credentials
Two more GitHub Actions workflows have become the latest to be compromised by credential-stealing malware by a threat actor known as TeamPCP, the cloud-native cybercriminal operation also behind the T..
11:10 am, March 24, 2026 Cybersecurity
The Hidden Cost of Cybersecurity Specialization: Losing Foundational Skills
Cybersecurity has changed fast. Roles are more specialized, and tooling is more advanced. On paper, this should make organizations more secure. But in practice, many teams struggle with the same basi..
11:10 am, March 24, 2026 Cybersecurity
Citrix Urges Patching Critical NetScaler Flaw Allowing Unauthenticated Data Leaks
{"priority":"CRITICAL","cve":"CVE-2026-3055","target":"Citrix NetScaler ADC and NetScaler Gateway","threat_actor":"N/A","patch_ready":true,"insight":"Citrix patches critical NetScaler flaw allowing un..
8:10 am, March 24, 2026 Cybersecurity
U.S. Sentences Russian Hacker to 6.75 Years for Role in $9M Ransomware Damage
``` { "priority": "LOW", "cve": "N/A", "target": "N/A", "threat_actor": "Yanluowang ransomware crew", "patch_ready": false, "insight": "A Russian hacker was sentenced to 6.75 years in pris..
8:10 am, March 24, 2026 Cybersecurity
ISC Stormcast For Tuesday, March 24th, 2026 https://isc.sans.edu/podcastdetail/9862, (Tue, Mar 24th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
2:10 am, March 24, 2026 Cybersecurity
OpenAI rolls out ChatGPT Library to store your personal files
{"priority":"INFO","cve":"N/A","target":"ChatGPT","threat_actor":"N/A","patch_ready":false,"insight":"OpenAI introduces ChatGPT Library for storing personal files and images on their cloud storage."}
12:10 am, March 24, 2026 Cybersecurity
Mazda discloses security breach exposing employee and partner data
{ "priority": "MEDIUM", "cve": "N/A", "target": "Mazda Motor Corporation", "threat_actor": "N/A", "patch_ready": false, "insight": "Mazda Motor Corporation disclosed a security breach expo..
11:10 pm, March 23, 2026 Cybersecurity
Tycoon2FA phishing platform returns after recent police disruption
``` { "priority": "HIGH", "cve": "N/A", "target": "Tycoon2FA phishing-as-a-service platform", "threat_actor": "N/A", "patch_ready": false, "insight": "Tycoon2FA phishing platform resumes a..
10:10 pm, March 23, 2026 Cybersecurity
Tool updates: lots of security and logic fixes, (Mon, Mar 23rd)
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "The developer performed a security review of their Python scripts using Claude..
9:10 pm, March 23, 2026 Cybersecurity
North Korean Hackers Abuse VS Code Auto-Run Tasks to Deploy StoatWaffle Malware
{ "priority": "HIGH", "cve": "N/A", "target": "Microsoft Visual Studio Code", "threat_actor": "WaterPlum", "patch_ready": false, "insight": "North Korean hackers use VS Code auto-run tasks..
8:10 pm, March 23, 2026 Cybersecurity
Crunchyroll probes breach after hacker claims to steal 6.8M users' data
Popular anime streaming platform Crunchyroll is investigating a breach after hackers claimed to have stolen personal information for approximately 6.8 million people. [...]
8:10 pm, March 23, 2026 Cybersecurity
TeamPCP deploys Iran-targeted wiper in Kubernetes attacks
{ "priority": "HIGH", "cve": "N/A", "target": "Kubernetes", "threat_actor": "TeamPCP", "patch_ready": false, "insight": "TeamPCP hacking group targets Kubernetes clusters with a malicious ..
8:10 pm, March 23, 2026 Cybersecurity
Trivy supply-chain attack spreads to Docker, GitHub repos
{ "priority": "HIGH", "cve": "N/A", "target": "Aqua Security, Docker, GitHub", "threat_actor": "TeamPCP", "patch_ready": false, "insight": "TeamPCP hackers spread Trivy supply-chain attack..
6:10 pm, March 23, 2026 Cybersecurity
‘CanisterWorm’ Springs Wiper Attack Targeting Iran
{ "priority": "HIGH", "cve": "N/A", "target": "Iran", "threat_actor": "CanisterWorm", "patch_ready": false, "insight": "A financially motivated group is using a worm to wipe data on infect..
4:10 pm, March 23, 2026 Cybersecurity
AI Testing
