AttackFeed by Joe Wagner

Microsoft Corp. today pushed security updates to fix at least 77 vulnerabilities in its Windows operating systems and other software. There are no pressing “zero-day” flaws this month (compared to February’s five zero-day treat), but as usual some patches may deserve more rapid attention from organizations using Windows. Here are a few highlights from this … Read More “Microsoft Patch Tuesday, March 2026 Edition  – Krebs on Security” »

Cal AI faces data breach claims after hackers post alleged data of 3 million users, including emails, health details, and subscriptions.  – Read More  – Hackread – Cybersecurity News, Data Breaches, AI and More 

ShinyHunters claims to have stolen data from 400 firms via Salesforce portals and is threatening to leak the information unless ransom demands are paid.  – Read More  – Hackread – Cybersecurity News, Data Breaches, AI and More 

Artificial intelligence may be enhancing cyber threats, but the defensive approach to those AI-amplified attacks remains the same, a top FBI official said Tuesday. “We have seen actors both criminal and nation-state, they’re absolutely using AI to their advantage,” said Jason Bilnoski, deputy assistant director at the FBI’s cyber division. “But the way attacks unfold … Read More “FBI says even in an AI-powered world, security basics still matter  – CyberScoop” »

Microsoft addressed 83 vulnerabilities that cut across its broad portfolio of enterprise software and underlying services in its latest security update. The company’s Patch Tuesday release contained no actively exploited zero-day vulnerabilities and six defects it described as more likely to be exploited.  The vendor’s batch of patches marks the first monthly update without an … Read More “Microsoft’s monthly Patch Tuesday is first in 6 months with no actively exploited zero-days  – CyberScoop” »

Artificial intelligence may be enhancing cyber threats, but the defensive approach to those AI-amplified attacks remains the same, a top FBI official said Tuesday. “We have seen actors both criminal and nation-state, they’re absolutely using AI to their advantage,” said Jason Bilnoski, deputy assistant director at the FBI’s cyber division. “But the way attacks unfold … Read More “FBI says even in an AI-powered world, security basics still matter  – CyberScoop” »

A federal judge has blocked Perplexity, makers of the Comet AI browser, from accessing user Amazon accounts and making purchases on their behalf. In an March 9 order, Judge Maxine Chesney of the Northern District Court of California said the temporary injunction reflects the likelihood that Amazon “will succeed on the merits” of its claim … Read More “Federal judge blocks Perplexity’s AI browser from making Amazon purchases  – CyberScoop” »

Cybersecurity researchers are calling attention to a new campaign where threat actors are abusing FortiGate Next-Generation Firewall (NGFW) appliances as entry points to breach victim networks.  The activity involves the exploitation of recently disclosed security vulnerabilities or weak credentials to extract configuration files containing service account credentials and network topology  – Read More  – The … Read More “FortiGate Devices Exploited to Breach Networks and Steal Service Account Credentials  – The Hacker News” »

China-linked hackers targeted Qatar using fake war news lures to spread PlugX backdoor malware and spy on military and energy sectors.  – Read More  – Hackread – Cybersecurity News, Data Breaches, AI and More 

A maximum-severity vulnerability in pac4j, an open-source library integrated into hundreds of software packages and repositories, poses a significant security threat, but has thus far received scant attention. The defect in the Java security engine, which handles authentication across multiple frameworks, has not been exploited in the wild since code review firm CodeAnt AI published … Read More “Critical defect in Java security engine poses serious downstream security risks  – CyberScoop” »

I am back in the friendly confines of the Mid-South headquarters of TrendAI ZDI (a.k.a. my home office), and am all set for the third patch Tuesday of 2026. Take a break from your regularly scheduled activities and let’s take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch … Read More “The March 2026 Security Update Review  – Zero Day Initiative – Blog” »

Cybersecurity researchers have discovered a new malware called KadNap that’s primarily targeting Asus routers to enlist them into a botnet for proxying malicious traffic. The malware, first detected in the wild in August 2025, has expanded to over 14,000 infected devices, with more than 60% of victims located in the U.S., according to the Black … Read More “KadNap Malware Infects 14,000+ Edge Devices to Power Stealth Proxy Botnet  – The Hacker News” »

Cybersecurity researchers have discovered a new malware called KadNap that’s primarily targeting Asus routers to enlist them into a botnet for proxying malicious traffic. The malware, first detected in the wild in August 2025, has expanded to over 14,000 infected devices, with more than 60% of victims located in the U.S., according to the Black … Read More “KadNap Malware Infects 14,000+ Edge Devices to Power Stealth Proxy Botnet  – The Hacker News” »

Elon Musk’s social media site says it suspended 800 million accounts in a year for spam and manipulation – but with state-backed campaigns still flooding the platform, the real question is how many fake accounts remain. Read more in my article on the Hot for Security blog.  – Read More  – GRAHAM CLULEY 

Researchers at AllSecure have revealed how North Korean hackers from the Lazarus Group used a fake LinkedIn job interview and deepfake technology to target their CEO.  – Read More  – Hackread – Cybersecurity News, Data Breaches, AI and More 

A recent research paper describing the training of an experimental AI agent has started a discussion after the…  – Read More  – Hackread – Cybersecurity News, Data Breaches, AI and More 

Cybersecurity researchers have disclosed nine cross-tenant vulnerabilities in Google Looker Studio that could have permitted attackers to run arbitrary SQL queries on victims’ databases and exfiltrate sensitive data within organizations’ Google Cloud environments. The shortcomings have been collectively named LeakyLooker by Tenable. There is no evidence that the vulnerabilities were exploited in  – Read More  … Read More “New “LeakyLooker” Flaws in Google Looker Studio Could Enable Cross-Tenant SQL Queries  – The Hacker News” »

The Russian state-sponsored hacking group tracked as APT28 has been observed using a pair of implants dubbed BEARDSHELL and COVENANT to facilitate long‑term surveillance of Ukrainian military personnel. The two malware families have been put to use since April 2024, ESET said in a new report shared with The Hacker News. APT28, also tracked as … Read More “APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military  – The Hacker News” »

You can’t control when the next critical vulnerability drops. You can control how much of your environment is exposed when it does. The problem is that most teams have more internet-facing exposure than they realise. Intruder’s Head of Security digs into why this happens and how teams can manage it deliberately. Time-to-exploit is shrinking The … Read More “The Zero-Day Scramble is Avoidable: A Guide to Attack Surface Reduction  – The Hacker News” »

Artificial Intelligence (AI) is no longer just a tool we talk to; it is a tool that does things for us. These are called AI Agents. They can send emails, move data, and even manage software on their own. But there is a problem. While these agents make work faster, they also open a new … Read More “How to Stop AI Data Leaks: A Webinar Guide to Auditing Modern Agentic Workflows  – The Hacker News” »

The Russian state-sponsored hacking group tracked as APT28 has been observed using a pair of implants dubbed BEARDSHELL and COVENANT to facilitate long‑term surveillance of Ukrainian military personnel. The two malware families have been put to use since April 2024, ESET said in a new report shared with The Hacker News. APT28, also tracked as … Read More “APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military  – The Hacker News” »

Menlo Park, USA, 10th March 2026, CyberNewswire  – Read More  – Hackread – Cybersecurity News, Data Breaches, AI and More 

According to a recent report, the State Department sent a cable urging U.S. diplomats to oppose international data sovereignty regulations like GDPR, characterizing these guardrails as “unnecessarily burdensome.”  In the cable, the State Department claims that data sovereignty regulations “disrupt global data flows, increase costs and cybersecurity risks, limit Artificial Intelligence (AI) and cloud services, and … Read More “No, it’s not ‘unnecessarily burdensome’ to control your own data  – CyberScoop” »

Salesforce has warned of an increase in threat actor activity that’s aimed at exploiting misconfigurations in publicly accessible Experience Cloud sites by making use of a customized version of an open-source tool called AuraInspector. The activity, per the company, involves the exploitation of customers’ overly permissive Experience Cloud guest user configurations to obtain access to … Read More “Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool  – The Hacker News” »

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerability list is as follows – CVE-2021-22054 (CVSS score: 7.5) – A server-side request forgery (SSRF) vulnerability in Omnissa Workspace One UEM (formerly VMware Workspace One UEM) … Read More “CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploited  – The Hacker News” »

Dutch intelligence warns Russian hackers are hijacking Signal and WhatsApp accounts using fake support bots and verification code scams targeting officials and journalists.  – Read More  – Hackread – Cybersecurity News, Data Breaches, AI and More 

Researchers warn of a fake CleanMyMac site using a ClickFix attack to install SHub Stealer on macOS and steal passwords and crypto wallets.  – Read More  – Hackread – Cybersecurity News, Data Breaches, AI and More 

Cybersecurity researchers have discovered a malicious npm package that masquerades as an OpenClaw installer to deploy a remote access trojan (RAT) and steal sensitive data from compromised hosts. The package, named “@openclaw-ai/openclawai,” was uploaded to the registry by a user named “openclaw-ai” on March 3, 2026. It has been downloaded 178 times to date. The … Read More “Malicious npm Package Posing as OpenClaw Installer Deploys RAT, Steals macOS Credentials  – The Hacker News” »

The Trump administration is plotting an interagency body to confront malign hackers, pilot programs to secure critical infrastructure across states and other steps tied to its freshly-released cyber strategy, National Cyber Director Sean Cairncross said Monday. The “interagency cell” will bring together agencies like the Justice Department, the Department of State, the FBI and the … Read More “Sean Cairncross lays out what’s coming next for Trump’s cyber strategy  – CyberScoop” »

The North Korean threat actor known as UNC4899 is suspected to be behind a sophisticated cloud compromise campaign targeting a cryptocurrency organization in 2025 to steal millions of dollars in cryptocurrency. The activity has been attributed with moderate confidence to the state-sponsored adversary, which is also tracked under the cryptonyms Jade Sleet, PUKCHONG, Slow Pisces, … Read More “UNC4899 Breached Crypto Firm After Developer AirDropped Trojanized File to Work Device  – The Hacker News” »

Another week in cybersecurity. Another week of “you’ve got to be kidding me.” Attackers were busy. Defenders were busy. And somewhere in the middle, a whole lot of people had a very bad Monday morning. That’s kind of just how it goes now. The good news? There were some actual wins this week. Real ones. … Read More “⚡ Weekly Recap: Qualcomm 0-Day, iOS Exploit Chains, AirSnitch Attack & Vibe-Coded Malware  – The Hacker News” »

Researchers say Iran’s MuddyWater hackers targeted US companies and an Israeli software firm’s department in a cyber campaign using the Dindoor malware – All this amid the ongoing conflict.  – Read More  – Hackread – Cybersecurity News, Data Breaches, AI and More 

Philadelphia, PA, United States, 9th March 2026, CyberNewswire  – Read More  – Hackread – Cybersecurity News, Data Breaches, AI and More 

Security firm Pillar reveals the Chaos Agent in which Hackerbot-Claw, an AI agent, used natural language to compromise major GitHub projects and hijack developer tools.  – Read More  – Hackread – Cybersecurity News, Data Breaches, AI and More 

Mid-market organizations are constantly striving to achieve security levels on a par with their enterprise peers. With heightened awareness of supply chain attacks, your customers and business partners are defining the security level you must meet. What if you could be the enabler for your organization to remain competitive — and help win business — … Read More “Can the Security Platform Finally Deliver for the Mid-Market?  – The Hacker News” »

Flights canceled. Emergency rooms shut down. Centuries-old companies shuttered. Ransomware and other similar cyberattacks have become so routine that even those serious human and economic consequences are often overlooked or easily forgotten. This lack of focus is dangerous. As former leaders of FBI and CISA cyber units, we’ve seen cybercrime ripple through communities – disrupting … Read More “We’ve seen ransomware cost American lives. Here’s what it will actually take to stop it.  – CyberScoop” »

Two Google Chrome extensions have turned malicious after what appears to be a case of ownership transfer, offering attackers a way to push malware to downstream customers, inject arbitrary code, and harvest sensitive data. The extensions in question, both originally associated with a developer named “[email protected]” (BuildMelon), are listed below – QuickLens – Search Screen … Read More “Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection and Data Theft  – The Hacker News” »