In March 2026, a significant security update was released, addressing eight critical vulnerabilities among a total of 82 Common Vulnerabilities and Exposures (CVEs). Two of these vulnerabilities had been publicly disclosed before the patch, raising concerns about their potential exploitation. The vulnerabilities affect various products and systems, making it crucial for organizations and users to apply the updates promptly to safeguard their environments. The nature of these vulnerabilities could allow attackers to gain unauthorized access or disrupt services, emphasizing the need for vigilance in maintaining software security. Companies and IT departments should prioritize these patches to mitigate risks associated with these newly identified threats.
Latest Cybersecurity Threats
Real-time threat intelligence from trusted sources
SCM feed for Latest
The Department of Health and Human Services (HHS) has rolled out an updated toolkit designed to assist healthcare organizations in evaluating their cybersecurity measures. This Risk Identification and Site Criticality toolkit aims to help these organizations spot potential vulnerabilities and assess their readiness against cyber threats. With the healthcare sector frequently targeted by cyberattacks, this initiative is crucial for ensuring patient data security and maintaining operational integrity. By providing a structured approach to risk assessment, the HHS hopes to bolster the overall cybersecurity posture of healthcare facilities nationwide. This toolkit is a significant step in addressing the growing concerns over cybersecurity in the healthcare industry.
SCM feed for Latest
The House Energy and Commerce Committee has taken a significant step by approving a bipartisan package of cybersecurity bills aimed at strengthening the protection of the energy sector. Leading this initiative is the Rural and Municipal Utility Cybersecurity Act, which focuses on enhancing cybersecurity measures for smaller utilities that may lack the resources of larger companies. This legislation is crucial as it addresses the vulnerabilities in the energy infrastructure that could be targeted by cyberattacks. By promoting cybersecurity readiness among rural and municipal utilities, the bill aims to safeguard essential services against potential disruptions. The approval of this package reflects a growing recognition of the need for robust cybersecurity frameworks in the energy sector, especially as threats continue to evolve.
Hackread – Cybersecurity News, Data Breaches, AI and More
Dutch intelligence agencies have issued a warning about Russian hackers who are targeting Signal and WhatsApp accounts. These attackers are using fake support bots and scams that trick users into providing verification codes. The primary targets of these scams are officials and journalists, raising concerns about the potential for unauthorized access to sensitive communications. This incident highlights the ongoing risks posed by cybercriminals and the need for users to be vigilant when managing their online accounts. As these platforms are commonly used for secure communication, any compromise could have serious implications for privacy and security.
Security Affairs
The FBI has issued a warning about a new phishing scam targeting individuals and businesses applying for planning and zoning permits. Scammers are posing as city and county officials, using publicly available information to create convincing messages that trick applicants into providing sensitive information. This attack not only affects those seeking permits but also raises concerns about the security of public records and how easily they can be exploited. As more people engage with local government processes online, it's crucial for applicants to remain vigilant and verify the legitimacy of any communications they receive. This incident underscores the need for awareness around phishing tactics that exploit public data.
BleepingComputer
Ericsson Inc., the U.S. branch of the Swedish telecommunications company, has reported a data breach resulting from a cyberattack on one of its service providers. The breach has led to the theft of sensitive information belonging to an undisclosed number of employees and customers. While the company has not specified the exact nature of the stolen data or the service provider involved, this incident raises significant concerns about the security of third-party vendors and their impact on larger organizations. The breach highlights the ongoing risks companies face from attacks that exploit vulnerabilities in their supply chains. Users and businesses associated with Ericsson should remain vigilant and monitor for any unusual activity related to their data.
SCM feed for Latest
The article discusses a significant shift in cybersecurity policy under former President Trump, moving away from a secure-by-design approach to one that emphasizes offensive operations. This change suggests that the U.S. may focus more on proactive measures, potentially targeting adversaries before they can launch attacks. The implications of this policy could affect various sectors, including government and private industry, as it raises questions about the legality and ethics of offensive cyber actions. By harnessing artificial intelligence, the policy aims to enhance the effectiveness of these operations but also opens up discussions about the potential risks involved. Overall, this shift reflects a broader strategy in national security that prioritizes preemptive actions in cyberspace.
Help Net Security
OpenAI is set to acquire Promptfoo, a platform that specializes in securing AI systems. The goal of this acquisition is to enhance OpenAI's Frontier platform, which is designed for developing and managing AI coworkers. As more businesses begin to integrate AI into their operations, the need for thorough testing and risk assessment of these systems has become increasingly important. Promptfoo's technology will help enterprises identify vulnerabilities during the development phase, ensuring that AI agents function safely and comply with necessary regulations. This move signifies a proactive approach to AI security, addressing the potential risks associated with deploying AI in real-world applications.
SCM feed for Latest
A recent discussion has emerged about the increasing use of AI agents in workplaces, which are starting to resemble human employees in their functions. However, these AI agents are often not governed properly, leading to significant security concerns. Without appropriate oversight, they can inadvertently expose sensitive information or make decisions that compromise security. This situation affects companies that utilize AI tools without adequate policies in place to manage their behavior and interactions. As AI continues to play a larger role in business operations, it's crucial for organizations to establish clear governance frameworks to mitigate these risks.
Hackread – Cybersecurity News, Data Breaches, AI and More
Researchers have identified a fraudulent website mimicking CleanMyMac that employs a ClickFix attack to install SHub Stealer malware on macOS devices. This malicious software is designed to steal sensitive information, including passwords and cryptocurrency wallet data. Users who unknowingly download this malware may face significant risks to their personal and financial security. The incident serves as a reminder for macOS users to be cautious about where they download software and to verify the authenticity of websites before entering any personal information. Ensuring that systems are protected with up-to-date security measures is crucial in preventing such attacks.
Sean Cairncross, the national cyber director, is advocating for a new cyber strategy that integrates cyber operations with diplomacy, law enforcement, and corporate accountability. This approach aims to strengthen the cybersecurity posture of organizations by pressuring CEOs to improve their security measures. Cairncross believes that a collaborative effort among government agencies, private sector leaders, and international partners is essential to address the growing cyber threats. This strategy reflects a shift towards a more unified front against cyber adversaries, emphasizing the need for proactive measures rather than reactive responses. The implications of this strategy could significantly impact how organizations manage their cybersecurity risks and collaborate with government entities.
Microsoft is rolling out a new feature for Teams that will automatically tag third-party bots trying to join meetings. This update will place these bots in a lobby, giving meeting organizers the ability to control whether they can enter the meeting or not. This move aims to enhance security by preventing unauthorized or unwanted bots from participating in discussions. It’s particularly significant for organizations that rely on Teams for sensitive communications, as it allows them to maintain better oversight over who can access their meetings. As more companies integrate bots into their workflows, ensuring that only trusted applications can join meetings becomes increasingly important for maintaining data security and privacy.
Infosecurity Magazine
Researchers from Huntress have identified a campaign where attackers are exploiting vulnerabilities to steal sensitive data. These attackers are using Elastic Cloud as a central hub for managing the stolen information. This method not only showcases the attackers' ability to exploit weaknesses in systems but also raises concerns about how cloud services can be misused in cyberattacks. Organizations that rely on Elastic Cloud need to be especially vigilant, as the stolen data can lead to further breaches or unauthorized access. Understanding these tactics is crucial for companies to enhance their security measures and protect against potential threats.
The FBI has issued a warning about a series of phishing attacks where criminals are posing as U.S. city and county officials. These attacks primarily target businesses and individuals seeking planning and zoning permits. Scammers use these impersonations to trick victims into providing sensitive information or money. This situation is concerning as it can lead to financial losses and undermine trust in local government processes. The FBI urges anyone involved in such applications to verify the legitimacy of communications before responding, especially if they involve requests for personal or financial information.
Dutch intelligence agencies have issued a warning about a concerted effort by Russia-linked hackers to access the Signal and WhatsApp accounts of government and military officials around the world. This campaign is particularly concerning because it targets individuals in sensitive positions, including civil servants and military personnel, indicating a broader strategy to undermine national security. The implications of such breaches could be severe, as compromised communication channels may lead to unauthorized access to confidential information and disrupt governmental operations. The ongoing nature of this threat underscores the need for enhanced security measures among officials who rely on these messaging platforms for secure communication.