Breaking News – Cyber Threats – 2026-03-03 02:00 PST

Breaking News – Cyber Threats (last 6h)

Generated: 2026-03-03 02:00 PST

• UH Cancer Center data breach affects nearly 1.2 million people
  BleepingComputer • 2026-03-03 01:48 • www.bleepingcomputer.com
  The University of Hawaii confirmed that a ransomware gang stole the data of nearly 1.2 million individuals in August 2025 after breaching its Cancer Center’s Epidemiology Division. […]
  https://www.bleepingcomputer.com/news/security/university-of-hawaii-cancer-center-ransomware-attack-affects-nearly-12-million-people/
• Android gets patches for Qualcomm zero-day exploited in attacks
  BleepingComputer • 2026-03-03 00:19 • www.bleepingcomputer.com
  Google has released security updates to patch 129 Android security vulnerabilities, including an actively exploited zero-day flaw in a Qualcomm display component. […]
  https://www.bleepingcomputer.com/news/security/google-patches-android-zero-day-actively-exploited-in-attacks/
• 171: Melody Fraud
  Darknet Diaries • 2026-03-03 00:00 • darknetdiaries.com

  What if the music charts you see aren’t real? What if the numbers that define success can be manufactured? We talked to Andrew, a man who has spent his career on both sides of this battle. He once profited from the loopholes in streaming platforms, but now, his job is to close them. This episode will change the way you understand music streaming platforms from now on.

  Sponsors

  Support for this show comes from ThreatLocker®. ThreatLocker® is a Zero Trust Endpoint Protection Platform that strengthens your infrastruc…
  https://darknetdiaries.com/episode/171/

• Google Confirms CVE-2026-21385 in Qualcomm Android Component Exploited
  The Hacker News • 2026-03-02 23:08 • thehackernews.com
  Google on Monday disclosed that a high-severity security flaw impacting an open-source Qualcomm component used in Android devices has been exploited in the wild.
  The vulnerability in question is CVE-2026-21385 (CVSS score: 7.8), a buffer over-read in the Graphics component.
  “Memory corruption when adding user-supplied data without checking available buffer space,” Qualcomm said in an advisory,
  https://thehackernews.com/2026/03/google-confirms-cve-2026-21385-in.html
• SloppyLemming Targets Pakistan and Bangladesh Governments Using Dual Malware Chains
  The Hacker News • 2026-03-02 22:53 • thehackernews.com
  The threat activity cluster known as SloppyLemming has been attributed to a fresh set of attacks targeting government entities and critical infrastructure operators in Pakistan and Bangladesh.
  The activity, per Arctic Wolf, took place between January 2025 and January 2026. It involves the use of two distinct attack chains to deliver malware families tracked as BurrowShell and a Rust-based
  https://thehackernews.com/2026/03/sloppylemming-targets-pakistan-and.html

Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.