Breaking News – Cyber Threats (last 6h)
Generated: 2026-03-18 13:00 PDT
- CISA orders feds to patch Zimbra XSS flaw exploited in attacks
BleepingComputer • 2026-03-18 12:57 • www.bleepingcomputer.com
CISA has ordered U.S. government agencies to secure their servers against an actively exploited vulnerability in the Zimbra Collaboration Suite (ZCS). […]
https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-zimbra-xss-flaw-exploited-in-attacks/ - ConnectWise patches new flaw allowing ScreenConnect hijacking
BleepingComputer • 2026-03-18 11:10 • www.bleepingcomputer.com
ConnectWise is warning ScreenConnect customers of a cryptographic signature verification vulnerability that could lead to unauthorized access and privilege escalation. […]
https://www.bleepingcomputer.com/news/security/connectwise-patches-new-flaw-allowing-screenconnect-hijacking/ - OFAC Sanctions DPRK IT Worker Network Funding WMD Programs Through Fake Remote Jobs
The Hacker News • 2026-03-18 10:26 • thehackernews.com
The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has sanctioned six individuals and two entities for their involvement in the Democratic People’s Republic of Korea (DPRK) information technology (IT) worker scheme with an aim to defraud U.S. businesses and generate illicit revenue for the regime to fund its weapons of mass destruction (WMD) programs.
“The North Korean
https://thehackernews.com/2026/03/ofac-sanctions-dprk-it-worker-network.html - Ransomware gang exploits Cisco flaw in zero-day attacks since January
BleepingComputer • 2026-03-18 09:53 • www.bleepingcomputer.com
The Interlock ransomware gang has been exploiting a maximum severity remote code execution (RCE) vulnerability in Cisco’s Secure Firewall Management Center (FMC) software in zero-day attacks since late January. […]
https://www.bleepingcomputer.com/news/security/interlock-ransomware-exploited-secure-fmc-flaw-in-zero-day-attacks-since-january/ - Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access
The Hacker News • 2026-03-18 09:00 • thehackernews.com
Amazon Threat Intelligence is warning of an active Interlock ransomware campaign that’s exploiting a recently disclosed critical security flaw in Cisco Secure Firewall Management Center (FMC) Software.
The vulnerability in question is CVE-2026-20131 (CVSS score: 10.0), a case of insecure deserialization of user-supplied Java byte stream, which could allow an unauthenticated, remote attacker to
https://thehackernews.com/2026/03/interlock-ransomware-exploits-cisco-fmc.html - Marquis: Ransomware gang stole data of 672K people in cyberattack
BleepingComputer • 2026-03-18 08:32 • www.bleepingcomputer.com
Marquis, a Texas-based financial services provider, revealed this week that a ransomware gang stole the data of over 670,000 individuals in an August 2025 cyberattack that also disrupted operations at 74 banks across the United States. […]
https://www.bleepingcomputer.com/news/security/marquis-ransomware-gang-stole-data-of-672-000-people-in-2025-cyberattack/ - The Refund Fraud Economy: Exploiting Major Retailers and Payment Platforms
BleepingComputer • 2026-03-18 07:05 • www.bleepingcomputer.com
Refund fraud is now a business, with methods and tutorials sold to exploit return policies for profit. Flare shows how fraudsters turn refunds and chargebacks into a repeatable profit model. […]
https://www.bleepingcomputer.com/news/security/the-refund-fraud-economy-exploiting-major-retailers-and-payment-platforms/ - New “Darksword” iOS exploit used in infostealer attack on iPhones
BleepingComputer • 2026-03-18 07:02 • www.bleepingcomputer.com
A new exploit kit for iOS devices and delivery framework dubbed “Darksword” has been used to steal a wide range of personal information, including data from cryptocurrency wallet app. […]
https://www.bleepingcomputer.com/news/security/new-darksword-ios-exploit-used-in-infostealer-attack-on-iphones/
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
