OFAC Sanctions DPRK IT Worker Network Funding WMD Programs Through Fake Remote Jobs

18/03/2026 0 Comments 0 tags

The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has sanctioned six individuals and two entities for their involvement in the Democratic People’s Republic of Korea (DPRK)

Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access

18/03/2026 0 Comments 0 tags

Amazon Threat Intelligence is warning of an active Interlock ransomware campaign that’s exploiting a recently disclosed critical security flaw in Cisco Secure Firewall Management Center (FMC) Software. The vulnerability in

Product Walkthrough: How Mesh CSMA Reveals and Breaks Attack Paths to Crown Jewels

18/03/2026 0 Comments 0 tags

Security teams today are not short on tools or data. They are overwhelmed by both.  Yet within the terabytes of alerts, exposures, and misconfigurations – security teams still struggle to

9 Critical IP KVM Flaws Enable Unauthenticated Root Access Across Four Vendors

18/03/2026 0 Comments 0 tags

Cybersecurity researchers have warned about the risks posed by low-cost IP KVM (Keyboard, Video, Mouse over Internet Protocol) devices, which can grant attackers extensive control over compromised hosts. The nine

Claude Code Security and Magecart: Getting the Threat Model Right

18/03/2026 0 Comments 0 tags

When a Magecart payload hides inside the EXIF data of a dynamically loaded third-party favicon, no repository scanner will catch it – because the malicious code never actually touches your

Ubuntu CVE-2026-3888 Bug Lets Attackers Gain Root via systemd Cleanup Timing Exploit

18/03/2026 0 Comments 0 tags

A high-severity security flaw affecting default installations of Ubuntu Desktop versions 24.04 and later could be exploited to escalate privileges to the root level. Tracked as CVE-2026-3888 (CVSS score: 7.8),

Apple Fixes WebKit Vulnerability Enabling Same-Origin Policy Bypass on iOS and macOS

18/03/2026 0 Comments 0 tags

Apple on Tuesday released its first round of Background Security Improvements to address a security flaw in WebKit that affects iOS, iPadOS, and macOS. The vulnerability, tracked as CVE-2026-20643 (CVSS

Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE via Port 23

18/03/2026 0 Comments 0 tags

Cybersecurity researchers have disclosed a critical security flaw impacting the GNU InetUtils telnet daemon (telnetd) that could be exploited by an unauthenticated remote attacker to execute arbitrary code with elevated

AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCE

17/03/2026 0 Comments 0 tags

Cybersecurity researchers have disclosed details of a new method for exfiltrating sensitive data from artificial intelligence (AI) code execution environments using domain name system (DNS) queries. In a report published

LeakNet Ransomware Uses ClickFix via Hacked Sites, Deploys Deno In-Memory Loader

17/03/2026 0 Comments 0 tags

The ransomware operation known as LeakNet has adopted the ClickFix social engineering tactic delivered through compromised websites as an initial access method. The use of ClickFix, where users are tricked