🚨 CISA KEV 2[−]
9 Mar KEVHikvision and Rockwell Automation CVSS 9.8 Flaws Added to CISA KEV Catalogsubmitted by kid to cybersecurity 1 points | 0 comments https://thehackernews.com/2026/03/hikvision-and-rockwell-automation-cvss.htmlSH.ITJUST.WORKS
9 Mar KEVCISA Adds Three Known Exploited Vulnerabilities to CatalogCISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2021-22054 Omnissa Workspace ONE Server-Side Request Forgery CVE-2025-26399 SolarWinds Web Help Desk Deserialization of Untrusted Data Vul…CISA.GOV
🐛 COMMON VULNERABILITIES AND EXPOSURES 9[−]
9 MarCritical ExifTool Vulnerability Allows Malicious Images to Execute Code on macOSMany users believe macOS is inherently resistant to malware, but a newly discovered vulnerability proves otherwise. Kaspersky’s Global Research and Analysis Team (GReAT) recently uncovered a critical flaw, tracked as CVE-2026-3102, within ExifTool. ExifTool is a widely popular op…GBHACKERS.COM
9 MarNginx UI Vulnerabilities Let Attackers Download Full System BackupsA critical security flaw has been discovered in Nginx UI that allows unauthenticated threat actors to download and decrypt complete system backups. Tracked as CVE-2026-27944, this vulnerability carries a maximum critical severity score of 9.8 out of 10. The flaw exposes highly se…GBHACKERS.COM
9 Mar1-Click ZITADEL Vulnerability Could Allow Full System TakeoverA critical Cross-Site Scripting (XSS) vulnerability has been discovered in ZITADEL, a popular open-source identity and access management platform. Tracked as CVE-2026-29191 with a Critical severity rating, this flaw resides in the platform’s login V2 interface, specifically…GBHACKERS.COM
9 MarApache ZooKeeper Flaw Exposes Sensitive Data to AttackersApache ZooKeeper, a centralized service used for maintaining configuration information and naming in distributed systems, has received critical security updates. The Apache Software Foundation recently addressed two “Important” severity vulnerabilities that could expo…GBHACKERS.COM
9 MarVaultwarden Vulnerabilities Enable Privilege Escalation and Data ExposureTwo high-severity vulnerabilities have been discovered in Vaultwarden, a widely used alternative Bitwarden server implementation written in Rust. These security flaws, tracked as CVE-2026-27803 and CVE-2026-27802, allow compromised Manager accounts to bypass authorization checks,…GBHACKERS.COM
9 MarCVE program funding secured, easing fears of repeat crisisThe Cybersecurity and Infrastructure Security Agency and the MITRE Corporation have renegotiated the contract supporting the 26-year-old Common Vulnerabilities and Exposures Program in a way that eliminates the looming expiration that triggered panic across the security community…CSOONLINE.COM
9 MarZDI-26-172: Unraid Authentication Request Path Traversal Authentication Bypass VulnerabilityThis vulnerability allows remote attackers to bypass authentication on affected installations of Unraid. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-3839.ZERODAYINITIATIVE.COM
9 MarZDI-26-171: Unraid Update Request Path Traversal Remote Code Execution VulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-3838.ZERODAYINITIATIVE.COM
9 MarVU#976247: Retraction of "Antivirus and Endpoint Detection and Response Archive Scanning Engines may not properly scan malformed ZIP archives"Overview Malformed ZIP headers can be used to obfuscate malicious content in ZIP files from antivirus detection tools. Despite the presence of malformed headers, custom extraction software can decompress the ZIP archive, allowing potentially malicious payloads to be recovered aft…KB.CERT.ORG
⚠️ VULNERABILITY DISCLOSURE 24[−]
9 MarCoruna iOS Exploit Kit Goes Mass-Market: Cybersecurity Today for March 9, 2026 with David ShipleyCoruna iOS Exploit Kit Goes Mass-Market, FBI Wiretap Platform Breach Probe, Windows Terminal ClickFix, and Iran-War Cyber Escalation This episode covers several major cybersecurity developments: Google's Threat Intelligence Group details Coruna, a sophisticated iOS exploit kit wi…CYBERSECURITYTODAY.LIBSYN.COM
9 Mar KEVCISA Alerts Users to Actively Exploited Vulnerabilities Impacting macOS and iOSThe Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding three actively exploited vulnerabilities affecting multiple Apple platforms. On March 5, 2026, CISA added these security flaws to its Known Exploited Vulnerabilities (KEV) catalog, re…GBHACKERS.COM
9 MarWiFi Signals Can Track Human Activity Through Walls by Mapping Body KeypointsIn late February 2026, an open-source project named RuView (formerly WiFi DensePose) surged to the top of GitHub trending lists. This edge AI system proves that everyday WiFi signals can track human movement, estimate body poses, and monitor vital signs through walls, all without…GBHACKERS.COM
9 MarTrendAI™ at [un]prompted 2026: From KYC Exploits to Agentic DefenseAt [un]prompted 2026, TrendAI™ demonstrated how documents can be used to exploit AI-driven KYC pipelines and introduced FENRIR, an automated system for discovering AI vulnerabilities at scale.TRENDMICRO.COM
9 MarPQC roadmap remains hazy as vendors race for early advantagePost-quantum cryptography (PQC) has long sat on the periphery of enterprise security, with experts calling it inevitable but not urgent. That posture is beginning to shift. Earlier this year, Palo Alto Networks published a blog announcing a new “quantum-safe security” initiative,…CSOONLINE.COM
9 Mar KEVHikvision Multiple Product Vulnerability Could Let Attackers Escalate PrivilegesThe Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical security flaw affecting multiple Hikvision products to its Known Exploited Vulnerabilities (KEV) catalog. This urgent addition, made on March 5, 2026, serves as a stark warning to network …GBHACKERS.COM
9 MarExifTool Vulnerability Lets Malicious Images Trigger macOS Code ExecutionExifTool is a ubiquitous open-source solution for reading, writing, and editing image metadata. It’s the go-to tool for photographers and digital archivists, and is widely used in data analytics, digital forensics, and investigative journalism. Can a computer really get infected …GBHACKERS.COM
9 Mar4 ways to prepare your SOC for agentic AIa way to automate alert triage, threat investigation and eventually higher-level functions. According to IDC , agentic AI is on track to become mainstream infrastructure. The analyst firm expects 45% of organizations to have autonomous agents operating at scale across critical bu…CSOONLINE.COM
9 MarWeb Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical InfrastructureHigh-value organizations located in South, Southeast, and East Asia have been targeted by a Chinese threat actor as part of a years-long campaign. The activity, which has targeted aviation, energy, government, law enforcement, pharmaceutical, technology, and telecommunications se…THEHACKERNEWS.COM
9 MarRogues gallery: 15 worst ransomware groups active todayRansomware-as-a-service (RaaS) models, double extortion tactics, and increasing adoption of AI characterize the evolving ransomware threat landscape. Law enforcement takedowns of groups such as LockBit have contributed to making the ransomware marketplace more fragmented, with em…CSOONLINE.COM
9 MarBreaking in with CrashFix, supply chain security, and CMMC phase 1 - ESW #449Interview with Anna Pham Breaking in with ClickFix: Anatomy of a modern endpoint attack Cybersecurity company Huntress just published a report on a new ClickFix variant they’ve discovered, which they’ve dubbed CrashFix. This technique was developed by KongTuke to serve as the pri…YOUTUBE.COM
9 MarNew Attack Against Wi-FiIt’s called AirSnitch : Unlike previous Wi-Fi attacks, AirSnitch exploits core features in Layers 1 and 2 and the failure to bind and synchronize a client across these and higher layers, other nodes, and other network names such as SSIDs (Service Set Identifiers). This cros…SCHNEIER.COM
9 MarCyber Espionage Group CL-UNK-1068 Linked to China Targets Asian InfrastructureA highly sophisticated cyber espionage group, designated as CL-UNK-1068, has been actively targeting critical infrastructure across South, Southeast, and East Asia since at least 2020. Originating from China, the threat actors focus on high-value sectors, including aviation, ener…GBHACKERS.COM
9 MarOpenAI says Codex Security found 11,000 high-impact bugs in a monthOpenAI’s new AppSec agent, Codex Security, has already flagged over 11,000 high-severity and critical flaws in real-world codebases during its first 30 days of research testing. The tool, designed to automatically find, validate, and fix vulnerabilities in software repositories, …CSOONLINE.COM
9 MarCISA warns feds to patch iOS flaws exploited in crypto-theft attackssubmitted by kid to cybersecurity 1 points | 0 comments https://www.bleepingcomputer.com/news/security/cisa-warns-of-apple-flaws-exploited-in-spyware-crypto-theft-attacks/SH.ITJUST.WORKS
9 Mar⚡ Weekly Recap: Qualcomm 0-Day, iOS Exploit Chains, AirSnitch Attack & Vibe-Coded MalwareAnother week in cybersecurity. Another week of "you've got to be kidding me." Attackers were busy. Defenders were busy. And somewhere in the middle, a whole lot of people had a very bad Monday morning. That's kind of just how it goes now. The good news? There were some actual win…THEHACKERNEWS.COM
9 MarOpen-source tool Sage puts a security layer between AI agents and the OSsubmitted by monica_b1998 to cybersecurity 2 points | 0 comments https://www.helpnetsecurity.com/2026/03/09/open-source-tool-sage-security-layer-ai-agents/SH.ITJUST.WORKS
9 MarOpen-source tool Sage puts a security layer between AI agents and the OSsubmitted by monica_b1998 to cybersecurity 3 points | 0 comments https://www.helpnetsecurity.com/2026/03/09/open-source-tool-sage-security-layer-ai-agents/SH.ITJUST.WORKS
9 MarShinyHunters claims ongoing Salesforce Aura data theft attacksSalesforce is warning customers that hackers are targeting websites with misconfigured Experience Cloud platforms that give guest users access to more data than intended. However, the ShinyHunters extortion gang claims to be actively exploiting a new bug to steal data from instan…BLEEPINGCOMPUTER.COM
9 MarEricsson US discloses data breach after service provider hackEricsson Inc., the U.S. subsidiary of Swedish networking and telecommunications giant Ericsson, says attackers have stolen data belonging to an undisclosed number of employees and customers after hacking one of its service providers. [...]BLEEPINGCOMPUTER.COM
9 MarGoogle: Cloud attacks exploit flaws more than weak credentialsHackers are increasingly exploiting newly disclosed vulnerabilities in third-party software to gain initial access to cloud environments, with the window for attacks shrinking from weeks to just days. [...]BLEEPINGCOMPUTER.COM
9 MarMy Really Fun RSA 2026 Presentations!This blog is perhaps a little bit more like an ad, so if you don’t want to check the ads, consider not reading it. a very cyber image (Gemini) But this year at RSA 2026, I’m speaking on three topics: securing AI, using AI for SOC, and sharing lessons about how Google applies AI a…MEDIUM.COM
9 MarFixing request smuggling vulnerabilities in Pingora OSS deploymentsToday we’re disclosing request smuggling vulnerabilities when our open source Pingora service is deployed as an ingress proxy and how we’ve fixed them in Pingora 0.8.0.CLOUDFLARE.COM
9 MarActive defense: introducing a stateful vulnerability scanner for APIsCloudflare’s new Web and API Vulnerability Scanner helps teams proactively find logic flaws. By using AI to build API call graphs, we identify vulnerabilities that standard defensive tools miss.CLOUDFLARE.COM
📢 SECURITY ADVISORIES 14[−]
9 MarTarnung als Taktik: Warum Ransomware-Angriffe raffinierter werdenStatt eines kurzen, aber sehr schmerzhaften Stiches setzen Cyberkrimelle zunehmend darauf, sich in ihren Opfern festzubeißen und beständig auszusaugen. mycteria – shutterstock.com Ransomware-Angreifer ändern zunehmend ihre Taktik und setzen vermehrt auf unauffällige Infiltration.…CSOONLINE.COM
9 MarCMMC Is Now In ContractsCMMC is no longer a proposed framework or pending regulation. The program is now officially codified and beginning to appear in Department of Defense contract clauses. The rollout will happen gradually through a multi-year phased plan. However, individual contractors often cannot…YOUTUBE.COM
9 MarFrom Alerts to Action: Making Public–Private Threat Intel Actually Useful - Ian Washburn - CSP #222Threat intelligence too often arrives as a steady stream of alerts that don’t translate into clear, timely decisions. This episode explores how public-sector intel flows today through channels like CISA, MS-ISAC, and CIS—and why changes in funding and distribution can reshape wha…YOUTUBE.COM
9 Mar9 Must-Know Best Practices for Email SecurityMore than 90% of successful cyberattacks start with email, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). That’s not because security teams lack tools, but because attackers target human decision-making .KNOWBE4.COM
🔥 INCIDENT REPORTING 8[−]
9 MarCountries with Most Personal Records Leaked in Data Breaches (2004-2025)submitted by Innerworld to cybersecurity 2 points | 0 commentsINFOSEC.PUB
9 MarCountries with Most Personal Records Leaked in Data Breaches (2004-2025)submitted by Innerworld to security 5 points | 0 commentsPROGRAMMING.DEV
9 MarCountries with Most Personal Records Leaked in Data Breaches (2004-2025)submitted by Innerworld to cybersecurity 2 points | 0 commentsSH.ITJUST.WORKS
9 MarMicrosoft: Fake AI Extensions Breached Chat Histories in 20,000+ Enterprise TenantsMicrosoft has issued an alert after uncovering a wave of malicious Chromium-based browser extensions masquerading as legitimate AI assistant tools. The extensions, available on the Chrome Web Store and compatible with both Google Chrome and Microsoft Edge, secretly collected priv…GBHACKERS.COM
9 MarWhy Password Audits Miss the Accounts Attackers Actually WantPassword audits often focus on complexity rules but miss the accounts attackers actually target. Specops Software explains how breached passwords, orphaned users, and service accounts can leave organizations exposed. [...]BLEEPINGCOMPUTER.COM
9 MarRussian-backed hackers have gained access to Signal and WhatsApp accounts used by officials, military personnel and journalists, as claimed by two intelligence agencies in the Netherlands.submitted by cm0002 to cybersecurity 2 points | 0 comments https://www.reuters.com/world/europe/russia-backed-hackers-breach-signal-whatsapp-accounts-officials-journalists-2026-03-09/INFOSEC.PUB
9 MarUNC4899 Breached Crypto Firm After Developer AirDropped Trojanized File to Work DeviceThe North Korean threat actor known as UNC4899 is suspected to be behind a sophisticated cloud compromise campaign targeting a cryptocurrency organization in 2025 to steal millions of dollars in cryptocurrency. The activity has been attributed with moderate confidence to the stat…THEHACKERNEWS.COM
9 MarSalt Typhoon is hacking the world’s phone and internet giants. Here’s everywhere that’s been hit.Salt Typhoon is by far one of the most prolific hacking groups in recent years, breaching some of the top American phone companies. Here are all the countries that have been targeted.TECHCRUNCH.COM
🕵️ THREAT INTELLIGENCE 23[−]
9 MarISC Stormcast For Monday, March 9th, 2026 https://isc.sans.edu/podcastdetail/9840, (Mon, Mar 9th)(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.ISC.SANS.EDU
9 MarTransparent Tribe’s ‘Vibeware’ Move Points to AI-Made Malware at ScaleTransparent Tribe (APT36) is moving from traditional, off‑the‑shelf tools to an AI-assisted malware model researchers now call “vibeware,” signaling how large language models are starting to industrialize mediocre but relentless attacks at scale. In its latest campaigns against …GBHACKERS.COM
9 MarCybercrime Group in Vietnam Enables Massive Fraudulent SignupsA wave of fraudulent account registrations to a cybercrime ecosystem operating out of Vietnam. These fake accounts are not just spam; they underpin large-scale financial fraud, phishing, and interpersonal scams that erode trust in online platforms. Attackers scripted mass “puppet…GBHACKERS.COM
9 MarClipXDaemon Malware Targets Crypto Users in Linux X11 SessionsClipXDaemon is a new Linux malware family that hijacks cryptocurrency clipboard data in X11 sessions, operating fully offline without any command‑and‑control (C2) infrastructure. It reuses a ShadowHS-style loader built with the public bincrypter framework but delivers a completel…GBHACKERS.COM
9 MarNIS-2: Tausende reißen BSI-Frist und riskieren StrafenDas deutsche Gesetz zur Umsetzung der NIS-2-Richtlinie ist am 6. Dezember 2025 in Kraft getreten. konstakorhonen – shutterstock.com Welche Auswirkungen IT-Sicherheitsvorfälle für die Bevölkerung haben können, hat sich etwa gezeigt, als im vergangenen Herbst ein Flughafen-Dienstle…CSOONLINE.COM
9 MarMaaS VIP Keylogger Campaign Uses Steganography to Steal Credentials at ScaleA large-scale spear-phishing campaign distributing a VIP Keylogger variant sold as Malware-as-a-Service (MaaS). The campaign employs steganography, in-memory execution, and modular payload design to evade defenses while harvesting credentials across browsers, email clients, and c…GBHACKERS.COM
9 MarCloned AI Tool Sites Distribute Malware in ‘InstallFix’ CampaignThreat actors replace legitimate commands on the cloned installation webpages with malicious commands. The post Cloned AI Tool Sites Distribute Malware in ‘InstallFix’ Campaign appeared first on SecurityWeek .SECURITYWEEK.COM
9 MarIran-Linked Hackers Target U.S. Critical Infrastructure Amid Rising Cyber ThreatsIran-linked threat actors are escalating cyber operations against U.S. and allied networks, with Seedworm recently deploying new backdoors against critical infrastructure and high-value organizations amid the current regional conflict. Activity associated with the Iranian APT gro…GBHACKERS.COM
9 MarInternet Infrastructure TLD .arpa Abused in Phishing AttacksAbusing DNS record management controls, the threat actor hides the location of malicious content via Cloudflare. The post Internet Infrastructure TLD .arpa Abused in Phishing Attacks appeared first on SecurityWeek .SECURITYWEEK.COM
9 MarIran-linked APT targets US critical sectors with new backdoors - Help Net Securitysubmitted by kid to cybersecurity 0 points | 0 comments https://www.helpnetsecurity.com/2026/03/06/seedworm-muddywater-backdoors-victims/SH.ITJUST.WORKS
9 MarBoryptGrab Malware Abuses GitHub to Steal Browser and Crypto Wallet DataA new Windows stealer dubbed BoryptGrab is being distributed through a large, ongoing campaign abusing fake GitHub repositories that pose as free tools, game cheats, and popular utilities. The malware focuses on stealing browser data, cryptocurrency wallet information, and system…GBHACKERS.COM
9 MarMentorship Monday - Discussions for career and learning!submitted by shellsharks to cybersecurity 1 points | 0 comments Weekly thread for any and all career, learning and general guidance questions. Thinking of taking a training or going for a cert? Wondering how to level up your career? Wondering what NOT to do? Got other questions? …INFOSEC.PUB
9 MarClickFix Attack Uses Windows Terminal to Evade DetectionFake CAPTCHA pages instruct victims to paste malicious commands in the Windows Terminal instead of the Run dialog. The post ClickFix Attack Uses Windows Terminal to Evade Detection appeared first on SecurityWeek .SECURITYWEEK.COM
9 Mar900+ Certificates Used by Fortune 500, Governments Exposed by Key Leakssubmitted by kid to cybersecurity 1 points | 0 comments https://hackread.com/certificates-fortune-500-gov-exposed-key-leaks/SH.ITJUST.WORKS
9 MarFake CleanMyMac Site Spreads SHub Stealer, Targets Crypto WalletsHackers are abusing a fake CleanMyMac download page to infect macOS users with SHub Stealer. This powerful infostealer drains crypto wallets and hijacks sensitive data. Instead of offering a standard installer, the page shows an “advanced” installation step telling users to “Open…GBHACKERS.COM
9 MarFBI Investigating ‘Suspicious’ Cyber Activity on System Holding Sensitive Surveillance Information - SecurityWeeksubmitted by kid to cybersecurity 3 points | 0 comments https://www.securityweek.com/fbi-investigating-suspicious-cyber-activity-on-system-holding-sensitive-surveillance-information/SH.ITJUST.WORKS
9 MarSecure agentic AI for your Frontier TransformationLearn how Microsoft Agent 365 and Microsoft 365 E7 can help secure your Frontier Transformation. The post Secure agentic AI for your Frontier Transformation appeared first on Microsoft Security Blog .MICROSOFT.COM
9 MarSecurity Risk Advisors Releases “The Purple Perspective 2026” ReportPhiladelphia, PA, United States, March 9th, 2026, CyberNewswire Security Risk Advisors (SRA) is proud to announce the release of its inaugural report, The Purple Perspective 2026. This comprehensive analysis examines real-world detection and prevention performance against a curat…GBHACKERS.COM
9 MarCybersecurity M&A Roundup: 42 Deals Announced in February 2026Significant cybersecurity M&A deals announced by Check Point, Booz Allen, Proofpoint, Sophos, Palo Alto Networks, and Zscaler. The post Cybersecurity M&A Roundup: 42 Deals Announced in February 2026 appeared first on SecurityWeek .SECURITYWEEK.COM
9 MarAI-to-AI Communication and Secret AI Code Must Be Stopped At All CostsAs I wrote in my recent book, How AI and Quantum Impacts Cyber Threats and Defenses , as we humans use AI more and more, AI will begin to communicate with itself using new AI-only communication methods that humans cannot easily see or read.KNOWBE4.COM
9 MarStop Credential Stealers With ThisCredential-stealing malware can silently extract passwords and vaults from user systems. Simple mitigations can drastically reduce risk. Disabling the Windows Run dialog blocks an attack vector, and using a password manager with a strong master password protects against vault the…YOUTUBE.COM
9 MarAnnouncing Prisma AIRS Availability in Singapore RegionPalo Alto Networks launches Prisma AIRS in Singapore. Get AI-native threat protection, data residency and cyber resilience. The post Announcing Prisma AIRS Availability in Singapore Region appeared first on Palo Alto Networks Blog .PALOALTONETWORKS.COM
9 MarFrom Narrative to Knowledge Graph | LLM-Driven Information Extraction in Cyber Threat IntelligenceLLMs can turn CTI narratives into structured intelligence at scale, but speed-accuracy trade-offs demand careful design for operational defense workflows.SENTINELONE.COM
🌐 CYBER THREAT LANDSCAPE 3[−]
9 MarChrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection and Data TheftTwo Google Chrome extensions have turned malicious after what appears to be a case of ownership transfer, offering attackers a way to push malware to downstream customers, inject arbitrary code, and harvest sensitive data. The extensions in question, both originally associated wi…THEHACKERNEWS.COM
9 MarCan the Security Platform Finally Deliver for the Mid-Market?Mid-market organizations are constantly striving to achieve security levels on a par with their enterprise peers. With heightened awareness of supply chain attacks, your customers and business partners are defining the security level you must meet. What if you could be the enable…THEHACKERNEWS.COM
9 MarMicrosoft Teams phishing targets employees with backdoorsHackers contacted employees at financial and healthcare organizations over Microsoft Teams to trick them into granting remote access through Quick Assist and deploy a new piece of malware called A0Backdoor. [...]BLEEPINGCOMPUTER.COM
📡 INFOSEC NEWS 8[−]
9 MarRing’s Jamie Siminoff has been trying to calm privacy fears since the Super Bowl, but his answers may not helpThe facial recognition question is where things get more tangled.TECHCRUNCH.COM
9 MarMicrosoft still working to fix Windows Explorer white flashesMicrosoft has confirmed that it's still working to fully address a known issue that causes bright white flashes when opening the File Explorer on some Windows 11 systems. [...]BLEEPINGCOMPUTER.COM
9 MarEncrypted Client Hello: Ready for Prime Time?, (Mon, Mar 9th)Last week, two related RFCs were published:
ISC.SANS.EDU
9 MarFBI warns of phishing attacks impersonating US city, county officialsThe Federal Bureau of Investigation (FBI) warns that criminals are impersonating U.S. officials in phishing attacks targeting businesses and individuals who request city and county planning and zoning permits. [...]BLEEPINGCOMPUTER.COM
9 MarRussian government hackers targeting Signal and WhatsApp users, Dutch spies warnDutch intelligence is accusing Russia-backed hackers of running a “large-scale global” hacking campaign against Signal and WhatsApp users.TECHCRUNCH.COM
9 MarMicrosoft Teams will tag third-party bots trying to join meetingsMicrosoft says Teams will soon automatically tag third-party bots in lobbies, allowing organizers to control whether they can join meetings. [...]BLEEPINGCOMPUTER.COM
9 MarOpenAI acquires Promptfoo to secure its AI agentsThis deal underscores how frontier labs are scrambling to prove their technology can be used safely in critical business operations.TECHCRUNCH.COM
9 MarDutch govt warns of Signal, WhatsApp account hijacking attacksRussian state-sponsored hackers have been linked to an ongoing Signal and WhatsApp phishing campaign targeting government officials, military personnel, and journalists to gain access to sensitive messages. [...]BLEEPINGCOMPUTER.COM