🐛 COMMON VULNERABILITIES AND EXPOSURES 3[−]
14 MarCVE-2026-31802 node-tar Symlink Path Traversal via Drive-Relative LinkpathInformation published.MSRC.MICROSOFT.COM
14 MarCVE-2026-3381 Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlibInformation published.MSRC.MICROSOFT.COM
14 MarCVE-2026-27171 zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.Information published.MSRC.MICROSOFT.COM
⚠️ VULNERABILITY DISCLOSURE 8[−]
14 MarGlobal Authorities Take Down 45,000 Malicious IPs Used in Ransomware CampaignsAn unprecedented international law enforcement effort has successfully dismantled a massive cybercrime network. Coordinated by INTERPOL, the initiative targeted critical infrastructure used in phishing, malware, and ransomware campaigns worldwide. Operation Synergia III Dubbed &#…GBHACKERS.COM
14 MarCritical HPE AOS-CX Vulnerability Allows Admin Password ResetsThe vulnerability can be exploited remotely, without authentication, to circumvent existing authentication controls. The post Critical HPE AOS-CX Vulnerability Allows Admin Password Resets appeared first on SecurityWeek .SECURITYWEEK.COM
14 MarHidden Risk: Windows LNK & Archive Attack SurfaceWindows LNK files and archives are frequently seen as benign user activity rather than potential attack surfaces. Threat actors exploit this blind spot, including the Chinese Nexus collection which can blend into noisy environments. Failing to restrict LNK execution from writable…YOUTUBE.COM
14 MarCrackArmor: Critical AppArmor Flaws Enable Local Privilege Escalation to Rootsubmitted by cypherpunks to cybersecurity 1 points | 0 comments https://blog.qualys.com/vulnerabilities-threat-research/2026/03/12/crackarmor-critical-apparmor-flaws-enable-local-privilege-escalation-to-rootSH.ITJUST.WORKS
14 MarCrackArmor: Critical AppArmor Flaws Enable Local Privilege Escalation to Rootsubmitted by cm0002 to cybersecurity 1 points | 0 comments https://www.qualys.com/2026/03/10/crack-armor.txtINFOSEC.PUB
14 MarOpenClaw AI Agent Flaws Could Enable Prompt Injection and Data ExfiltrationChina's National Computer Network Emergency Response Technical Team (CNCERT) has issued a warning about the security stemming from the use of OpenClaw (formerly Clawdbot and Moltbot), an open-source and self-hosted autonomous artificial intelligence (AI) agent. In a post shared o…THEHACKERNEWS.COM
14 MarMicrosoft releases Windows 11 OOB hotpatch to fix RRAS RCE flawMicrosoft has released an out-of-band (OOB) update to fix a security vulnerabilities affecting Windows 11 Enterprise devices that receive hotpatch updates instead of the regular Patch Tuesday cumulative updates. [...]BLEEPINGCOMPUTER.COM
14 MarDeploy AWS applications and access AWS accounts across multiple Regions with IAM Identity CenterIf your organization relies on AWS IAM Identity Center for workforce access, you can now extend that access across multiple AWS Regions with multi-Region replication. Previously, AWS access portal was only available in one Region, when you add an additional Region, users get an a…AWS.AMAZON.COM
🔥 INCIDENT REPORTING 1[−]
14 MarReceived Someone Else’s Confidential Email? Here’s What To Do.When we think about misdirected email , we often put ourselves in the shoes of the sender. After all, nobody wants to tell their manager that they might (however accidentally) be responsible for a data breach. But what you do when you’re on the other side of the inbox?KNOWBE4.COM
🕵️ THREAT INTELLIGENCE 4[−]
14 MarGlassWorm Spreads via 72 Malicious Open VSX Extensions Hidden in Transitive DependenciesThe GlassWorm malware campaign has evolved, significantly escalating its attacks on software developers. Instead of embedding malware directly into initial releases, the threat actors are now using transitive dependencies to sneak malicious code into developer environments. This …GBHACKERS.COM
14 MarGlassWorm Supply-Chain Attack Abuses 72 Open VSX Extensions to Target DevelopersCybersecurity researchers have flagged a new iteration of the GlassWorm campaign that they say represents a "significant escalation" in how it propagates through the Open VSX registry. "Instead of requiring every malicious listing to embed the loader directly, the threat actor is…THEHACKERNEWS.COM
14 MarUpcoming Speaking EngagementsThis is a current list of where and when I am scheduled to speak: I’m giving the Ross Anderson Lecture at the University of Cambridge’s Churchill College at 5:30 PM GMT on Thursday, March 19, 2026. I’m speaking at RSAC 2026 in San Francisco, California, USA, on Wednesday, March 2…SCHNEIER.COM
14 MarMY TAKE: The AI magic is back — whether it endured depends on Amazon’s next movesI ran an experiment this week that I did not expect to be instructive, and it was. Related: How ChatGPT is becoming Microsoft Office The setup was simple. I had been working through a spontaneous personal essay — about cognitive … (more…) The post MY TAKE: The AI magic is b…LASTWATCHDOG.COM
🎙️ PODCASTS 1[−]
14 MarAI Anxiety: Cybersecurity Today with Special Guest Krish Banerjee, Managing Director (Partner) & Canada Lead - Data & AI - AccentureGemini in Google Workspace, Agentic AI, and Managing AI Anxiety (with Accenture's Krish Banerjee) Cybersecurity Today would like to thank Meter for their support in bringing you this podcast. Meter delivers a complete networking stack, wired, wireless and cellular in one integrat…CYBERSECURITYTODAY.LIBSYN.COM
📡 INFOSEC NEWS 2[−]
14 MarSmartApeSG campaign uses ClickFix page to push Remcos RAT, (Sat, Mar 14th)Introduction
ISC.SANS.EDU
14 MarAppsFlyer Web SDK used to spread crypto stealer JavaScript codeMalicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack. [...]BLEEPINGCOMPUTER.COM