Category: Cyber Security News

The Dutch Ministry of Finance took several systems, including its digital treasury banking portal, offline after detecting a security breach on March 19 and is conducting a forensic investigation with the NCSC and external experts. Approximately 1,600 public institutions cannot view their treasury account balances online, though funds remain accessible and payments continue; authorities have notified the Dutch Data Protection Authority and filed a report with the High Tech Crime Team. #DutchMinistryOfFinance #TreasuryBankingPortal

Jonathan Spalletta, known online as “Cthulhon” and “Jspalletta,” allegedly hacked the Uranium Finance automated market maker on Binance’s BNB Chain twice in April 2021, stealing approximately $53.3 million and forcing the exchange to shut down. He then laundered the proceeds through Tornado Cash, spent funds on high-value collectibles, had assets and collectibles seized in 2025, and now faces charges including computer fraud and money laundering. #JonathanSpalletta #UraniumFinance #TornadoCash #BNBChain

Hackers hijacked the npm account for the popular Axios package and published two malicious releases that included a dependency which installs remote access trojans on Linux, Windows, and macOS. The tainted releases ([email protected] and [email protected]) lacked OIDC provenance, were staged in advance with OS-specific droppers that self-destruct, and users are advised to pin to [email protected] and [email protected], rotate credentials, and rebuild from known-good states. #Axios #plain-crypto-js

AI agents are shifting enterprise AI from passive assistants to autonomous systems that can reason, plan, and take actions across business systems. This creates a new identity-first security challenge where risk is driven by an agent’s level of access and autonomy. #TokenSecurity #ProductionAgents

Hackers are actively exploiting a critical vulnerability, CVE-2026-3055, in Citrix NetScaler ADCs that impacts the NetScaler Gateway used for user access, allowing unauthenticated requests to disclose sensitive memory. Citrix patched the flaw on March 23 after exploitation was reported, and CISA ordered federal agencies to apply the update immediately to prevent…

Google’s Quantum AI team published a whitepaper showing that elliptic curve cryptography securing Bitcoin, Ethereum, and most blockchains is more vulnerable to quantum attacks than previously believed, lowering the quantum-resource estimates needed to break ECDLP-256. Their new circuits require under 1,200 logical qubits and about 90 million Toffoli gates—implying an attack…

Researchers found four chained vulnerabilities in the open-source Python multi-agent framework CrewAI that can be exploited—via the Code Interpreter and its SandboxPython fallback—to escape sandboxes, execute arbitrary code, perform SSRF, and read local files. CrewAI maintainers are working on mitigations including blocking risky modules, changing defaults to fail closed, clearer runtime…

Security firm Wiz reports that TeamPCP has been using compromised credentials to access AWS environments and exfiltrate large volumes of data following a campaign that began with a Trivy compromise. The group chained supply-chain attacks to harvest CI/CD tokens and secrets, validated them with TruffleHog, and used the credentials to move…

The Axios supply chain attack on March 31, 2026 hijacked an npm maintainer account to publish poisoned Axios releases that installed a cross-platform remote access trojan via a phantom dependency. The attacker used the fake package plain-crypto-js to run a post-install dropper that contacted C2 at http://sfrclak.com:8000/6202033 and erased traces by…

Microsoft has resolved a bug that caused classic Outlook to crash and prompt to start in Safe Mode when older Outlook builds used the newest Teams Meeting Add-in. A fix is rolling out with Microsoft Teams version 26058.712.4527.9297, and Microsoft recommends updating Outlook, performing an Online Repair, or disabling the add-in as a temporary workaround while it investigates other classic Outlook issues such as EWS group-creation errors and a disappearing mouse pointer. #TeamsMeetingAddin #ClassicOutlook

Jennifer Cox recounts how cybersecurity has shifted from an IT problem to a core business risk and argues that aligning people, processes, and priorities matters more than simply adding tools. She highlights measurable wins from security automation—reduced alert fatigue, faster investigations, and smoother compliance—while urging leaders to prioritize outcomes, resilience, and…

CareCloud disclosed a March 16 incident in which an unauthorized third party temporarily accessed one of its electronic health record environments, causing a brief operational disruption. The company restored access the same day, engaged external forensic and law enforcement teams, and is still determining whether patient data was accessed or exfiltrated….

CISA ordered U.S. federal agencies to patch Citrix NetScaler appliances by April 2 to address CVE-2026-3055, an actively exploited input-validation flaw that can expose sensitive SAML IDP data. Security firms reported in-the-wild exploitation soon after Citrix released fixes, warning attackers can steal admin session IDs and potentially fully compromise unpatched NetScaler/ADC and Gateway appliances. #CVE-2026-3055 #CitrixNetScaler

Healthcare IT firm CareCloud disclosed a March 16 intrusion that compromised one of six electronic health record environments and caused about eight hours of network disruption. The company engaged its cybersecurity carrier and a Big Four incident response team, restored affected systems, and is investigating the scope of exposed patient data. #CareCloud #EHR