Industrial vendors Siemens, Schneider Electric, Mitsubishi Electric, and Moxa issued Patch Tuesday advisories addressing multiple vulnerabilities in ICS products, including critical XSS, misconfigurations, and remote DoS flaws. Government and CERT advisories from CISA and VDE-CERT also highlight affected systems such as Simatic S7-1500, EcoStruxure, MELSEC, and various networking and camera devices….
Category: Cyber Security News
Microsoft’s Patch Tuesday March 2026 rollout fixes 79 vulnerabilities across SQL Server, .NET, Office, SharePoint Server, and Azure, including three critical bugs and two publicly disclosed zero-days. Notable fixes include CVE-2026-21262 (SQL Server privilege escalation) and CVE-2026-26144 (Excel Copilot zero-click information disclosure), and administrators are urged to apply updates immediately to…
Finland faces an expanding cyberespionage campaign from Russia and China targeting its technology sector, research institutions, and government networks, according to SUPO. The SUPO report warns these state-backed operations are focused on economic and technological intelligence and will remain a long-term challenge as Finland balances open research with national security. #Russia…
Researchers uncovered five malicious Rust crates on crates.io that masqueraded as time-related utilities and exfiltrated .env file data to threat actor-controlled infrastructure. The campaign (notably chrono_anchor) impersonated timeapi.io via timeapis[.]io, and a related AI-powered attack using hackerbot-claw exploited GitHub Actions to compromise Aqua Security’s Trivy extension (CVE-2026-28353), leading to removals and…
Automated calls and spoofed texts impersonated the Israel Defense Forces’ Home Front Command, directing civilians to prepare for emergencies or avoid shelters and linking to fake websites. Israeli authorities blamed Iranian or pro‑Iranian actors for the coordinated psychological cyber warfare campaign during Operation Rising Lion and urged the public to use…
A new planning and zoning permit phishing scam is targeting US applicants by impersonating city and county officials and using publicly available permit data to craft convincing payment requests. Victims are pressured to pay fake administrative fees via wire transfers, peer-to-peer services, or cryptocurrency, and authorities urge verification through official municipal…
Researchers warn of a campaign abusing FortiGate NGFW appliances—exploiting recent CVEs and weak credentials—to steal configuration files and gain footholds in networks across healthcare, government, and managed service providers. Attackers created persistent admin accounts, decrypted service-account LDAP credentials (fortidcagent), enrolled rogue workstations into Active Directory, and in some cases deployed Pulseway/MeshAgent…
AI agents can autonomously perform tasks like sending emails and moving data, but their unattended access creates a new invisible attack surface that hackers are already exploiting. Join the webinar to learn how attackers trick these agents and practical steps to secure them. #AIAgents #Airia…
Federal agencies face accelerated patch deadlines after CISA ordered an immediate fix for CVE-2025-26399, a critical vulnerability in SolarWinds Web Help Desk that researchers say is being actively exploited. CISA also added two other bugs — including CVE-2026-1603 in Ivanti — to its Known Exploited Vulnerabilities catalog with shortened patch timelines…
Lt. Gen. Joshua Rudd was confirmed by the Senate to lead both U.S. Cyber Command and the National Security Agency, ending an almost year-long leadership vacancy. His nomination drew criticism over his lack of cyber and signals-intelligence experience and raised concerns about surveillance authorities and the upcoming Section 702 renewal. #USCyberCommand…
Jazz emerged from stealth with $61 million in combined seed and Series A funding to scale its context-aware data loss prevention platform. The Tel Aviv startup uses a forensic endpoint agent and an autonomous Agentic Investigator to determine intent and context, cutting DLP noise for large enterprises. #Jazz #AgenticInvestigator…
A Russian-speaking threat actor targeted HR departments for over a year using spear-phishing ISO “resumes” that deploy a sophisticated EDR killer called BlackSanta. BlackSanta weakens and terminates endpoint protections via Defender exclusions, registry changes, notification suppression, DLL sideloading, and kernel‑level process termination. #BlackSanta #RogueKiller
Microsoft released mandatory March 2026 cumulative updates KB5079473 and KB5078883 for Windows 11 (25H2/24H2 and 23H2) to deliver security patches, bug fixes, and new features. Key changes include broader Secure Boot certificate rollout, built-in Sysmon for native event logging, WDAC improvements, and fixes to File Explorer search reliability. #KB5079473 #KB5078883
Microsoft’s March 2026 Patch Tuesday fixes 79 vulnerabilities, including two publicly disclosed zero-days and three Critical flaws affecting Windows, Office, Azure, and related components. Key patches include a SQL Server elevation-of-privilege zero-day, a .NET denial-of-service zero-day, two Office remote code execution bugs exploitable via the preview pane, and an Excel information-disclosure flaw that could enable Copilot data exfiltration. #SQLServer #MicrosoftExcel
Microsoft released the Windows 10 KB5078885 extended security update for March 2026 Patch Tuesday to address 79 vulnerabilities, including two actively exploited zero-days, and to fix a shutdown/hibernation issue affecting Secure Launch-capable devices. The update moves systems to build 19045.7058 (and 19044.7058 for LTSC 2021), rolls out new Secure Boot certificates, and includes security and bug fixes only; it is available to Enterprise LTSC and ESU-enrolled devices via Windows Update. #KB5078885 #Windows10 #SecureBoot #SystemGuard