Ransomware Group AtomSilo Returns After 5 Year Absence The post Bitdefender Threat Debrief | March 2026 appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read the original article: Bitdefender Threat Debrief | March 2026
Critical Microsoft Excel bug weaponizes Copilot Agent for zero-click information disclosure attack
Could steal sensitive personal and financial data After a whopper of a Patch Tuesday last month, with six Microsoft flaws exploited as zero-days, March didn’t exactly roar in like a lion. Just two of the 83 Microsoft CVEs released on…
DOGE employee stole Social Security data and put it on a thumb drive, report says
A whistleblower is accusing a former DOGE member of stealing a large number of Americans’ personal data while he was working at the Social Security Administration, with the plan of using it at his new job. This article has been…
Google Cloud Security Threat Horizons Report #13 (H1 2026) Is Out!
This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our next Cloud Threat Horizons Report, #13 (full version, no info to enter!) that we just released (the official blog for #1 report,…
AWS European Sovereign Cloud achieves first compliance milestone: SOC 2 and C5 reports plus seven ISO certifications
In January 2026, we announced the general availability of the AWS European Sovereign Cloud, a new, independent cloud for Europe entirely located within the European Union (EU), and physically and logically separate from all other AWS Regions. The unique approach…
IT Security News Hourly Summary 2026-03-10 21h : 10 posts
10 posts were published in the last hour 20:2 : Teams Social Engineering Campaign Drops A0Backdoor Malware 20:2 : Fake OpenClaw npm Package Installs GhostClaw Malware 20:2 : Attackers exploit FortiGate devices to access sensitive network information 19:32 : Microsoft…
Teams Social Engineering Campaign Drops A0Backdoor Malware
Attackers are using Microsoft Teams impersonation to deliver A0Backdoor malware. The post Teams Social Engineering Campaign Drops A0Backdoor Malware appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: Teams Social Engineering Campaign…
Fake OpenClaw npm Package Installs GhostClaw Malware
A malicious npm package disguised as OpenClaw installs GhostClaw malware to steal developer credentials and sensitive data. The post Fake OpenClaw npm Package Installs GhostClaw Malware appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read…
Attackers exploit FortiGate devices to access sensitive network information
Attackers are exploiting FortiGate devices to breach networks and steal configuration data containing service account credentials and network details. SentinelOne researchers warn that attackers are exploiting vulnerabilities or weak credentials in FortiGate devices to gain initial access to corporate networks.…
Microsoft Patches 83 Vulnerabilities
Microsoft has fixed a critical vulnerability, but none of the flaws fixed this Patch Tuesday has been exploited in the wild. The post Microsoft Patches 83 Vulnerabilities appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the…
Fortinet FortiManager fgtupdates Vulnerability Allows Attackers to Execute Malicious Commands
Fortinet has disclosed a high-severity stack-based buffer overflow vulnerability in its FortiManager platform that could allow remote unauthenticated attackers to execute unauthorized commands. Tracked as CVE-2025-54820 and assigned a CVSSv3 score of 7.0, the flaw poses a significant risk to…
Zoom Workplace for Windows Vulnerabilities Allow Privilege Escalation
Zoom has released four security bulletins on March 10, 2026, disclosing multiple vulnerabilities across its Windows-based client suite. The flaws, ranging from High to Critical severity, could allow attackers to escalate privileges on affected systems, with one critical flaw exploitable…
Fortinet Security Update – Patch for Multiple Vulnerabilities That Enable Malicious Command Execution
Fortinet released a sweeping security advisory on March 10, 2026, addressing eleven vulnerabilities across its core enterprise products, including FortiManager, FortiAnalyzer, FortiSwitchAXFixed, and FortiSandbox. The flaws range from authentication bypasses and buffer overflows to OS command injection and SQL injection,…
USENIX Security ’25 (Enigma Track) – Risk Is Not A Hammer, And Most Hazards Aren’t Nails
Author, Creator & Presenter: Adam Shostack, Shostack + Associates Our thanks to USENIX Security ’25 (Enigma Track) (USENIX ’25 for publishing their Creators, Authors and Presenter’s tremendous USENIX Security ’25 (Enigma Track) content on the Organizations’ YouTube Channel. Permalink The…
Fake Google Meet Update Can Give Attackers Control of Your Windows PC
Cybersecurity analysts have identified a phishing campaign that can quietly hand control of a Windows computer to attackers after a single click. The scam appears as a routine update notice for Google Meet, but the prompt is fraudulent and…
Security is a team sport: AWS at RSAC 2026 Conference
The RSAC 2026 Conference brings together thousands of professionals, practitioners, vendors, and associations to discuss issues covering the entire spectrum of cybersecurity—a place where innovation meets collaboration and the industry’s brightest minds converge to shape its future. This March, Amazon…
ShinyHunters Hackers Threaten 400 Firms Over Stolen Salesforce Data
ShinyHunters claims to have stolen data from 400 firms via Salesforce portals and is threatening to leak the information unless ransom demands are paid. This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read…
DHS Ousts CBP Privacy Officers Who Questioned ‘Illegal’ Orders
Department of Homeland Security leaders removed top privacy officers who objected to mislabeling government records to block their public release, WIRED has learned. This article has been indexed from Security Latest Read the original article: DHS Ousts CBP Privacy Officers…
Mandiant’s founder just raised $190M for his autonomous AI agent security startup
Mandia, who sold his previous company Mandiant to Google for $5.4 billion in 2022, has launched an agentic security startup. This article has been indexed from Security News | TechCrunch Read the original article: Mandiant’s founder just raised $190M for…
Cybercrime isn’t just a cover for Iran’s government goons – it’s a key part of their operations
Ransomware, malware-as-a-service, infostealers benefit MOIS, too Iranian government-backed snoops are increasingly using cybercrime malware and ransomware infrastructure in their operations – not just hiding behind criminal masks as a cover for destructive cyber activity, according to security researchers.… This article…
Adobe Patches 80 Vulnerabilities Across Eight Products
Adobe has rolled out patches for 80 vulnerabilities across 8 products, including Commerce, Illustrator, Acrobat Reader, and Premiere Pro. The post Adobe Patches 80 Vulnerabilities Across Eight Products appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…
Google’s $32B Wiz Acquisition Set to Become Israel’s Largest Tech Deal Ever
Google’s $32 billion Wiz acquisition is nearing completion, marking a record Israeli tech exit and a major bet on cloud security. The post Google’s $32B Wiz Acquisition Set to Become Israel’s Largest Tech Deal Ever appeared first on TechRepublic. This…
Lantronix EDS3000PS and EDS5000
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication and execute code with root-level privileges. The following versions of Lantronix EDS3000PS and EDS5000 are affected: EDS3000PS 3.1.0.0R2 (CVE-2025-67039, CVE-2025-70082, CVE-2025-67041) EDS5000 2.1.0.0R3 (CVE-2025-67034, CVE-2025-67035,…
Apeman Cameras
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to take control of the device or view camera feeds. The following versions of Apeman Cameras are affected: ID71 vers:all/* (CVE-2025-11126, CVE-2025-11851, CVE-2025-11852) CVSS Vendor Equipment Vulnerabilities v3…