Cyber Daily News

Critical ScreenConnect flaw exposes machine keys - if you run ConnectWise remote access, patch now. RMM tools remain prime targets because they already have the access attackers want. securityweek.com/critical-scree… #infosec #ScreenConnect #vulnerability #RMM

CISA adds CVE-2026-20131 (CVSS 10.0) to KEV - unauth RCE as root in Cisco Secure Firewall Management Center via insecure Java deserialization. If you run FMC, patch now or pull it off the network. securityaffairs.com/189682/securit… #cybersecurity #Cisco #CISA #KEV

Analysis reveals Iran spent six months building cyber infrastructure - including US-based shell companies - to ensure its hacking ops could survive kinetic strikes. Pre-positioning for resilience, not just retaliation. securityweek.com/iran-readied-c… #cybersecurity #Iran #APT

Interlock ransomware was exploiting CVE-2026-20131 in Cisco Firewall Management Center for 36 days before Cisco disclosed it. Root-level RCE, no auth required. Amazon honeypots caught the pre-disclosure activity. Patch now. thecyberexpress.com/interlock-fmc-… #infosec #cisco #ransomware #zeroday

Cyber Daily News for March 19, 2026 youtube.com/watch?v=jWBhd-… #CiscoFMCZero-Day #DarkSwordiOSExploit #AgenticAIFraud #TelnetdRCE

CISA adds SharePoint deserialization RCE (CVE-2026-20963, CVSS 8.8) and Zimbra stored XSS to the KEV catalog. SharePoint one is ugly - auth'd attacker gets remote code exec over the network. Patch now. securityaffairs.com/189628/securit… #cybersecurity #SharePoint #CISA #KEV

State-sponsored actors and spyware vendors are sharing 'DarkSword,' an iOS exploit chain targeting six vulnerabilities for full device compromise. If you run a mobile fleet, check your MDM posture now. securityweek.com/darksword-ios-… #infosec #iOS #spyware #mobilesecurity

CVE-2026-32746: Pre-auth RCE in GNU telnetd (CVSS 9.8). Buffer overflow in the LINEMODE SLC handler gives unauthenticated attackers root. No patch until April 1. If you still run telnetd in 2026, today is the day to stop. securityaffairs.com/189620/hacking… #infosec #vulnerability #RCE

CVE-2026-3888 (CVSS 7.8): Ubuntu Desktop 24.04+ local privesc to root via snap-confine and systemd-tmpfiles race condition. Exploit window is 10-30 days but the result is full system compromise. Patch your boxes. securityaffairs.com/189614/securit… #cybersecurity #ubuntu #linux #infosec

Cyber Daily News for March 18, 2026 youtube.com/watch?v=7m97yH… #EUcybersanctions #RondoDoxbotnet #CursorJackIDEattack #WhatsAppViewOncebypass

EU slaps sanctions on Chinese and Iranian entities tied to cyberattacks on critical infrastructure - including Integrity Tech, linked to Flax Typhoon ops that compromised 65K+ devices across six member states. US sanctioned them in Jan 2025; EU finally follows. securityaffairs.com/189585/securit… #cybersecurity #APT #FlaxTyphoon #sanctions

New Android attack uses LSPosed framework to hijack payment apps at runtime, bypassing SIM-binding protections entirely. If your mobile payment security model assumes OS integrity, this is your wake-up call. infosecurity-magazine.com/news/android-a… #infosec #android #mobilesecurity #fintech

CursorJack: malicious MCP deeplinks in Cursor IDE can trick devs into approving arbitrary code execution. AI coding assistants are expanding attack surface faster than most teams realize. infosecurity-magazine.com/news/cursor-ja… #cybersecurity #AI #devsecops

RondoDox botnet now exploiting 174 vulnerabilities at 15K attempts/day with increasingly targeted approach. If your patching strategy is still quarterly, you're the low-hanging fruit. securityweek.com/rondodox-botne… #infosec #botnet #vulnerability #patching

Cyber Daily News for March 17, 2026 youtube.com/watch?v=e7Phnd… #Strykerbreach #EUcybersanctions #SteammalwareFBI #ClickFixmacOS

China-linked APT maintained persistent access to Southeast Asian military networks for years using novel backdoors. Long dwell times in defense orgs remain one of the hardest detection problems in the industry. darkreading.com/threat-intelli… #cybersecurity #APT #espionage #threatintel

Laundry Bear APT drops new DRILLAPP backdoor on Ukrainian orgs, abusing Edge remote debugging for stealth. Charity and Starlink lures via LNK files - weaponizing trust in wartime. securityaffairs.com/189519/malware… #infosec #APT #malware #Ukraine

FBI Seattle is hunting victims of 8 malware-laced Steam games (PirateFi, Lunara, others) distributed between May 2024 and Jan 2026. If you installed any, the Bureau wants to hear from you. Supply chain trust on gaming platforms remains a mess. securityaffairs.com/189515/cyber-c… #cybersecurity #malware #Steam #FBI

DNS-based attack in AWS Bedrock AgentCore lets AI sandboxes exfiltrate cloud data. If your AI workloads can resolve arbitrary DNS, your isolation model is already broken. infosecurity-magazine.com/news/security-… #cybersecurity #AWS #CloudSecurity #AI

Cyber Daily News for March 16, 2026 youtube.com/watch?v=C83-zW… #CrackArmorAppArmor #Android17Protection #EUAIAct #PayloadRansomware