Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, hacktivist activities, data breaches, and significant developments to keep you informed and secure in the ever-evolving digital landscape.
1. 149 Hacktivist DDoS Attacks Hit 110 Organizations in 16 Countries After Middle East Conflict
Published: 2026-03-04
Following U.S.-Israel military operations against Iran, hacktivist groups launched 149 DDoS attacks targeting 110 organizations across 16 countries, with groups like Keymous+ and DieNet responsible for nearly 70% of the activity. Primarily affecting government, finance, and telecom sectors in the Middle East.
2. Global Coalition Dismantles Tycoon 2FA Phishing-as-a-Service Platform
Published: 2026-03-04
Microsoft, Europol, and international partners took down the Tycoon 2FA platform, which enabled large-scale MFA bypass phishing attacks against hundreds of thousands of organizations. Over 330 domains were seized in the coordinated operation.
3. LexisNexis Confirms Data Breach as Hackers Leak Stolen Files
Published: 2026-03-03
Data analytics firm LexisNexis confirmed a breach where threat actor FulcrumSec exfiltrated 2GB of legacy data via a React vulnerability in AWS infrastructure, affecting customer records and government users, though no highly sensitive PII like SSNs was involved.
4. CISA Adds Actively Exploited VMware Aria Operations Vulnerability to KEV Catalog
Published: 2026-03-04
CISA added CVE-2026-22719, a critical command injection flaw (CVSS 8.1) in Broadcom VMware Aria Operations, to its Known Exploited Vulnerabilities list due to active in-the-wild exploitation that could lead to remote code execution.
5. APT41-Linked Silver Dragon Targets Governments in Europe and Southeast Asia
Published: 2026-03-04
A new China-linked APT group called Silver Dragon, operating under the APT41 umbrella, has been targeting government entities since mid-2024 using server exploits, phishing, Cobalt Strike, and Google Drive for C2 communications.
6. Fake Google Security Site Uses PWA App to Steal Credentials and MFA Codes
Published: 2026-03-02
A sophisticated phishing campaign impersonates Google security checks to trick users into installing a malicious Progressive Web App (PWA) that acts as a browser RAT, stealing OTPs, crypto data, and proxying traffic.
7. US Banks Placed on High Alert for Cyberattacks as Iran Conflict Escalates
Published: 2026-03-03
U.S. financial institutions are ramping up defenses against potential Iranian or hacktivist cyberattacks amid the escalating Middle East conflict, with experts warning of possible DDoS and other disruptive operations.
8. UK NCSC Warns of Heightened Iranian Cyber Risks Amid Middle East Conflict
Published: 2026-03-02
The UK’s National Cyber Security Centre advised organizations, especially those with Middle East presence or supply chains, to bolster defenses against potential indirect Iranian state or hacktivist cyber threats.
Stay Vigilant
Cyber threats are evolving rapidly with geopolitical tensions driving increased hacktivist and state-sponsored activity. Subscribe to our newsletter for daily updates, and consider implementing robust MFA, regular patching, and threat monitoring tools to protect your organization. Stay safe online!