Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, state-sponsored attacks, and significant incidents to keep you informed and secure in the ever-evolving digital landscape.
1. Russia-Backed Hackers Target Signal and WhatsApp Accounts of Officials and Journalists
Published: 2026-03-09
Dutch intelligence agencies have warned of a large-scale global cyber campaign by Russian-backed hackers targeting Signal and WhatsApp accounts used by government officials, military personnel, and journalists through social engineering tactics to obtain verification codes.
2. Malicious npm Package Posing as OpenClaw Installer Deploys RAT on macOS
Published: 2026-03-09
A malicious npm package masquerading as an OpenClaw installer deploys a remote access trojan (RAT) and steals sensitive data including system credentials, browser information, cryptocurrency wallets, SSH keys, and iMessage history.
3. UNC4899 North Korean Hackers Breach Crypto Firm via AirDropped Trojan
Published: 2026-03-09
The North Korean threat actor UNC4899 breached a cryptocurrency organization by AirDropping a trojanized file to a developer’s work device, then using living-off-the-cloud techniques to steal millions in cryptocurrency.
4. Chrome Extensions Turn Malicious After Ownership Change, Steal User Data
Published: 2026-03-09
Two popular Chrome extensions, QuickLens and ShotBird, became malicious following an ownership transfer, enabling code injection, data harvesting, and remaining available in the Chrome Web Store.
5. Chinese CL-UNK-1068 Group Targets Asian Critical Infrastructure with Web Exploits
Published: 2026-03-09
A China-linked threat group (CL-UNK-1068) is conducting espionage against aviation, energy, and government sectors in Asia using web server exploits, custom malware, Mimikatz, and living-off-the-land binaries.
6. New ClickFix Attacks Use Windows Terminal to Deploy Lumma Stealer
Published: 2026-03-09
Threat actors have updated the ClickFix social engineering technique to instruct victims to run malicious commands in Windows Terminal instead of the Run dialog, helping evade detection while deploying malware like Lumma Stealer.
7. OpenAI’s Codex Security AI Identifies Over 10,000 High-Severity Code Issues
Published: 2026-03-07
OpenAI’s Codex Security tool scanned 1.2 million code commits and uncovered 10,561 high-severity vulnerabilities, demonstrating AI’s potential in proactive security scanning and automated fixes.
8. Critical 1-Click Vulnerability Discovered in ZITADEL Identity Platform
Published: 2026-03-09
A severe one-click vulnerability in the ZITADEL authentication platform could allow attackers to take over entire systems, affecting organizations relying on it for identity management.
Stay Vigilant
Cyber threats are evolving rapidly with state actors, supply chain risks, and social engineering on the rise. Subscribe to our newsletter for daily updates, and implement strong multi-factor authentication, regular patching, and employee training to bolster your defenses. Stay safe online!