Stay updated with the latest cybersecurity news! This daily roundup covers emerging ransomware variants, zero-day exploits, supply-chain compromises, and regulatory developments to keep you informed and secure in the ever-evolving digital landscape.
1. New Rust-Based Ransomware ‘BlackByte 2.0’ Targets Healthcare Providers
Published: 2026-03-13
A sophisticated evolution of BlackByte ransomware, rewritten entirely in Rust, has hit multiple U.S. hospital networks, encrypting patient data and demanding multimillion-dollar ransoms. The variant uses advanced anti-analysis techniques and exfiltrates data via encrypted C2 channels.
2. Critical Zero-Day in VMware ESXi Allows Remote Code Execution
Published: 2026-03-13
VMware has confirmed active exploitation of a new zero-day vulnerability (CVE-2026-31245) in ESXi hypervisors that lets unauthenticated attackers execute arbitrary code. Over 15,000 exposed instances have already been targeted in the wild.
3. Supply-Chain Attack Compromises 2.8 Million IoT Devices via Firmware Update
Published: 2026-03-14
Attackers injected backdoors into legitimate firmware updates for popular smart-home routers and cameras from a major Asian manufacturer, creating a massive botnet. Researchers estimate 40% of affected devices remain unpatched.
4. UK’s National Health Service Hit by Coordinated DDoS and Ransomware Attack
Published: 2026-03-13
Multiple NHS trusts reported simultaneous DDoS floods and ransomware encryption attempts, forcing cancellation of thousands of appointments. Authorities suspect a new East European cybercrime syndicate.
5. CISA Warns of Active Exploitation of Fortinet SSL-VPN Flaw
Published: 2026-03-14
CISA added CVE-2026-12891 to its Known Exploited Vulnerabilities catalog after confirming widespread attacks against FortiGate appliances. Agencies and enterprises are urged to apply the emergency patch released yesterday.
6. Major European Bank Loses €185 Million in SWIFT Fraud Scheme
Published: 2026-03-13
A Belgian bank disclosed a sophisticated business-email compromise attack that rerouted legitimate SWIFT transfers. The incident marks the largest single-day financial cyber fraud in Europe this year.
7. Apple Patches 17 Vulnerabilities in iOS 18.4 Emergency Update
Published: 2026-03-14
Apple released out-of-band patches for 17 high-severity flaws in iOS, iPadOS, and macOS, including two zero-days actively exploited against journalists and government officials in the Middle East.
8. EU Passes New AI Cybersecurity Regulation Requiring Mandatory Audits
Published: 2026-03-13
The European Parliament approved the AI Cyber Resilience Act, mandating third-party security audits for all high-risk AI systems by 2028. Non-compliance could result in fines up to 6% of global annual turnover.
Stay Vigilant
Cyber threats are evolving rapidly with ransomware becoming more evasive, zero-days hitting critical infrastructure, and new regulations reshaping compliance. Subscribe to our newsletter for daily updates, enforce strict patch management, enable network segmentation, and conduct regular tabletop exercises. Stay safe online!