Stay updated with the latest cybersecurity news! This daily roundup covers state-sponsored campaigns, zero-day disclosures, major arrests, and emerging AI-driven threats to keep you informed and secure in the ever-evolving digital landscape.
1. North Korean Lazarus Group Launches New “AppleSeed” Malware Against Crypto Exchanges
Published: 2026-03-14
Lazarus has deployed a previously unseen macOS backdoor called AppleSeed targeting trading platforms and wallet providers. The malware uses signed binaries and fake update mechanisms to steal private keys and two-factor codes from users in South Korea and the US.
2. Critical Zero-Day in Bitwarden Password Manager Affects 15 Million Users
Published: 2026-03-15
A high-severity flaw (CVE-2026-29871) in Bitwarden’s browser extension allows remote attackers to extract vault contents without user interaction. The company has pushed an emergency update and recommends immediate reinstallation.
3. US and Five Eyes Partners Sanction 12 Russian Cyber Operatives
Published: 2026-03-14
The Treasury Department and international allies froze assets and issued indictments against members of the Sandworm group responsible for the 2025 Ukrainian grid attacks and recent global wiper campaigns.
4. Massive Breach at Global Cloud Provider OVHcloud Exposes 1.2 Million Customer Records
Published: 2026-03-15
OVHcloud confirmed unauthorized access to its backup infrastructure, leaking emails, billing data, and partial API keys. The incident is linked to a compromised internal admin account exploited via stolen credentials from a third-party contractor.
5. CISA Adds Three New Actively Exploited Vulnerabilities to KEV Catalog
Published: 2026-03-14
Federal agencies must patch within 21 days: two Ivanti Connect Secure flaws and a critical flaw in Progress Kemp LoadMaster. All three are already being chained in ransomware campaigns.
6. Deepfake Audio Scam Costs UK Insurance Firm £4.2 Million
Published: 2026-03-15
Attackers used AI-generated voice clones of the CFO to authorize fraudulent wire transfers. This marks the largest confirmed executive-impersonation loss in Europe this year.
7. Open-Source npm Package “left-pad-redux” Backdoored in Supply-Chain Attack
Published: 2026-03-14
Over 87,000 downstream projects were affected after a malicious maintainer uploaded a trojanized version that harvested environment variables and crypto wallets. npm has removed the package and issued a security advisory.
8. Australia’s MyGov Portal Hit by Sophisticated Credential-Stuffing Wave
Published: 2026-03-15
Over 240,000 login attempts in 48 hours targeted welfare and tax accounts. Authorities suspect a credential dump from a 2025 Asian retail breach is being weaponized.
Stay Vigilant
Cyber threats are evolving rapidly with nation-state actors shifting to macOS and supply-chain vectors while AI deepfakes fuel financial fraud. Subscribe to our newsletter for daily updates, rotate credentials regularly, monitor for unusual voice/video calls, and enforce software bill-of-materials checks. Stay safe online!