Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, state-sponsored attacks, data breaches, and innovative security developments to keep you informed and secure in the ever-evolving digital landscape.
1. APT28 Tied to Exploitation of Microsoft MSHTML Zero-Day (CVE-2026-21513)
Published: 2026-03-02
Russia-linked state-sponsored threat actor APT28 has been tied to the in-the-wild exploitation of CVE-2026-21513, a high-severity (CVSS 8.8) security feature bypass in Microsoft’s MSHTML framework. The flaw was exploited via malicious LNK files before Microsoft’s February 2026 Patch Tuesday fix, according to Akamai researchers.
2. New Chrome Vulnerability Allows Malicious Extensions to Hijack Gemini AI Panel
Published: 2026-03-02
A now-patched flaw (CVE-2026-0628, CVSS 8.8) in Google Chrome’s WebView tag could have let malicious extensions escalate privileges, access local files, and hijack the new Gemini Live panel for surveillance. The issue stemmed from insufficient policy enforcement and was fixed in Chrome 143.
3. Motorola Partners with GrapheneOS Foundation for Enhanced Mobile Security
Published: 2026-03-02
Motorola announced a major long-term partnership with the GrapheneOS Foundation to bring advanced privacy and security features to future smartphones, moving beyond standard Android builds and rivaling the security model of Google Pixel devices.
4. UK Government Slashes Cyber Vulnerability Fix Times from Two Months to Eight Days
Published: 2026-03-02
The UK’s new Vulnerability Monitoring Service (VMS) has dramatically reduced median remediation times for critical domain-related vulnerabilities from around 50–60 days to just eight days, cutting the national backlog by 75% across thousands of public sector organizations.
5. BlacksmithAI: New Open-Source AI-Powered Penetration Testing Framework Released
Published: 2026-03-02
A powerful new open-source framework called BlacksmithAI was released, enabling automated, AI-driven penetration testing with customizable modules for vulnerability discovery, exploitation simulation, and reporting—designed to help security teams scale red-team operations efficiently.
6. Iran-Linked Hackers Raise Threat Level Against US and Allies with Cyber Campaigns
Published: 2026-03-02
Iran-linked hacktivist and state-sponsored groups have escalated cyberattacks—including DDoS, phishing, and website defacements—targeting US and allied critical infrastructure in response to recent geopolitical tensions and strikes.
7. Madison Square Garden Confirms Data Breach Exposing SSNs of Over 131,000 Individuals
Published: 2026-03-02
Madison Square Garden Entertainment disclosed a breach stemming from the 2025 Oracle E-Business Suite zero-day campaign. Names and Social Security numbers of approximately 131,000 employees, contractors, and others were exposed.
8. North Korean APT37 Deploys New Malware Suite to Breach Air-Gapped Networks
Published: 2026-03-02 (reports ongoing)
North Korea-linked APT37 (ScarCruft) launched the “Ruby Jumper” campaign using five previously undocumented tools (including RESTLEAF and THUMBSBD) plus USB propagation and Zoho WorkDrive for command-and-control to infiltrate highly isolated air-gapped systems.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider implementing multi-layered defenses like timely patching, zero-trust architecture, AI-powered monitoring, and employee awareness training. Stay safe online!