Stay updated with the latest cybersecurity news! This daily roundup covers devastating supply-chain attacks on popular dev tools, Russian state-sponsored phishing against encrypted messaging apps, urgent enterprise patches, massive benefits-sector data leaks, and record botnet disruptions to keep you informed and secure in the ever-evolving digital landscape.
1. Trivy Vulnerability Scanner Supply-Chain Attack Pushes Infostealer Malware
Published: 2026-03-21
Threat actors compromised the official Trivy GitHub Actions and releases, injecting credential-stealing malware that spread via CI/CD pipelines and affected dozens of npm packages with a self-propagating worm using ICP canisters for command-and-control.
2. FBI Warns Russian Intelligence Targeting Signal and WhatsApp in Mass Phishing
Published: 2026-03-21
Russian-linked actors are phishing high-value targets including government officials and journalists to hijack encrypted messaging accounts, enabling message interception, contact list theft, and follow-on attacks from trusted identities — thousands of accounts already compromised.
3. Oracle Issues Emergency Patch for Critical Unauthenticated RCE in Identity Manager
Published: 2026-03-21
Oracle released an out-of-band fix for CVE-2026-21992 (CVSS 9.8), a critical flaw allowing remote code execution without authentication in Identity Manager and Web Services Manager — organizations using affected versions 12.2.1.4.0 and 14.1.2.1.0 must update immediately.
4. CISA Orders Federal Agencies to Patch Critical Cisco Secure Firewall Flaw by Sunday
Published: 2026-03-20
CISA added CVE-2026-20131 (max severity) in Cisco Secure Firewall Management Center to its Known Exploited Vulnerabilities catalog, giving agencies until March 23 to remediate the actively exploited remote code execution vulnerability.
5. Navia Benefit Solutions Breach Exposes Personal Data of 2.7 Million Individuals
Published: 2026-03-19
Navia disclosed unauthorized access between December 2025 and January 2026 that stole names, addresses, Social Security numbers, and health plan details — notifications and credit monitoring are now being offered to affected customers.
6. PolyShell Flaw Enables Unauthenticated RCE and Account Takeover on Magento Stores
Published: 2026-03-20
A critical vulnerability in Magento Open Source and Adobe Commerce allows attackers to upload malicious executables disguised as images, leading to full remote code execution and site compromise on all versions up to 2.4.9-alpha2.
7. Critical Langflow Vulnerability Exploited in the Wild Within Hours of Disclosure
Published: 2026-03-20
CVE-2026-33017 (CVSS 9.3) in the Langflow AI workflow tool permits unauthenticated remote code execution via unsandboxed code injection — attackers began exploiting the flaw less than 20 hours after public disclosure.
8. U.S., Canada, and Germany Disrupt Massive IoT Botnets Behind Record 31.4 Tbps DDoS Attacks
Published: 2026-03-20
Authorities seized command-and-control infrastructure for the AISURU, Kimwolf, JackSkid, and Mossad botnets that hijacked over 3 million devices and launched unprecedented terabit-scale DDoS campaigns targeting global networks.
Stay Vigilant
Cyber threats are evolving rapidly with supply-chain attacks now hitting trusted vulnerability scanners and CI/CD pipelines, state actors pivoting to encrypted messaging platforms, and botnets reaching record scale. Subscribe to our newsletter for daily updates, audit all GitHub Actions and npm dependencies immediately, apply Oracle and Cisco patches this weekend, enable MFA on messaging apps with hardware keys where possible, and review your e-commerce platforms for Magento exposure. Stay safe online!