Stay updated with the latest cybersecurity news! This daily roundup covers malicious job-ad and tax-search campaigns delivering advanced malware, new CISA KEV additions targeting AI and CMS platforms, backdoors in popular AI infrastructure tools, and surging stealer malware campaigns aimed at enterprises to keep you informed and secure in the ever-evolving digital landscape.
1. Hackers Flood Job Boards with Fake Resumes to Steal Credentials and Deploy Crypto Miners
Published: 2026-03-24
Threat actors are uploading weaponized resumes containing embedded macros and malicious links that harvest enterprise credentials and silently install crypto miners on corporate endpoints. Multiple Fortune 500 companies have reported infections traced to recent hiring portals.
2. Malicious Google Ads for Tax Services Deliver ScreenConnect with Huawei EDR Bypass
Published: 2026-03-24
Cybercriminals are buying search ads for “tax filing help” that redirect to fake IRS portals pushing ScreenConnect remote access trojans. The payload uses a signed Huawei driver to disable EDR solutions before establishing persistence.
3. CISA Adds Five New Zero-Days to Known Exploited Vulnerabilities Catalog
Published: 2026-03-23
CISA updated the KEV catalog with CVE-2025-31277 (Apple buffer overflow), CVE-2025-32432 (Craft CMS code injection), and three others actively exploited in the wild. Federal agencies have until April 13 to patch or face enforcement.
4. TeamPCP Implants Backdoors in LiteLLM Versions 1.82.7–1.82.8 via Trivy CI/CD Chain
Published: 2026-03-24
A previously undocumented group compromised the LiteLLM AI proxy library through the recent Trivy supply-chain incident, inserting persistent backdoors that exfiltrate API keys and model inference data from enterprise AI pipelines.
5. “Fluffy Wolf” Infostealer Malware Targets Corporate Environments at Scale
Published: 2026-03-24
The new stealer variant spreads via phishing lures mimicking internal HR communications and steals browser cookies, saved credentials, and VPN profiles. Over 18,000 corporate endpoints have been hit in the past week alone.
6. Microsoft Warns Taxpayers of Sophisticated Tax-Return Phishing Scams
Published: 2026-03-24
Microsoft’s Threat Intelligence team issued an alert about credential-phishing campaigns impersonating IRS e-file portals that have already compromised thousands of taxpayer accounts and enabled follow-on business email compromise attacks.
7. AI-Enhanced Cyber Attacks Rising Sharply, New Report Warns
Published: 2026-03-24
Security researchers report a 340% increase in AI-generated phishing, deepfake voice calls, and automated exploit chaining in Q1 2026. Threat actors are now using large language models to craft hyper-personalized campaigns at machine speed.
8. Windows Server March 2026 Updates Trigger Widespread Domain Controller Crashes
Published: 2026-03-23
Administrators report blue screens and reboots after applying KB5035855 and KB5035857 on Windows Server 2022/2025. Microsoft has acknowledged the issue and released an out-of-band fix; domain environments are urged to pause deployment.
Stay Vigilant
Cyber threats are evolving rapidly with attackers weaponizing everyday job searches and tax-season urgency, backdooring AI infrastructure, and leveraging AI itself to scale attacks. Subscribe to our newsletter for daily updates, scrutinize every resume attachment and search ad before clicking, apply the latest CISA KEV patches immediately (especially on Apple devices and Craft CMS), audit LiteLLM and AI proxy instances for backdoors, and hold Windows Server updates until the out-of-band fix is confirmed. Stay safe online!