Stay updated with the latest cybersecurity news! This daily roundup covers high-profile cybercrime arrests, sophisticated new malware using blockchain dead drops, major Apple security updates, and escalating extortion campaigns tied to supply-chain compromises to keep you informed and secure in the ever-evolving digital landscape.
1. LeakBase Admin Arrested in Russia Over Massive Stolen Credential Marketplace
Published: 2026-03-25
Russian authorities arrested the administrator of LeakBase, one of the largest dark-web marketplaces for stolen credentials, which had exposed billions of records. The takedown is expected to disrupt credential-stuffing campaigns worldwide.
2. GlassWorm Malware Leverages Solana Blockchain Dead Drops for Stealthy RAT Delivery
Published: 2026-03-25
A new infostealer named GlassWorm uses Solana blockchain “dead drop” addresses to deliver remote access trojans and steal browser data plus cryptocurrency wallets. The technique evades traditional C2 detection and has already infected thousands of endpoints.
3. Russian Cybercriminal Ilya Angelov Sentenced to 2 Years in U.S. Prison for TA551 Ransomware Operations
Published: 2026-03-25
Ilya Angelov, a key member of the TA551 (Shathak) cybercrime group, received a two-year sentence for operating a botnet that delivered ransomware and phishing campaigns targeting global organizations.
4. Apple Releases iOS 26.4 and macOS 26.4 with Critical Security Patches
Published: 2026-03-25
Apple’s latest updates patch dozens of vulnerabilities across iOS, iPadOS, and macOS, including fixes for older devices. Security researchers recommend immediate installation to mitigate risks from actively exploited flaws.
5. “Loud and Aggressive” Extortion Wave Follows Trivy Supply-Chain Attack
Published: 2026-03-25
Security experts warn that downstream victims of the recent Trivy vulnerability scanner compromise are now facing aggressive extortion demands. Attackers are leveraging stolen CI/CD data to threaten organizations with data leaks.
6. DarkSword iPhone Spyware Exploit Leaked on GitHub, Threatening Millions of iOS 18 Devices
Published: 2026-03-24
A powerful zero-click iOS exploit chain previously used by nation-states has been publicly leaked on GitHub. Researchers say it could “democratize” advanced iPhone hacking and urge users to update immediately.
7. LiteLLM PyPI Package Backdoored to Steal Credentials and API Tokens
Published: 2026-03-25
The popular LiteLLM Python package was compromised with a backdoor that exfiltrates authentication tokens and credentials from AI development environments. Users who installed recent versions are advised to rotate keys and scan systems.
8. PwC Report: AI Accelerates Cyber Attacks While Identity Remains the Weakest Link
Published: 2026-03-25
A new PwC analysis reveals AI is dramatically speeding up attack scale and sophistication, yet stolen identities and weak authentication continue to be the primary entry point in most breaches.
Stay Vigilant
Cyber threats are evolving rapidly with blockchain-enabled malware, leaked nation-state exploits hitting consumer devices, and supply-chain fallout triggering fresh extortion waves. Subscribe to our newsletter for daily updates, update all Apple devices to iOS/macOS 26.4 today, rotate credentials if you used LiteLLM or Trivy recently, enable hardware-backed MFA everywhere, and monitor dark-web alerts for your organization’s data. Stay safe online!