Stay updated with the latest cybersecurity news! This daily roundup covers nation-state wiper attacks on critical medtech infrastructure, new CISA Known Exploited Vulnerabilities, AI-driven threat actor tactics per the latest Mandiant report, and major federal investments in cyber modernization to keep you informed and secure in the ever-evolving digital landscape.
1. CISA Adds Aqua Security Trivy Malicious Code Vulnerability to KEV Catalog
Published: 2026-03-26
CISA added CVE-2026-33634 — an embedded malicious code flaw in Aqua Security’s Trivy scanner — to its Known Exploited Vulnerabilities catalog after evidence of active exploitation in the wild. Federal agencies and contractors must remediate immediately.
2. Stryker Confirms Iran-Linked Handala Group Used Non-Propagating Wiper in March 11 Attack
Published: 2026-03-26
Medical technology giant Stryker disclosed that the destructive cyber incident affecting its Microsoft environment and over 200,000 devices worldwide was a targeted wiper attack by Iran-linked actors, not ransomware. The group gained access via compromised Intune admin credentials.
3. Mandiant M-Trends 2026 Report: Threat Actors Integrate AI to Accelerate Attacks and Vishing
Published: 2026-03-26
Mandiant’s latest annual report reveals nation-states and financially motivated groups are now using large language models for hyper-personalized social engineering and faster attack lifecycles, with a notable rise in voice phishing (vishing) success rates.
4. DNI Gabbard Announces Largest-Ever Intelligence Community Cybersecurity Modernization Investment
Published: 2026-03-26
Director of National Intelligence Tulsi Gabbard unveiled year-one results of a massive IC-wide technology and cybersecurity modernization effort aligned with the President’s Cyber Strategy for America, marking the largest such investment to date.
5. Chinese State-Sponsored Hackers Deploy Kernel Implants in Telecom Backbone Infrastructure
Published: 2026-03-26
Security researchers uncovered long-term espionage operations by Chinese actors who embedded passive backdoors and kernel-level implants deep within global telecom networks for persistent high-level access.
6. Hightower Holding Data Breach Exposes Personal Data of 130,000 Individuals
Published: 2026-03-25
The private equity firm confirmed hackers stole names, Social Security numbers, and driver’s license information. Affected individuals are being notified and offered credit monitoring services.
7. Cisco Patches Multiple High-Severity Vulnerabilities in IOS Software
Published: 2026-03-26
Cisco addressed flaws that could enable denial-of-service, secure boot bypass, information disclosure, and privilege escalation. Organizations running affected IOS versions are urged to apply updates promptly.
8. Medusa Ransomware Claims Attacks on University of Mississippi Medical Center and Passaic County
Published: 2026-03-26
The ransomware group took credit for disrupting UMMC (forcing clinic closures and manual patient processes) and New Jersey’s Passaic County government systems in separate incidents this month.
Stay Vigilant
Cyber threats are evolving rapidly with nation-state wiper campaigns hitting medtech supply chains, AI now powering faster and more convincing social engineering, and critical scanner flaws entering active exploitation lists. Subscribe to our newsletter for daily updates, apply the new Trivy and Cisco patches without delay, review Intune and admin credential hygiene, enable voice-call verification for high-risk users, and monitor federal modernization guidance for defense-in-depth improvements. Stay safe online!