Daily Cybersecurity News Roundup – March 29, 2026

Stay updated with the latest cybersecurity news! This daily roundup covers emerging ransomware strains hitting critical infrastructure, major data-broker breaches exposing sensitive records, state-sponsored espionage via personal accounts, record-breaking DDoS campaigns, and surging third-party supply-chain risks to keep you informed and secure in the ever-evolving digital landscape.

1. Uragan Ransomware Emerges as New File-Encrypting Threat to Enterprise Networks

Published: 2026-03-28

A previously undocumented ransomware variant called Uragan has been spotted encrypting files with a .uragan extension and deploying double-extortion tactics. Operators target Windows servers and backups, threatening data leaks if demands are unmet.

Read more

2. LexisNexis Confirms Cloud Breach via React2Shell Vulnerability

Published: 2026-03-28

Data analytics giant LexisNexis disclosed that attackers exploited an unpatched React front-end flaw to access its AWS environment and exfiltrate roughly 2 GB of structured legal and government client data.

Read more

3. Iranian Hackers Breach FBI Director Kash Patel’s Personal Email Account

Published: 2026-03-27

Sources confirm Iranian-linked actors gained access to FBI Director Kash Patel’s private email, raising concerns over potential intelligence compromise amid escalating Middle East tensions.

Read more

4. European Commission Launches Investigation into Cyberattack on EU Websites

Published: 2026-03-28

The EU Commission is probing a cyber incident that targeted its cloud infrastructure hosting europa.eu sites, resulting in a confirmed data leak. Initial findings point to a sophisticated supply-chain vector.

Read more

5. Cloudflare 2026 Threat Report: Record 31.4 Tbps DDoS Attack and State-Sponsored Pre-Positioning

Published: 2026-03-28

Cloudflare’s latest annual report details hyper-volumetric DDoS campaigns, Chinese actors embedding in telecom and IT infrastructure, and over-privileged SaaS integrations expanding breach blast radius.

Read more

6. ShinyHunters Ransomware Claims Massive Breach of ZenBusiness Inc.

Published: 2026-03-28

The group alleges exfiltration of terabytes of data from Snowflake, Mixpanel, and Salesforce platforms belonging to the small-business services provider and has issued a March 30 deadline before public leak.

Read more

7. Undocumented macOS Infostealer Surfaces in Routine Threat Hunting

Published: 2026-03-27

Security researchers identified a new macOS malware strain stealing credentials, browser data, and cryptocurrency wallets. It evades traditional detection and has been linked to initial access in enterprise environments.

Read more

8. IBM X-Force 2026 Index Warns of Expanding Third-Party Supply-Chain Attacks

Published: 2026-03-28

IBM’s latest threat intelligence report highlights how compromised third-party OAuth tokens and SaaS integrations are enabling indirect access to customer environments, with North America now the top targeted region.

Read more

Stay Vigilant

Cyber threats are evolving rapidly with new ransomware families targeting backups and infrastructure, data brokers under fire, and nation-state actors shifting to personal email and SaaS supply chains. Subscribe to our newsletter for daily updates, treat every cloud and SaaS integration as a potential pivot point, scan macOS endpoints for the new infostealer, monitor dark-web leaks for ZenBusiness-style exposures, and accelerate third-party risk assessments per the latest IBM and Cloudflare guidance. Stay safe online!

Scroll to Top