Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, data breaches, and law enforcement actions to keep you informed in the fast-changing cyber landscape.
1. New BoryptGrab Stealer Targets Windows Users via Deceptive GitHub Pages
Published: March 5, 2026
Trend Micro researchers have identified a new info-stealer called BoryptGrab that spreads through SEO-optimized fake GitHub repositories and deceptive download pages. It steals browser data, cryptocurrency wallet information, system details, and files. Some variants deploy a PyInstaller backdoor called TunnesshClient for reverse SSH access.
2. Microsoft Warns of Signed Malware Impersonating Workplace Apps to Deploy RMM Backdoors
Published: March 3, 2026
Microsoft Defender Experts reported phishing campaigns using digitally signed malware disguised as installers for Teams, Zoom, and other apps (using stolen EV certificate). The malware installs legitimate RMM tools like ScreenConnect and Tactical RMM for persistent backdoor access.
3. Cloudflare Releases Inaugural 2026 Threat Report Highlighting Session Token Abuse and Industrialized Threats
Published: March 3, 2026
Cloudflare’s new report details a shift from brute-force to high-trust attacks, with 230 billion threats blocked daily. Key findings include token theft bypassing MFA via infostealers, massive DDoS (up to 31.4 Tbps), and weaponization of cloud tools. Attackers prioritize “Measure of Effectiveness” (MOE).
4. LexisNexis Confirms Data Breach After Hackers Leak Files
Published: March 4, 2026
Data analytics giant LexisNexis Legal & Professional confirmed a breach where hackers (FulcrumSec) accessed legacy servers via a React vulnerability, exfiltrating ~2GB of data including customer records and government .gov accounts. The company says impact is limited to old data.
5. Google Android March 2026 Security Update Patches 129 Vulnerabilities
Published: March 2026 (Bulletin March 2-3)
Google released updates fixing 129 bugs in Android, including 10 critical and one actively exploited Qualcomm zero-day (CVE-2026-21385). The patch levels 2026-03-01 and 2026-03-05 are rolling out to Pixel and other devices.
6. Major Operation Disrupts Tycoon 2FA Phishing-as-a-Service Platform
Published: March 4, 2026
Europol, Microsoft, and international partners took down Tycoon 2FA, a leading AiTM phishing kit responsible for tens of millions of phishing emails monthly and bypassing MFA. Over 330 domains seized in coordinated action across multiple countries.
7. UK NCSC Urges Vigilance Amid Middle East Conflict Cyber Spillover Risks
Published: March 2, 2026
The UK’s National Cyber Security Centre (NCSC) warned organizations, especially those with Middle East ties or supply chains, of heightened indirect cyber threats from Iran-linked actors, including potential hacktivist DDoS and phishing. Direct threat to UK remains largely unchanged but monitoring advised.
8. University of Hawaii Cancer Center Ransomware Attack Exposes Data of 1.2 Million
Published: Notifications March 2026 (Incident 2025)
A ransomware attack on the University of Hawaii Cancer Center’s epidemiology division led to the theft of personal data affecting nearly 1.2 million individuals, including SSNs, driver’s licenses, and research participant info. Notifications are underway.
Stay Vigilant
Cyber threats are evolving rapidly with AI, identity attacks, and geopolitical tensions playing larger roles. Subscribe to our newsletter for daily/weekly updates, and implement strong MFA, regular patching, and monitoring tools to protect your organization and data. Stay safe online!