Newspaper

Industry News

General cybersecurity industry news, market trends, and analysis

Russian CTRL Toolkit Delivered via Malicious LNK Files Hijacks RDP via FRP Tunnels

Russian CTRL toolkit spread via malicious LNK files in February 2026, routing C2 through FRP-tunneled RDP to evade detection.

The Hacker NewsMar 30, 20264m5

Exploitation of Fresh Citrix NetScaler Vulnerability Begins

SecurityWeek

Industry News

Exploitation of Fresh Citrix NetScaler Vulnerability Begins

The critical-severity flaw leaks application memory and can be exploited to obtain authenticated administrative session IDs.

SecurityWeekMar 30, 20262m5

FBI Confirms Kash Patel Email Hack as US Offers $10M Reward for Hackers

SecurityWeek

Industry News

FBI Confirms Kash Patel Email Hack as US Offers $10M Reward for Hackers

The agency said Iranian hackers targeted the director’s personal email account and noted that the compromised information is old.

SecurityWeekMar 30, 20262m5

F5 BIG-IP DoS Flaw Upgraded to Critical RCE, Now Exploited in the Wild

SecurityWeek

Industry News

F5 BIG-IP DoS Flaw Upgraded to Critical RCE, Now Exploited in the Wild

Initially disclosed as a high-severity denial-of-service (DoS), the bug was reclassified as a critical RCE issue.

SecurityWeekMar 30, 20262m5

Three China-Linked Clusters Target Southeast Asian Government in 2025 Cyber Campaign

The Hacker News

Industry News

Three China-Linked Clusters Target Southeast Asian Government in 2025 Cyber Campaign

Three China-linked clusters targeted a Southeast Asian government in 2025, deploying multiple malware families to secure persistent access.

The Hacker NewsMar 30, 20263m5

Iran-Linked Hackers Breach FBI Director’s Personal Email, Hit Stryker With Wiper Attack

Iran-Linked Hackers Breach FBI Director’s Personal Email, Hit Stryker With Wiper Attack

Iran-linked Handala Hack breached FBI Director’s email amid MOIS domain seizures, escalating destructive cyber ops.

Handala Hack Team (MOIS-affiliated, also tracked as Banished Kitten, Cobalt Mystique, Red Sandstorm, Void Manticore)GovernmentHealthcare

The Hacker NewsMar 28, 20268m9

Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs

Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs

The infection chain includes a fake CAPTCHA page, a Bash script, a Nuitka loader, and the Python-based infostealer.

TechnologyFinance

SecurityWeekMar 28, 20263m6

Citrix NetScaler Under Active Recon for CVE-2026-3055 (CVSS 9.3) Memory Overread Bug

Citrix NetScaler Under Active Recon for CVE-2026-3055 (CVSS 9.3) Memory Overread Bug

CVE-2026-3055 targets Citrix NetScaler with active reconnaissance, risking data leaks on SAML IDP setups.

GovernmentFinance

The Hacker NewsMar 28, 20262m5

CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation

CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation

CISA adds actively exploited F5 BIG-IP APM CVE-2025-53521 (CVSS 9.3) to KEV, ordering FCEB patch by March 30, 2026 to curb RCE risk.

GovernmentFinance

The Hacker NewsMar 28, 20263m5

TA446 Deploys Leaked DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign

TA446 Deploys Leaked DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign

TA446 used leaked DarkSword on March 26 to target iOS devices, prompting Apple alerts and widening mobile espionage risks.

TA446 (Callisto / COLDRIVER / Star Blizzard / SEABORGIUM)GovernmentThink Tanks

The Hacker NewsMar 28, 20264m6

Industry News

Apple Sends Lock Screen Alerts to Outdated iPhones Over Active Web-Based Exploits

Apple Sends Lock Screen Alerts to Outdated iPhones Over Active Web-Based Exploits

Apple is now sending Lock Screen notifications to iPhones and iPads running older versions of iOS and iPadOS to alert users of web-based attacks and urge them to install the update. The development was first reported by MacRumors. "Apple is aware of attacks targeting out-of-date iOS software, inc...

Consumer TechnologyMobile

The Hacker NewsMar 27, 20261m5

TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files

TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files

Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.

TeamPCPTechnologySoftware Development

The Hacker NewsMar 27, 20265m5