Show Notes - 2026-03-24
Stories Covered
Today:ConnectWise ScreenConnect Cryptographic Flaw (CVE-2026-3564) [Critical Alerts]Citrix NetScaler Memory Leak (CVE-2026-3055) [Critical Alerts]Zimbra XSS Under Active Exploitation (CVE-2025-66376) [Critical Alerts]Langflow RCE Exploited Within 20 Hours (CVE-2026-33017) [Critical Alerts]Ubiquiti UniFi Path Traversal (CVE-2026-22557) [Critical Alerts]GNU InetUtils Telnetd RCE (CVE-2026-32746) [Critical Alerts]CISA KEV: CVE-2026-20131 [Critical Alerts]Microsoft Defender Blocks GPO-Based Ransomware Pre-Deployment [Ransomware & Extortion]Russian Initial Access Broker Sentenced to 81 Months [Ransomware & Extortion]Third BlackCat Negotiator Charged [Ransomware & Extortion]Australian Council Obtains Injunction Against Ransomware Actors [Ransomware & Extortion]Trio-Tech International Reverses Materiality Assessment [Ransomware & Extortion]3.7 Million Telehealth Patients Affected by Two Breaches [Ransomware & Extortion]Woundtech Breach Exposes 928K Wound Care Patients [Ransomware & Extortion]Trivy Supply Chain Attack Spreads to Docker and GitHub [Business & Infrastructure Threats]IRS Phishing Campaign Deploys RMM Malware to 29,000 Users [Business & Infrastructure Threats]Railway PaaS Abused for AI-Powered Phishing [Business & Infrastructure Threats]DoJ Takes Down DDoS Botnets [Business & Infrastructure Threats]Mazda Discloses Breach Exposing 692 Records [Business & Infrastructure Threats]Navia Benefit Solutions Breach Affects 2.6M [Business & Infrastructure Threats]Aura Breach Exposes 900K Records [Business & Infrastructure Threats]Puerto Rico Water Authority Confirms Cyberattack [Business & Infrastructure Threats]Intuitive Robotic Surgery Breach [Business & Infrastructure Threats]Schools Targeted in Rising Cyberattacks [Business & Infrastructure Threats]GitHub Malware Problem [Business & Infrastructure Threats]Copyright Infringement Phishing Campaign [Business & Infrastructure Threats]Microsoft Exchange Online Service Issue [Windows / AD Security]Windows 11 Promises vs. Reality [Windows / AD Security]Microsoft Fixes Broken Update Days After Promising Fewer Broken Updates [Windows / AD Security]CVE-2026-4438 and CVE-2026-4437 [Windows / AD Security]Mandiant M-Trends 2026: Diverging Adversary Timelines [General Security News]Talos Year in Review: Lightning-Fast Exploits [General Security News]CrowdStrike Falcon Next-Gen SIEM Supports Third-Party EDR [General Security News]Google Unleashes Gemini AI on Dark Web [General Security News]AWS Bedrock Attack Vectors [General Security News]Passwordless Authentication Research [General Security News]OpenAI ChatGPT Library Feature [General Security News]EU Broadcasters Warn on Smart TV Gatekeepers [General Security News]CVE-2026-3564 (ConnectWise ScreenConnect) [Vulnerability Disclosures]CVE-2026-3055 (Citrix NetScaler) [Vulnerability Disclosures]CVE-2026-4368 (Citrix NetScaler) [Vulnerability Disclosures]CVE-2025-66376 (Zimbra) [Vulnerability Disclosures]CVE-2026-33017 (Langflow) [Vulnerability Disclosures]CVE-2026-22557 (Ubiquiti UniFi) [Vulnerability Disclosures]CVE-2026-32746 (GNU InetUtils) [Vulnerability Disclosures]CVE-2026-20131 [Vulnerability Disclosures]CVE-2026-4438 [Vulnerability Disclosures]CVE-2026-4437 [Vulnerability Disclosures]CVEs Referenced
CVE-2023-4966, CVE-2025-5777, CVE-2025-6543, CVE-2025-66376, CVE-2026-20131, CVE-2026-22557, CVE-2026-3055, CVE-2026-32746, CVE-2026-33017, CVE-2026-3564, CVE-2026-4368, CVE-2026-4437, CVE-2026-4438
Indicators of Compromise
smartvault[.]im, irs-doc[.]com, gov-irs216[.]net., ua5v[.]com.