Show Notes - 2026-03-11
Stories Covered
Today:CISA: Ivanti EPM Authentication Bypass (CVE-2026-1603) Actively Exploited [Critical Alerts]Microsoft Excel Zero-Click Copilot Data Exfiltration (CVE-2026-26144) [Critical Alerts]HPE Aruba AOS-CX Critical Authentication Bypass (CVE-2026-23813) [Critical Alerts]Microsoft March 2026 Patch Tuesday: 79 Vulnerabilities, No Active Exploits [Windows / AD Security]Microsoft Office Preview Pane RCE Vulnerabilities (CVE-2026-26110, CVE-2026-26113) [Windows / AD Security]Windows Autopatch Enables Hotpatching by Default in May 2026 [Windows / AD Security]Azure AD SSH Login Extension Privilege Escalation (CVE-2026-26148) [Windows / AD Security]Windows Kerberos Security Feature Bypass (CVE-2026-24297) [Windows / AD Security]SharePoint Server Spoofing Vulnerability (CVE-2026-26105) [Windows / AD Security]Windows Print Spooler RCE (CVE-2026-23669) [Windows / AD Security]Windows System Image Manager ADK RCE (CVE-2026-25166) [Windows / AD Security]Windows RRAS RCE (CVE-2026-25172) [Windows / AD Security]BlackSanta EDR Killer Targets HR Departments with Fake Resumes [Ransomware & Extortion]Zombie ZIP Technique Evades 50 of 51 Antivirus Engines [Business & Infrastructure Threats]SAP Critical Code Injection and Deserialization Flaws [Business & Infrastructure Threats]Adobe Patches 80 Vulnerabilities Across Product Portfolio [Business & Infrastructure Threats]ICS Vendors Release March Patch Tuesday Updates [Business & Infrastructure Threats]Microsoft Semantic Kernel Python SDK RCE (CVE-2026-26030) [Business & Infrastructure Threats]Iran-Linked Threat Actors Use Cybercrime Malware for Espionage and Obfuscation [General Security News]Proofpoint: Iran Conflict Drives Espionage Activity Targeting Middle East [General Security News]Microsoft March 2026 Patch Tuesday Highlights [Vulnerability Disclosures]Dozens of Vendors Release March 2026 Security Updates [Vulnerability Disclosures]CVEs Referenced
CVE-2004-0935, CVE-2019-17571, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161, CVE-2024-29824, CVE-2026-0866, CVE-2026-1603, CVE-2026-21262, CVE-2026-23668, CVE-2026-23669, CVE-2026-23813, CVE-2026-24289, CVE-2026-24291, CVE-2026-24294, CVE-2026-24297, CVE-2026-25166, CVE-2026-25172, CVE-2026-25187, CVE-2026-26030, CVE-2026-26105, CVE-2026-26106, CVE-2026-26110, CVE-2026-26113, CVE-2026-26114, CVE-2026-26118, CVE-2026-26127, CVE-2026-26128, CVE-2026-26132, CVE-2026-26144, CVE-2026-26148, CVE-2026-27685, CVE-2026-3611