Show Notes - 2026-03-03
Stories Covered
Today:Fortinet SSL-VPN Flaws Under Active Exploitation [Critical Alerts]Action: [Critical Alerts]LockBit Rebrands as CATS-Bit After Seizure [Ransomware & Extortion]Action: [Ransomware & Extortion]Medusa Ransomware Adds VM Escape Capability [Ransomware & Extortion]Action: [Ransomware & Extortion]State Department Exposes Personal Data of 7,000 Employees [Breaches & Leaks]Action: [Breaches & Leaks]Rite Aid Breach Exposes 160,000 Customers [Breaches & Leaks]Action: [Breaches & Leaks]Aventon eBike App Leaks Location Data [Breaches & Leaks]Action: [Breaches & Leaks]Gravy Analytics Settles FTC Charges Over Location Data Sales [Breaches & Leaks]Action: [Breaches & Leaks]Fake Russian Federal Police Emails Deliver Malware [Nation-State & Advanced Threats]Action: [Nation-State & Advanced Threats]Qualcomm Video Driver Flaw Impacts 75 Million Devices [Vulnerabilities & Exploits]Action: [Vulnerabilities & Exploits]CISA Adds Flaws in Apache Solr, Ivanti, and PHPJabbers [Vulnerabilities & Exploits]Action: [Vulnerabilities & Exploits]AI-Generated Vulnerabilities Introduced by Copilot [Vulnerabilities & Exploits]Action: [Vulnerabilities & Exploits]TunnelVision VPN Bypass Persists After 2024 Disclosure [Vulnerabilities & Exploits]Action: [Vulnerabilities & Exploits]VMware ESXi Root Privilege Escalation [Vulnerabilities & Exploits]Action: [Vulnerabilities & Exploits]DDoS Operators Exploit Apache Traffic Server Bug [Business & Infrastructure Threats]Action: [Business & Infrastructure Threats]Windows Patch Tuesday Bundles Two Zero-Days [Business & Infrastructure Threats]Action: [Business & Infrastructure Threats]QNAP NAS Devices Hijacked for Crypto Mining [Business & Infrastructure Threats]Action: [Business & Infrastructure Threats]Ransomware groups rebrand under law enforcement pressure. [Trends & Context]VPN and firewall appliances remain high-value targets. [Trends & Context]Virtualization platforms are ransomware targets. [Trends & Context]AI-generated code introduces security debt. [Trends & Context]Location data remains poorly protected. [Trends & Context]CVEs Referenced
CVE-2023-33063, CVE-2023-33106, CVE-2024-21762, CVE-2024-32766, CVE-2024-3661, CVE-2024-37085, CVE-2024-38479, CVE-2024-43047, CVE-2024-45519, CVE-2024-48882, CVE-2024-54677, CVE-2024-55591, CVE-2025-22224, CVE-2025-22457, CVE-2025-24472, CVE-2025-24983, CVE-2025-24990, CVE-2025-24991