Little fires everywhere for March Patch Tuesday
Just 57 CVEs to contend with (plus advisories), but six are already under exploit in the wild
Similar Posts
China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activists
Bys sCybersecurity researchers have disclosed details of a new China-aligned espionage campaign targeting government and defense sectors across South, East, and Southeast Asia, along with one European government belonging to NATO. Trend Micro has attributed the activity to a threat activity cluster it tracks under the temporary designation SHADOW-EARTH-053. The adversarial collective is assessed to
Texas Man Convicted of Sabotaging his Employer’s Computer Systems and Deleting Data
Bys sThere’s an update to an indictment announced by the DOJ in April 2021. In today’s reminder of the insider threat, DOJ announced: A federal jury in Cleveland convicted a Texas man today for writing and deploying malicious code on his former employer’s network. According to court documents and evidence presented at trial, Davis Lu, 55,…
In a first, US will allow some private firms to carry out cyberattacks
Bys sZack Whittaker reports: The U.S. government will for the first time allow vetted private companies to launch offensive cyber operations against international criminal gangs and hackers, the White House said on Wednesday. In a newly published presidential memorandum, the Trump administration said the move will allow the federal government to use “innovative capabilities of the private……
Hackers wipe out Rs 384 crore from Bengaluru cryptocurrency firm Neblio Technologies; firm says inside job
Bys sExpress News Service reports: Bengaluru-based Neblio Technologies Private Limited, the parent company of cryptocurrency exchange platform CoinDCX, said it has lost Rs 384 crore due to hacking, in one of the biggest cyber crimes reported in the country. In a police complaint on July 22, Hardeep Singh, Vice-President, Public Policy and Government Affairs, Neblio Technologies,…
China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access
Bys sThe China-lined threat actor behind the zero-day exploitation of security flaws in Microsoft Exchange servers in January 2021 has shifted its tactics to target the information technology (IT) supply chain as a means to obtain initial access to corporate networks. That’s according to new findings from the Microsoft Threat Intelligence team, which said the Silk…
Blind Eagle’s Five Clusters Target Colombia Using RATs, Phishing Lures, and Dynamic DNS Infra
Bys sCybersecurity researchers have discovered five distinct activity clusters linked to a persistent threat actor known as Blind Eagle between May 2024 and July 2025. These attacks, observed by Recorded Future Insikt Group, targeted various victims, but primarily within the Colombian government across local, municipal, and federal levels. The threat intelligence firm is tracking the activity…