Hacked sites deliver Vidar infostealer to Windows users https://www.malwarebytes.com/blog/threat-intel/2026/03/hacked-sites-deliver-vidar-infostealer-to-windows-users

Less Lucrative Ransomware Market Makes Attackers Alter Methods https://www.darkreading.com/threat-intelligence/less-lucrative-ransomware-market-makes-attackers-alter-methods

Stryker attack wiped tens of thousands of devices, no malware needed https://www.bleepingcomputer.com/news/security/stryker-attack-wiped-tens-of-thousands-of-devices-no-malware-needed/

The Cyber Nexus: Iranian Group ‘Muddy Water’ Caught Deploying Russian ‘Tsundere’ Botnet via EtherHiding https://securityonline.info/cyber-nexus-muddy-water-deploying-russian-tsundere-botnet-etherhiding/

Publicly Disclosed: Bishop Fox Reveals Critical Pre-Auth SQL Injection in FortiClient EMS https://securityonline.info/publicly-disclosed-critical-zero-click-sql-injection-forticlient-ems-cve-2026-21643/

GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX https://www.bleepingcomputer.com/news/security/glassworm-malware-hits-400-plus-code-repos-on-github-npm-vscode-openvsx/

China-Nexus Hackers Skulk in Southeast Asian Military Orgs for Years https://www.darkreading.com/threat-intelligence/china-nexus-hackers-southeast-asian-military-orgs

CISA flags Wing FTP Server flaw as actively exploited in attacks https://www.bleepingcomputer.com/news/security/cisa-flags-wing-ftp-server-flaw-as-actively-exploited-in-attacks/

Critical Spring AI Flaws Expose Databases to SQL and JSONPath Injection https://securityonline.info/critical-spring-ai-vulnerabilities-sql-jsonpath-injection-cve-2026-22730/

Critical 10.0 CVSS SandboxJS Flaw Grants Complete Remote Code Execution https://securityonline.info/golden-ticket-critical-10-cvss-sandboxjs-flaw-cve-2026-26954-rce/

Backdoored React Native Packages Target Developers with Crypto-Stealing Malware https://securityonline.info/silent-sabotage-backdoored-react-native-packages-target-developers/

LeakNet ransomware uses ClickFix, Deno runtime in stealthy attacks https://www.bleepingcomputer.com/news/security/leaknet-ransomware-uses-clickfix-and-deno-runtime-for-stealthy-attacks/