Latest Internet & Cybersecurity News
US Releases 2026 Cyber Strategy and Cybercrime Executive Order
The US announced a new cyber strategy emphasizing deterrence, disruption of cybercrime groups like ShinyHunters and Cl0p, and addressing AI, quantum threats amid geopolitical tensions. It shifts policy to aggressive action against criminals and state enablers, boosting private sector collaboration.
Emerging tech like AI-generated phishing and deepfakes heighten risks.
Cisco Discloses Critical Vulnerabilities in Catalyst SD-WAN Manager
Cisco revealed CVE-2026-20122 (CVSS 7.1) for file overwrite and CVE-2026-20128 (CVSS 5.5) for info disclosure, following exploitation of CVE-2026-20127 (CVSS 10.0) by UAT-8616. These affect authenticated attackers with API access.
No details on attack scale provided.
Qilin Ransomware Hits Tennessee Valley Electric Cooperative (TVEC)
Ransomware group Qilin claimed breach of US electric cooperative TVEC, targeting critical infrastructure in Tennessee. Potential stolen data includes employee info and customer records.
TVEC has not commented publicly.
Microsoft March 2026 Patch Tuesday Fixes 79 Vulnerabilities, Including Zero-Days
Microsoft patched 79 CVEs, including two former zero-days for privilege escalation and service crashes, plus Office RCE flaws like CVE-2026-26110. No confirmed active exploitation reported.
Updates cover Windows, ESU, and open-source issues like CVE-2026-26030 in GitHub tools.
LexisNexis Legal & Professional Data Breach Confirmed
Cybercriminals stole 2GB from LexisNexis on March 3, including credentials and data on 400,000 individuals, mostly pre-2020 legacy info. Company contained the breach; products unaffected.
Limited servers accessed.
Europol Takedown of Stronghold LeakBase Dark Web Forum
Europol, FBI led shutdown of LeakBase, a major forum with 140,000 users sharing infostealers and leaked data, following RAMP seizure. Pivotal blow to cybercrime data sharing.
Highlights law enforcement gains.
Ransomware Victims Surge 43% in February 2026
Bitdefender reported 1,194 claimed victims, driven by 0APT's inflated claims and groups like The Gentlemen using BYOVD tactics. Focus on identity theft, RMM tools, fileless attacks in MDR insights.
Thailand heavily targeted by The Gentlemen.
Cyber Retaliation Escalates After US-Israel Strikes on Iran
Hacktivists like Handala Hack, WeAreUst, UniT 313 hit Israeli oil/gas, defense firms, and Bahrain/Saudi entities with breaches and DDoS. Israel most impacted Feb 27-Mar 6.
Geopolitical tensions fuel attacks.
Keeper Security Launches 2026 Identity-First Cybersecurity Campaign
Keeper partners with Atlassian Williams F1 for global push on identity-centric security amid rising identity attacks. Emphasizes Zero Trust practices.
Aligns with 2026 trends.
Leonardo Acquires Becrypt to Bolster Cybersecurity Portfolio
Leonardo strengthens trusted cybersecurity via UK firm Becrypt acquisition on March 11. Enhances proprietary offerings in endpoint security.
Positions for growth in sector.