Daily Threat Briefing — Mar 19, 2026

📰 Cybersecurity News Headlines

Top stories from leading cybersecurity publications as of March 19, 2026.

1. Interesting Message Stored in Cowrie Logs, (Wed, Mar 18th)
   — SANS ISC
   
   This activity was found and reported by BACS student Adam Thorman as part of one of his assignments which I posted his …
2. Aura confirms data breach exposing 900,000 marketing contacts
   — Bleeping Computer
   
   Identity protection company Aura has confirmed that an unauthorized party gained access to nearly 900,000 customer records containing names …
3. C2 Implant 'SnappyClient' Targets Crypto Wallets
   — Dark Reading
   
   In addition to enabling remote access, the malware supports a wide range of capabilities, including data theft and spying.
4. DarkSword: iPhone Exploit Kit Serves Spies & Thieves Alike
   — Dark Reading
   
   A sophisticated iOS exploit chain leverages multiple zero-day vulnerabilities and is targeting users in Saudi Arabia, Turkey, Malaysia, and …
5. CISA orders feds to patch Zimbra XSS flaw exploited in attacks
   — Bleeping Computer
   
   CISA has ordered U.S. government agencies to secure their servers against an actively exploited vulnerability in the Zimbra Collaboration Su…
6. ConnectWise patches new flaw allowing ScreenConnect hijacking
   — Bleeping Computer
   
   ConnectWise is warning ScreenConnect customers of a cryptographic signature verification vulnerability that could lead to unauthorized acce…
7. OFAC Sanctions DPRK IT Worker Network Funding WMD Programs Through Fake Remote Jobs
   — The Hacker News
   
   The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) has sanctioned six individuals and two entities for their invo…
8. Ransomware gang exploits Cisco flaw in zero-day attacks since January
   — Bleeping Computer
   
   The Interlock ransomware gang has been exploiting a maximum severity remote code execution (RCE) vulnerability in Cisco's Secure Firewall Ma…
9. Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access
   — The Hacker News
   
   Amazon Threat Intelligence is warning of an active Interlock ransomware campaign that's exploiting a recently disclosed critical security fl…
10. 'Claudy Day’ Trio of Flaws Exposes Claude Users to Data Theft
    — Dark Reading
    
    A prompt injection vulnerability paired with other flaws can turn a Google search into a full attack chain that could threaten enterprise ne…
11. Scans for "adminer", (Wed, Mar 18th)
    — SANS ISC
    
    A very popular target of attackers scanning our honeypots is "phpmyadmin". phpMyAdmin is a script first released in the late 90s, before man…
12. SideWinder Espionage Campaign Expands Across Southeast Asia
    — Dark Reading
    
    The suspected India-linked threat group targets governments, telecom, and critical infrastructure using spear-phishing, old vulnerabilities,…

Generated by HiveNet.ai Threat Intelligence Platform · March 19, 2026 · Sources: The Hacker News, Bleeping Computer, Krebs on Security, Dark Reading, SANS ISC