Daily Threat Briefing — Mar 30, 2026

📰 Cybersecurity News Headlines

Top stories from leading cybersecurity publications as of March 30, 2026.

1. DShield (Cowrie) Honeypot Stats and When Sessions Disconnect, (Mon, Mar 30th)
   — SANS ISC
   
   A lot of the information seen on DShield honeypots [1] is repeated bot traffic, especially when looking at the Cowrie [2] telnet and SSH ses…
2. FBI confirms hack of Director Patel's personal email inbox
   — Bleeping Computer
   
   The Handala hackers associated with Iran have breached the personal email account of FBI Director Kash Patel and published photos and docume…
3. File read flaw in Smart Slider plugin impacts 500K WordPress sites
   — Bleeping Computer
   
   A vulnerability in the Smart Slider 3 WordPress plugin, active on more than 800,000 websites, can be exploited to allow subscriber-level use…
4. Iran-Linked Hackers Breach FBI Director’s Personal Email, Hit Stryker With Wiper Attack
   — The Hacker News
   
   Threat actors with ties to Iran successfully broke into the personal email account of Kash Patel, the director of the U.S. Federal Bureau of…
5. TeamPCP Supply Chain Campaign: Update 003 – Operational Tempo Shift as Campaign Enters Monetization Phase With No New Compromises in 48 Hours, (Sat, Mar 28th)
   — SANS ISC
   
   This is the third update to the TeamPCP supply chain campaign threat intelligence report, "When the Security Scanner Became the Weapon" (v3.…
6. New Infinity Stealer malware grabs macOS data via ClickFix lures
   — Bleeping Computer
   
   A new info-stealing malware named Infinity Stealer is targeting macOS systems with a Python payload packaged as an executable using the open…
7. Citrix NetScaler Under Active Recon for CVE-2026-3055 (CVSS 9.3) Memory Overread Bug
   — The Hacker News
   
   A recently disclosed critical security flaw impacting Citrix NetScaler ADC and NetScaler Gateway is witnessing active reconnaissance activit…
8. TA446 Deploys DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign
   — The Hacker News
   
   Proofpoint has disclosed details of a targeted email campaign in which threat actors with ties to Russia are leveraging the recently disclos…
9. CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation
   — The Hacker News
   
   The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical security flaw impacting F5 BIG-IP Access Policy …
10. Backdoored Telnyx PyPI package pushes malware hidden in WAV audio
    — Bleeping Computer
    
    TeamPCP hackers compromised the Telnyx package on the Python Package Index today, uploading malicious versions that deliver credential-steal…
11. China Upgrades the Backdoor It Uses to Spy on Telcos Globally
    — Dark Reading
    
    Chinese APT Red Menshen's super-advanced BPFdoor malware defeats traditional cybersecurity protections. All telcos can do, really, is try hu…
12. Wartime Usage of Compromised IP Cameras Highlight Their Danger
    — Dark Reading
    
    The list of countries exploiting Internet-connected cameras to give them eyes inside their adversaries' borders continues to expand. What sh…

Generated by HiveNet.ai Threat Intelligence Platform · March 30, 2026 · Sources: The Hacker News, Bleeping Computer, Krebs on Security, Dark Reading, SANS ISC