133/69 Monday, March 9, 2026 OpenAI officially launched Codex Security on Friday, introducing an AI-powered security agent designed to automatically identify, verify, and suggest fixes for vulnerabilities in source code. The feature is currently available as a Research Preview for users of ChatGPT Pro, Enterprise, Business, and Edu plans, with the first month offered free […]
132/69 Friday, March 6, 2026 Security researchers from Microsoft’s Defender team have identified a new phishing campaign observed since February 2026 that targets office workers through fake meeting invitations impersonating Zoom and Microsoft Teams. Victims are often lured into opening a blurred PDF attachment designed to prompt curiosity. When users click the embedded link, they […]
131/69 Friday, March 6, 2026 LastPass has issued a warning to users about a new phishing campaign that impersonates security alert emails claiming unauthorized account access or changes to a user’s Master Password. The attackers use display name spoofing to make the messages appear as if they originate from LastPass, increasing the likelihood that recipients […]
130/69 Friday, March 6, 2026 A recent report from Check Point Research has identified cyberattack attempts linked to Iranian-affiliated hacker groups targeting hundreds of IP cameras (CCTV systems) across Israel and several Middle Eastern countries, including Qatar, Bahrain, and the United Arab Emirates-regions with significant military activity. The campaign primarily focuses on compromising cameras from […]
129/69 Thursday, March 5, 2026 Amazon has confirmed that three Amazon Web Services (AWS) data centers in the United Arab Emirates and one in Bahrain were damaged by drone attacks, causing widespread service disruptions affecting dozens of cloud services. The incident occurred amid escalating tensions in the Middle East and is believed to be linked […]
128/69 Thursday, March 5, 2026 Security researchers from Microsoft have identified a phishing campaign targeting government agencies and public-sector organizations by abusing OAuth URL redirection mechanisms to bypass email and browser security protections. Instead of stealing passwords or exploiting software vulnerabilities, attackers leverage OAuth’s legitimate design behavior to redirect users to attacker-controlled infrastructure. As a […]
127/69 Thursday, March 5, 2026 The Cybersecurity and Infrastructure Security Agency (CISA) has added the vulnerability CVE-2026-22719 affecting VMware Aria Operations to its Known Exploited Vulnerabilities (KEV) catalog after reports confirmed active exploitation in the wild. CISA has mandated that U.S. federal agencies remediate the issue by March 24, 2026. Meanwhile, Broadcom, the parent company […]
126/69 Wednesday, March 4, 2026 The University of Hawaii Cancer Center has confirmed that a ransomware group gained access to systems within its Epidemiology Division in August 2025, potentially exposing the personal data of more than 1.2 million individuals. The university has begun sending notification letters and emails to affected individuals, including participants in past […]
125/69 Wednesday, March 4, 2026 Israeli cybersecurity firm Gambit Security has revealed that threat actors leveraged Claude Code, an AI-powered coding assistant developed by Anthropic, to build cyberattack tools. The attackers used the AI system to generate intrusion scripts and ultimately exfiltrated more than 150GB of data from systems belonging to Mexican government agencies. The […]
124/69 Wednesday, March 4, 2026 Following the military operations Epic Fury by the United States and Roaring Lion by Israel on February 28, 2026, which targeted critical Iranian infrastructure and communications systems, cybersecurity experts from organizations such as CrowdStrike and Palo Alto Networks have reported a notable increase in activity from pro-Iranian hacktivist groups. However, […]
