EPISODE · Mar 30, 2026 · 4 MIN
Mar 30, 2026 · #11
from Security Brief Daily · host Security Brief Daily
Episode 11 — 30 Mar 2026 1. Critical Fortinet Forticlient EMS flaw now exploited in attacks Source: Bleeping Computer Attackers are now actively exploiting a critical vulnerability in Fortinet's FortiClient EMS platform, according to threat intelligence company Defused. Tracked as CVE-2026-21643 , this SQL injection vulnerability allows unauthenticated threat actors to execute arbitrary code... 2. European Commission confirms data breach after Europa.eu hack Source: Bleeping Computer The European Commission has confirmed a data breach after its Europa.eu web platform was hacked in a cyberattack claimed by the ShinyHunters extortion gang. BleepingComputer first reported on Friday that this breach affects at least one of the Commission's AWS (Amazon Web... 3. Three China-Linked Clusters Target Southeast Asian Government in 2025 Cyber Campaign Source: The Hacker News Three threat activity clusters aligned with China have targeted a government organization in Southeast Asia as part of what has been described as a "complex and well-resourced operation." The campaigns have led to the deployment of various malware families, including HIUPAN... 4. FBI confirms hack of Director Patel's personal email inbox Source: Bleeping Computer The Handala hackers associated with Iran have breached the personal email account of FBI Director Kash Patel and published photos and documents. The FBI has confirmed the compromise, saying that the stolen data was not recent and did not include any government data. On... 5. Citrix NetScaler Under Active Recon for CVE-2026-3055 (CVSS 9.3) Memory Overread Bug Source: The Hacker News A recently disclosed critical security flaw impacting Citrix NetScaler ADC and NetScaler Gateway is witnessing active reconnaissance activity, according to Defused Cyber and watchTowr. The vulnerability, CVE-2026-3055 (CVSS score: 9.3), refers to a case of insufficient input... 6. New Infinity Stealer malware grabs macOS data via ClickFix lures Source: Bleeping Computer A new info-stealing malware named Infinity Stealer is targeting macOS systems with a Python payload packaged as an executable using the open-source Nuitka compiler. The attack uses the ClickFix technique, presenting a fake CAPTCHA that mimics Cloudflare’s human verification... 7. Iran-Linked Hackers Breach FBI Director’s Personal Email, Hit Stryker With Wiper Attack Source: The Hacker News Threat actors with ties to Iran successfully broke into the personal email account of Kash Patel, the director of the U.S. Federal Bureau of Investigation (FBI), and leaked a cache of photos and other documents to the internet. Handala Hack Team, which carried out the breach,... 8. File read flaw in Smart Slider plugin impacts 500K WordPress sites Source: Bleeping Computer A vulnerability in the Smart Slider 3 WordPress plugin, active on more than 800,000 websites, can be exploited to allow subscriber-level users access to arbitrary files on the server. An authenticated attacker could use it to access sensitive files, such as wp-config.php ,...
What this episode covers
Episode 11 — 30 Mar 2026 1. Critical Fortinet Forticlient EMS flaw now exploited in attacks Source: Bleeping Computer Attackers are now actively exploiting a critical vulnerability in Fortinet's FortiClient EMS platform, according to threat intelligence company Defused. Tracked as CVE-2026-21643 , this SQL injection vulnerability allows unauthenticated threat actors to execute arbitrary code... 2. European Commission confirms data breach after Europa.eu hack Source: Bleeping Computer The European Commission has confirmed a data breach after its Europa.eu web platform was hacked in a cyberattack claimed by the ShinyHunters extortion gang. BleepingComputer first reported on Friday that this breach affects at least one of the Commission's AWS (Amazon Web... 3. Three China-Linked Clusters Target Southeast Asian Government in 2025 Cyber Campaign Source: The Hacker News Three threat activity clusters aligned with China have targeted a government organization in Southeast Asia as part of what has been described as a "complex and well-resourced operation." The campaigns have led to the deployment of various malware families, including HIUPAN... 4. FBI confirms hack of Director Patel's personal email inbox Source: Bleeping Computer The Handala hackers associated with Iran have breached the personal email account of FBI Director Kash Patel and published photos and documents. The FBI has confirmed the compromise, saying that the stolen data was not recent and did not include any government data. On... 5. Citrix NetScaler Under Active Recon for CVE-2026-3055 (CVSS 9.3) Memory Overread Bug Source: The Hacker News A recently disclosed critical security flaw impacting Citrix NetScaler ADC and NetScaler Gateway is witnessing active reconnaissance activity, according to Defused Cyber and watchTowr. The vulnerability, CVE-2026-3055 (CVSS score: 9.3), refers to a case of insufficient input... 6. New Infinity Stealer malware grabs macOS data via ClickFix lures Source: Bleeping Computer A new info-stealing malware named Infinity Stealer is targeting macOS systems with a Python payload packaged as an executable using the open-source Nuitka compiler. The attack uses the ClickFix technique, presenting a fake CAPTCHA that mimics Cloudflare’s human verification... 7. Iran-Linked Hackers Breach FBI Director’s Personal Email, Hit Stryker With Wiper Attack Source: The Hacker News Threat actors with ties to Iran successfully broke into the personal email account of Kash Patel, the director of the U.S. Federal Bureau of Investigation (FBI), and leaked a cache of photos and other documents to the internet. Handala Hack Team, which carried out the breach,... 8. File read flaw in Smart Slider plugin impacts 500K WordPress sites Source: Bleeping Computer A vulnerability in the Smart Slider 3 WordPress plugin, active on more than 800,000 websites, can be exploited to allow subscriber-level users access to arbitrary files on the server. An authenticated attacker could use it to access sensitive files, such as wp-config.php ,...
NOW PLAYING
Mar 30, 2026 · #11
No transcript for this episode yet
Similar Episodes
No similar episodes found.
Similar Podcasts
No similar podcasts found.