Mar 31, 2026 · #12

Episode 12 — 31 Mar 2026 1. CISA orders feds to patch actively exploited Citrix flaw by Thursday Source: Bleeping Computer The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered government agencies to patch their Citrix NetScaler appliances against an actively exploited vulnerability by Thursday. Multiple cybersecurity companies flagged the flaw (CVE-2026-3055) as posing an... 2. Critical Citrix NetScaler memory flaw actively exploited in attacks Source: Bleeping Computer Hackers are exploiting a critical severity vulnerability, tracked as CVE-2026-3055, in Citrix NetScaler ADC and NetScaler Gateway appliances to obtain sensitive data. Citrix initially disclosed CVE-2026-3055 in a security bulletin on March 23, alongside a high-severity race... 3. Dutch Finance Ministry takes treasury banking portal offline after breach Source: Bleeping Computer The Dutch Ministry of Finance took some of its systems offline, including the digital portal for treasury banking, while investigating a cyberattack detected two weeks ago. When it disclosed the incident last week, the ministry said the March 19 security breach didn't affect... 4. Hackers exploiting critical F5 BIG-IP flaw in attacks, patch now Source: Bleeping Computer ​Cybersecurity firm F5 Networks has reclassified a BIG-IP APM denial-of-service (DoS) vulnerability as a critical-severity remote code execution (RCE) flaw, warning that attackers are exploiting it to deploy webshells on unpatched devices. BIG-IP APM (short for Access Policy... 5. Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account Source: The Hacker News The popular HTTP client known as Axios has suffered a supply chain attack after two newly published versions of the npm package introduced a malicious dependency. Versions 1.14.1 and 0.30.4 of Axios have been found to inject "plain-crypto-js" version 4.2.1 as a fake... 6. OpenAI Patches ChatGPT Data Exfiltration Flaw and Codex GitHub Token Vulnerability Source: The Hacker News A previously unknown vulnerability in OpenAI ChatGPT allowed sensitive conversation data to be exfiltrated without user knowledge or consent, according to new findings from Check Point. "A single malicious prompt could turn an otherwise ordinary conversation into a covert... 7. Three China-Linked Clusters Target Southeast Asian Government in 2025 Cyber Campaign Source: The Hacker News Three threat activity clusters aligned with China have targeted a government organization in Southeast Asia as part of what has been described as a "complex and well-resourced operation." The campaigns have led to the deployment of various malware families, including HIUPAN... 8. Russian CTRL Toolkit Delivered via Malicious LNK Files Hijacks RDP via FRP Tunnels Source: The Hacker News Cybersecurity researchers have discovered a remote access toolkit of Russian-origin that's distributed via malicious Windows shortcut (LNK) files that are disguised as private key folders. The CTRL toolkit, according to Censys, is custom-built using .NET and includes various...