Weekly News - CISA warns of active exploitation of Microsoft SharePoint vulnerability

DarkSword: Researchers uncover another iOS exploit kit - View in browser  Weekly cybersecurity news March 23, 2026 With rising regulations and security teams stretched thin, it's no surprise that many are rethinking how they approach GRC. In this practical guide, learn how to move beyond checkbox compliance, and get inspiration from teams at Druva and PathAI. Latest articles: Cisco FMC flaw was exploited by Interlock weeks before patch (CVE-2026-20131) Unpatched ScreenConnect servers open to attack (CVE-2026-3564) Google slows Android sideloading to trip up scammers Terminated contract led to $2.5 million cyber extortion scheme Authorities disrupt four IoT botnets behind record DDoS attacks Fake AI songs streamed billions of times, netting fraudster $10 million Field workers don't need more access, they need better security New infosec products of the week: March 20, 2026 Llamafile, Mozilla's portable LLM runner, gets GPU support and a rebuilt core DarkSword: Researchers uncover another iOS exploit kit 4chan shrugs off UK regulator, refuses to pay £520,000 in fines over online safety violations Secure endpoint management systems immediately, CISA urges CISA warns of active exploitation of Microsoft SharePoint vulnerability (CVE-2026-20963) Google limits Android accessibility API to curb malware abuse 900,000 contact records exposed in Aura data breach EDR killers are now standard equipment in ransomware attacks Samba 4.24.0 ships Kerberos hardening and a CVE fix for domain encryption defaults Java 26 ships with new cryptography API and HTTP/3 support Betterleaks: Open-source secrets scanner AI got it wrong with high confidence. Now what? Elite members of North Korean society fake their way into Western paychecks Your APIs are under siege, and attackers are just getting warmed up Firefox is getting a free built-in VPN Apple starts issuing lightweight security updates between software releases Big tech companies step in to support the open source security ecosystem Cybercriminals scale up, government sector hit hardest Stop building security goals around controls Global fraud losses climb to $442 billion EU sanctions Chinese company behind 65,000-device hack Microsoft zeroes in on AI-driven data risks in Fabric Millions of UK firms on alert after Companies House data exposure Hidden instructions in README files can make AI agents leak data Cybersecurity jobs available right now: March 17, 2026 Meta ditches end-to-end encrypted messaging on Instagram Microsoft Edge 146 adds IP privacy and local network access controls Hackers tried to breach Poland's nuclear research centre 45,000 malicious IP addresses taken down, 94 suspects arrested Certificate lifespans are shrinking and most organizations aren't ready What smart factories keep getting wrong about cybersecurity VulHunt: Open-source vulnerability detection framework Fake scandal clips on Facebook bait victims into investment scams Videos: Cloud misconfiguration has evolved and your controls haven't What to do in the first 24 hours of a breach Industry news: Rapid7 enhances Exposure Command with runtime validation and DSPM for risk analysis Semgrep Multimodal brings AI reasoning and rule-based analysis to code security ConductorOne unveils AI Access Management to accelerate secure, compliant AI adoption Bonfy ACS 2.0 helps organizations control data use in AI environments AppViewX acquires Eos to extend identity security to AI agents and workloads Intezer AI SOC removes MDR limits with autonomous triage and optimization Flare Foretrace helps employees detect and fix identity risks to strengthen enterprise security Versa Secure Enterprise Browser delivers browser-native security for enterprise apps Nagomi Security expands into agent-driven exposure elimination with Agentic Exposure Ops Cobalt adds continuous pentesting AI capabilities to scale offensive security and real-world risk Discern deploys six AI agents to streamline security analysis, prioritization, and remediation Entro Security AGA brings governance and control to enterprise AI agents and access Komodor unveils Klaudia AI extensibility framework to power multi-agent incident resolution Teleport announced Beams, wants to remove major barrier to agentic AI Arcjet enables inline defense against prompt injection in production AI systems Keysight SBOM Manager simplifies global cybersecurity compliance and software transparency Omnix AI Advisor brings real-time credential threat insights to enterprise security teams Token Security advances AI agent protection with intent-based controls Dropzone AI releases autonomous Threat Hunting agent for continuous SOC detection Backslash adds cross-product support to secure AI skills in developer environments Menlo Security delivers unified governance and threat prevention for AI agents and humans Graylog advances explainable AI and automated workflows for faster threat detection Corelight's Agentic Triage turns SOC alerts into evidence-backed investigations TrojAI unveils new capabilities to secure agentic AI beyond the prompt layer Veracode Fix for SCA automates open-source vulnerability fixes Polygraf AI launches Desktop Overlay for real-time AI behavior control in enterprise operations VIAVI advances NetSecOps with unified threat forensics and retrospective analysis Druva connects identity data and behavior to restore access after attacks Blumira enhances EDR and ITDR to speed up threat detection and containment BlackHawk Data introduces CloudSight for continuous security auditing Abnormal AI Attune 1.0 targets AI-driven attacks with behavioral detection Island Enterprise Platform delivers unified control for workspaces and AI Theori brings Xint Code to market for large-scale AI code security analysis 1Password Users API for Partners helps automate identity response during incidents Cayosoft adds AI identity visibility and incident response for hybrid environments Virtue AI brings continuous stress testing to enterprise AI agents ManageEngine expands Endpoint Central with EDR and secure access Tufin introduces AI agents to take on network security work CTG unveils cyber resilience scoring dashboard for measurable risk reduction SCW Trust Agent: AI tracks AI influence in code to reduce software risk Xona Systems brings real-time threat response to OT remote access sessions XM Cyber advances AI security with enhanced exposure and attack path visibility SailPoint improves visibility and control over unauthorized AI use Pindrop Fraud Assist uses AI to analyze calls and strengthen fraud prevention Huntress adds tools to its Agentic Security Platform to detect, fix, and prevent endpoint and identity risks Kore.ai debuts Agent Management Platform to govern enterprise AI ecosystems New Kingston IronKey USB drive delivers enterprise-grade data security Intel 471 debuts integrated platform for external threat management Chainguard locks down CI/CD with secure-by-default actions Veritone secures AI data with automated PII removal Imprivata enhances NHS access security with passwordless controls Linux Foundation secures $12.5 million to strengthen open source security and support maintainers Proofpoint addresses AI threats with intent-based security Jozu Agent Guard targets AI agents that evade controls Traefik Triple Gate gains parallel safety pipelines, failover routing, and AI runtime controls Stellar Cyber 6.4.0 reduces alert noise and speeds investigations with Autonomous SOC capabilities NinjaOne Vulnerability Management enables real-time detection and autonomous patching Orca Platform enhancements use AI to cut cloud alert noise Fingerprint's MCP Server turns device intelligence into real-time AI-powered fraud insights KEEQuant advances chip-scale QKD for telecom, data centers, and critical infrastructure JSOC IT's AUTOPSY platform puts security stacks under live API verification Copyright © 2026 Help Net Security, All rights reserved. You are receiving Help Net Security daily security news because you opted in at our web site located on www.helpnetsecurity.com. Our mailing address is: Help Net Security Astus d.o.o. Kastav 51215 Croatia Add us to your address book No longer interested in receiving these emails? Unsubscribe Missed an issue? Access our past newsletters here: Archive