Weekly News - NIST updates its DNS security guidance for the first time in over a decade

TeamPCP strikes again: Backdoored Telnyx PyPI package delivers malware - View in browser  Weekly cybersecurity news March 30, 2026 Patching is annoying. Let Action1 patch your first 200 endpoints for $0. Free forever. Fix CVEs fast. Automate patching for Windows, macOS, Linux & third-party apps. Deploy in 5 minutes. Activate 200 free endpoints today. Latest articles: Quantum threats are already active and the defense response remains fragmented Measuring security performance in real-time, not once a quarter Attackers are exploiting RCE vulnerability in BIG-IP APM systems (CVE-2025-53521) TeamPCP strikes again: Backdoored Telnyx PyPI package delivers malware CISA sounds alarm on Langflow RCE, Trivy supply chain compromise after rapid exploitation Ajax data breach exposed season tickets, supporter bans open to tampering AI frenzy feeds credential chaos, secrets leak through code, tools, and infrastructure Make OpenAI's models misbehave and earn a reward Tails 7.6 ships automatic Tor bridge retrieval and a new password manager Second RedLine infostealer operator ends up in US custody Researchers release tool to detect stealthy BPFDoor implants in critical infrastructure networks GitHub jumps on the bandwagon and will use your data to train AI Mission to smuggle $170 million worth of AI tech to China collapsed for three men Reddit declares war on bad bot activity Google races to secure encryption before quantum threats arrive AI SOC vendors are selling a future that production deployments haven't reached yet A nearly undetectable LLM attack needs only a handful of poisoned samples Your facilities run on fragile supply chains and nobody wants to admit it Unbreakable Enterprise Kernel 8.2 ships with confidential computing support, XFS live repair Botnet operator behind $14 million in ransomware extortion payments gets 24 months behind bars LiteLLM PyPI packages compromised in expanding TeamPCP supply chain attacks Microsoft hands Entra ID users new option for MFA Anthropic trims action approval loop, lets Claude Code make the call Google's TurboQuant cuts AI memory use without losing accuracy You don't have to choose between BAS or automated pentesting, you shouldn't Kali Linux 2026.1 ships BackTrack mode, eight new tools, and a kernel upgrade to 6.18 Uncle Sam closes the door on all new foreign-made routers Critical NetScaler ADC, Gateway flaw may soon be exploited (CVE-2026-3055) Russian initial access broker helped ransomware gangs extort millions, sentenced to 81 months 32% of top-exploited vulnerabilities are over a decade old Microsoft details AI prompt abuse techniques targeting AI assistants NVIDIA puts GPU orchestration in community hands GitHub-hosted malware campaign uses split payload to evade detection Attackers are handing off access in 22 seconds, Mandiant finds Product showcase: Cross-platform and third-party endpoint patching with Action1 Cybersecurity jobs available right now: March 24, 2026 Oracle issues emergency fix for pre-auth RCE in Identity Manager (CVE-2026-21992) Russian hackers go after high-value targets through Signal Plumber: Open-source scanner of GitLab CI/CD pipelines for compliance gaps NIST updates its DNS security guidance for the first time in over a decade Video: Why your phishing simulations aren't building a security culture Industry news: DigiCert Document Trust Manager enhancements improve document security and compliance Akamai Brand Guardian detects and removes AI-driven brand impersonation Njordium AI blocks fake invoices and fraudulent payments Codenotary introduces AgentX for autonomous Linux infrastructure security Spur Intelligence delivers deeper visibility into anonymized infrastructure Barracuda strengthens cyber resilience with BarracudaONE platform updates Coro automates security operations with end-to-end threat detection and response Hadrian unveils Nova, enabling continuous, AI-powered offensive security testing Zero Networks Kubernetes Access Matrix exposes hidden access paths and blast radius Copyright © 2026 Help Net Security, All rights reserved. You are receiving Help Net Security daily security news because you opted in at our web site located on www.helpnetsecurity.com. Our mailing address is: Help Net Security Astus d.o.o. Kastav 51215 Croatia Add us to your address book No longer interested in receiving these emails? Unsubscribe Missed an issue? Access our past newsletters here: Archive