Cybersecurity briefing, 2026-03-17

• Wing FTP Server flaw added to federal KEV list
• Chromium flaws actively exploited; Debian issues updates
• China-linked hackers maintain years-long access to Southeast Asian militaries
• ChromeOS Long-Term Channel gets high-severity security update
• Boggy Serpens escalates attacks on maritime and energy
• Tooling flaws allow build-time code execution and file exposure
• Teams add-in may break Outlook Classic for users
• Microsoft issues hotpatch to restore Bluetooth visibility on Windows 11
• Stolen GitHub tokens inject malware into Python repositories
• Teams vishing enables remote compromise and credential theft

Recent editions

• Monday, March 16, 2026: Attackers weaponize 250+ WordPress sites to steal credentials · 3 stories
• Sunday, March 15, 2026: Iran-aligned actors escalate cyber attacks on US, allies · 5 stories
• Saturday, March 14, 2026: Law enforcement dismantles global SocksEscort residential-proxy botnet · 10 stories
• Friday, March 13, 2026: Iran-linked hackers cripple Stryker's global Microsoft environment · 10 stories
• Thursday, March 12, 2026: CISA orders emergency patches for SolarWinds, Ivanti, Workspace One · 10 stories
• Wednesday, March 11, 2026: Microsoft releases March Patch Tuesday updates · 10 stories
• Tuesday, March 10, 2026: UAT-8616 activity affects Cisco Catalyst SD-WAN Controller · 9 stories