Cybersecurity briefing, 2026-03-18

Here's your PlainSec briefing for Wednesday, March 19th.

• Boggy Serpens Escalates Attacks on Maritime and Energy
• Wing FTP Server Flaw Added to Federal KEV List
• Chromium Flaws Actively Exploited; Debian Issues Updates
• Microsoft Word OLE Bypass Exposes Nearly 14 Million Assets
• IP KVM Flaws Allow Unauthenticated Root Access and Takeover
• LeakNet Expands Stealthy Ransomware Access Across Sectors
• Apple pushes background security fix for WebKit same‑origin bypass
• Lazarus-linked Hack Drains Bitrefill Wallets, Exposes 18,500 Records
• Tooling Flaws Allow Build-Time Code Execution and File Exposure
• Ubuntu Snap Flaw Lets Local Users Escalate to Root

Recent editions

• Tuesday, March 17, 2026: Wing FTP Server Flaw Added to Federal KEV List · 10 stories
• Monday, March 16, 2026: Attackers Weaponize 250+ WordPress Sites to Steal Credentials · 3 stories
• Sunday, March 15, 2026: Iran-Aligned Actors Escalate Cyber Attacks on US, Allies · 5 stories
• Saturday, March 14, 2026: Iran-Aligned Actors Escalate Cyber Attacks on US, Allies · 10 stories
• Friday, March 13, 2026: Iran-Aligned Actors Escalate Cyber Attacks on US, Allies · 10 stories
• Thursday, March 12, 2026: Iran-Linked Hackers Cripple Stryker's Global Microsoft Environment · 10 stories
• Wednesday, March 11, 2026: Microsoft Releases March Patch Tuesday Updates · 10 stories