Cybersecurity briefing, 2026-03-20

Here's your PlainSec briefing for Friday, March 20th.

• Interlock Ransomware Uses Zero-Day to Compromise Firewalls
• Russian APT Breaches Ukrainian Maritime Agency Through Zimbra Flaw
• Critical SharePoint Flaw Being Actively Exploited
• US, Allies Disrupt IoT Botnets Behind Massive DDoS Attacks
• FBI Takedown of Handala Websites After Stryker Mass-Wipe
• Iran Deploys Cyber Chaos Campaign to Pressure Rivals
• CISA Urges US Firms to Harden Microsoft Intune
• FBI director Kash Patel confirmed the agency is purchasing commercially available
• ScreenConnect Flaw and SILENTCONNECT Loader Enable Unauthorized Access
• Oracle Patches Critical Unauthenticated RCE in Fusion Middleware

Recent editions

• Thursday, March 19, 2026: Interlock Compromises Enterprise Firewalls via Cisco FMC Zero-Day · 9 stories
• Wednesday, March 18, 2026: Boggy Serpens Escalates Attacks on Maritime and Energy · 10 stories
• Tuesday, March 17, 2026: Wing FTP Server Flaw Added to Federal KEV List · 10 stories
• Monday, March 16, 2026: Attackers Weaponize 250+ WordPress Sites to Steal Credentials · 3 stories
• Sunday, March 15, 2026: Iran-Aligned Actors Escalate Cyber Attacks on US, Allies · 5 stories
• Saturday, March 14, 2026: Iran-Aligned Actors Escalate Cyber Attacks on US, Allies · 10 stories
• Friday, March 13, 2026: Iran-Aligned Actors Escalate Cyber Attacks on US, Allies · 10 stories