Cybersecurity briefing, 2026-03-21

Here's your PlainSec briefing for Saturday, March 21st.

• Interlock Ransomware Uses Zero-Day to Compromise Firewalls
• Critical SharePoint Flaw Being Actively Exploited
• US, Allies Disrupt IoT Botnets Behind Massive DDoS Attacks
• Attackers Backdoor Trivy GitHub Actions to Steal Secrets
• Langflow Vulnerability Exploited Within 20 Hours
• Musician Pleads Guilty to Millions in Streaming Royalty Fraud Using AI
• ScreenConnect Flaw and SILENTCONNECT Loader Enable Unauthorized Access
• Metasploit Update Adds AVideo, FreePBX Exploit Modules
• Oracle Patches Critical Unauthenticated RCE in Fusion Middleware

Recent editions

• Friday, March 20, 2026: Interlock Ransomware Uses Zero-Day to Compromise Firewalls · 10 stories
• Thursday, March 19, 2026: Interlock Compromises Enterprise Firewalls via Cisco FMC Zero-Day · 9 stories
• Wednesday, March 18, 2026: Boggy Serpens Escalates Attacks on Maritime and Energy · 10 stories
• Tuesday, March 17, 2026: Wing FTP Server Flaw Added to Federal KEV List · 10 stories
• Monday, March 16, 2026: Attackers Weaponize 250+ WordPress Sites to Steal Credentials · 3 stories
• Sunday, March 15, 2026: Iran-Aligned Actors Escalate Cyber Attacks on US, Allies · 5 stories
• Saturday, March 14, 2026: Iran-Aligned Actors Escalate Cyber Attacks on US, Allies · 10 stories