Cybersecurity briefing, 2026-03-22

Here's your PlainSec briefing for Sunday, March 22nd.

• CISA Orders Federal Patch for Zimbra XSS Flaw
• Internet-Exposed KACE Appliances Suffer Administrative Takeover
• Iran Deploys Cyber Chaos Campaign to Pressure Rivals
• Oracle Patches Critical Unauthenticated RCE in Fusion Middleware
• Attackers Backdoor Trivy GitHub Actions to Steal Secrets
• Musician Pleads Guilty to Millions in Streaming Royalty Fraud Using AI

Recent editions

• Saturday, March 21, 2026: Interlock Ransomware Uses Zero-Day to Compromise Firewalls · 9 stories
• Friday, March 20, 2026: Interlock Ransomware Uses Zero-Day to Compromise Firewalls · 10 stories
• Thursday, March 19, 2026: Interlock Compromises Enterprise Firewalls via Cisco FMC Zero-Day · 9 stories
• Wednesday, March 18, 2026: Boggy Serpens Escalates Attacks on Maritime and Energy · 10 stories
• Tuesday, March 17, 2026: Wing FTP Server Flaw Added to Federal KEV List · 10 stories
• Monday, March 16, 2026: Attackers Weaponize 250+ WordPress Sites to Steal Credentials · 3 stories
• Sunday, March 15, 2026: Iran-Aligned Actors Escalate Cyber Attacks on US, Allies · 5 stories