Cybersecurity briefing, 2026-03-23

Here's your PlainSec briefing for Sunday, March 23rd.

• Interlock Ransomware Uses Zero-Day to Compromise Firewalls
• Critical SharePoint Flaw Being Actively Exploited
• CISA Orders Federal Agencies to Patch n8n RCE
• Attackers Shift to RCE Bugs to Compromise Clouds
• Apple pushes background security fix for WebKit same‑origin bypass
• Rockwell Vulnerability Allowing Remote ICS Hacking Exploited in Attacks
• Oracle Patches Critical Unauthenticated RCE in Fusion Middleware
• Musician Pleads Guilty to Millions in Streaming Royalty Fraud Using AI

Recent editions

• Sunday, March 22, 2026: CISA Orders Federal Patch for Zimbra XSS Flaw · 6 stories
• Saturday, March 21, 2026: Interlock Ransomware Uses Zero-Day to Compromise Firewalls · 9 stories
• Friday, March 20, 2026: Interlock Ransomware Uses Zero-Day to Compromise Firewalls · 10 stories
• Thursday, March 19, 2026: Interlock Compromises Enterprise Firewalls via Cisco FMC Zero-Day · 9 stories
• Wednesday, March 18, 2026: Boggy Serpens Escalates Attacks on Maritime and Energy · 10 stories
• Tuesday, March 17, 2026: Wing FTP Server Flaw Added to Federal KEV List · 10 stories
• Monday, March 16, 2026: Attackers Weaponize 250+ WordPress Sites to Steal Credentials · 3 stories