Cybersecurity briefing, 2026-03-25

Here's your PlainSec briefing for Wednesday, March 25th.

• Trivy GitHub Actions Compromise Exposes CI/CD Secrets
• Oracle Patches Critical Unauthenticated RCE in Fusion Middleware
• Voice Phishing Drives 11% of Intrusions in 2025
• Iran-Related Cyber Campaigns Spike with Wipers and Ransomware
• TeamPCP Uses Stolen CI Credentials to Compromise Checkmarx Actions
• Citrix NetScaler Flaws Risk Memory Disclosure and Session Mix‑up
• Aleksei Olegovich Volkov campaign update
• Crunchyroll Customer Service Data Stolen For 6.8M Users
• Chrome 146 Fixes Eight High‑Severity Memory Bugs
• Russian Hackers Seize Messaging Accounts of US Officials
• Unauthenticated SharePoint RCE Added to CISA KEV
• TeamPCP Backdoors LiteLLM PyPI Package, Steals Credentials

Recent editions

• Tuesday, March 24, 2026: Interlock Ransomware Uses Zero-Day to Compromise Firewalls · 9 stories
• Monday, March 23, 2026: Interlock Ransomware Uses Zero-Day to Compromise Firewalls · 8 stories
• Sunday, March 22, 2026: CISA Orders Federal Patch for Zimbra XSS Flaw · 6 stories
• Saturday, March 21, 2026: Interlock Ransomware Uses Zero-Day to Compromise Firewalls · 9 stories
• Friday, March 20, 2026: Interlock Ransomware Uses Zero-Day to Compromise Firewalls · 10 stories
• Thursday, March 19, 2026: Interlock Compromises Enterprise Firewalls via Cisco FMC Zero-Day · 9 stories
• Wednesday, March 18, 2026: Boggy Serpens Escalates Attacks on Maritime and Energy · 10 stories