Cybersecurity briefing — 2026-03-25

Here's your PlainSec briefing for Wednesday, March 25th.

• Trivy GitHub Actions Compromise Exposes CI/CD Secrets
• Oracle Patches Critical Unauthenticated RCE in Fusion Middleware
• Voice Phishing Drives 11% of Intrusions in 2025
• Iran-Related Cyber Campaigns Spike with Wipers and Ransomware
• TeamPCP Uses Stolen CI Credentials to Compromise Checkmarx Actions
• Citrix NetScaler Flaws Risk Memory Disclosure and Session Mix‑up
• Aleksei Olegovich Volkov campaign update
• Crunchyroll Customer Service Data Stolen For 6.8M Users
• Chrome 146 Fixes Eight High‑Severity Memory Bugs
• Russian Hackers Seize Messaging Accounts of US Officials
• Unauthenticated SharePoint RCE Added to CISA KEV
• TeamPCP Backdoors LiteLLM PyPI Package, Steals Credentials