Cybersecurity briefing — 2026-03-26

Here's your PlainSec briefing for Thursday, March 26th.

• Coruna Exploit Kit Recycles Triangulation iOS Zero‑Days
• Iran-Related Cyber Campaigns Spike with Wipers and Ransomware
• Langflow Flaw Enables Unauthenticated Remote Code Execution
• Russian Hackers Seize Messaging Accounts of US Officials
• Cisco Patches a Dozen IOS and IOS XE Flaws
• Critical SharePoint RCE Requires Immediate Patch
• TeamPCP Steals CI Secrets from Checkmarx GitHub Actions
• Magento Stores Hit by WebRTC Payment Skimmer Exploiting PolyShell
• Russia Arrests Alleged Administrator of LeakBase Marketplace
• Iran-linked Pay2Key Encrypts U.S. Healthcare Provider Systems
• Google Research Shrinks LLM Working Memory Up to 6x
• Trivy GitHub Actions Compromise Exposes CI/CD Secrets
• BIND Updates Patch Two High-Severity DNSSEC DoS Flaws
• Xinbi campaign update
• Aleksei Olegovich Volkov campaign update
• Anthropic Claude Chrome extension security update
• Iranian State Hackers Target Journalists via Telegram
• Unauthenticated RCE in Secure Firewall Management Center
• SmartApeSG Campaign Deploys Multiple RATs and Data Stealer