Cybersecurity briefing — 2026-03-29
Here's your PlainSec briefing for Saturday, March 29th.
Coruna Exploit Kit Recycles Triangulation iOS Zero‑Days
TeamPCP Injects Credential-Stealer into LiteLLM Package
CISA Adds BIG‑IP APM RCE to Known Exploited Vulnerabilities
Debian Issues Security Updates for Node.js and Incus
China‑Linked Red Menshen Embeds Stealthy Implants in Telecom Cores
TeamPCP Pauses New Supply-Chain Compromises, Monetizes Haul
Iranian Handala Breaches FBI Director's Gmail; Targets Journalists
Xinbi campaign update
Pay2Key Re-emerges; Bearlyfy Escalates Ransomware Campaign
Smart Slider Vulnerability Lets Subscribers Read Server Files
Cloudflare-Themed Lures Install Python Infostealer on macOS
Citrix NetScaler Flaws Risk Memory Disclosure and Session Mix‑up
Cybersecurity briefing — 2026-03-29
Here's your PlainSec briefing for Saturday, March 29th.
Coruna Exploit Kit Recycles Triangulation iOS Zero‑Days
TeamPCP Injects Credential-Stealer into LiteLLM Package
CISA Adds BIG‑IP APM RCE to Known Exploited Vulnerabilities
Debian Issues Security Updates for Node.js and Incus
China‑Linked Red Menshen Embeds Stealthy Implants in Telecom Cores
TeamPCP Pauses New Supply-Chain Compromises, Monetizes Haul
Iranian Handala Breaches FBI Director's Gmail; Targets Journalists
Xinbi campaign update
Pay2Key Re-emerges; Bearlyfy Escalates Ransomware Campaign
Smart Slider Vulnerability Lets Subscribers Read Server Files
Cloudflare-Themed Lures Install Python Infostealer on macOS
Citrix NetScaler Flaws Risk Memory Disclosure and Session Mix‑up