Veeam warns of critical flaws exposing backup servers to RCE attacks

BleepingComputer roundup (12–11 Mar 2026): Veeam patched multiple Backup & Replication flaws, including four critical RCE vulnerabilities that could expose backup servers to remote code execution. Law enforcement disrupted the SocksEscort proxy network built from edge devices compromised by AVRecon Linux malware. CISA ordered federal agencies to patch an actively exploited n8n RCE. Telus Digital confirmed a multi-month breach with threat actors claiming ~1 PB of stolen data. Stryker suffered an Iran-linked Handala wiper attack that took systems offline. Other notable items: SQL injection in 3P