Ex-data analyst stole company data in $2.5M extortion scheme
2026-03-20T07:23:36Z•25a000abfbfdc076d625ca939b778ac420d30e04657bf44f1bb32b91a7115d1f
APT28Android-PerseusBluenoroffCISACisco-FMCConnectWise-ScreenConnectHandalaInterlockLazarusMagentoPolyShellRCEUbiquiti-UniFiXSSZimbraaccount-takeoverdata-breachdata-exfiltrationmalwareransomwarevulnerabilityzero-day
What happened
Multiple high-impact security incidents and active vulnerabilities were reported: a newly disclosed 'PolyShell' unauthenticated RCE affecting Magento/Open Source and Adobe Commerce 2.x (account takeover risk); a maximum-severity Cisco Secure FMC zero‑day RCE exploited by the Interlock ransomware gang since January; a critical Microsoft SharePoint flaw now under exploitation; an actively exploited Zimbra XCS/XSS vulnerability used against Ukrainian government targets (CISA ordered mitigations); a high‑severity Ubiquiti UniFi account‑takeover bug; a ConnectWise/ScreenConnect cryptographic/sign‑/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 25a000abfbfdc076d625ca939b778ac420d30e04657bf44f1bb32b91a7115d1f
- Enrichment time
- 2026-03-20T07:23:36Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.