Aura confirms data breach exposing 900,000 marketing contacts
2026-03-19T01:23:28Z•c5b906c169c9ff7b13964bc59e60188c504f780771bb995d3f8abd64d3c95133
AuraCISACisco FMCClickFixDarkswordDeno runtimeGlassWormLeakNetMarquisScreenConnectWebKitXSScryptographic-signature-bypassdata-breachdata-theftiOS exploitinfostealerpatchingphishingprivilege-escalationransomwareremote code executionsupply-chainvulnerability-managementzero-day
What happened
Multiple high-impact security events reported: Interlock ransomware has been exploiting a maximum-severity RCE zero-day in Cisco Secure FMC since January (active in the wild). CISA ordered federal agencies to patch an actively exploited XSS in Zimbra Collaboration Suite. ConnectWise released fixes for a cryptographic signature verification flaw in ScreenConnect that could allow takeover and privilege escalation. Supply-chain campaign 'GlassWorm' hit 400+ code repos and packages across GitHub, npm, and extension marketplaces. New iOS exploit framework 'Darksword' is being used to deploy an info
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- c5b906c169c9ff7b13964bc59e60188c504f780771bb995d3f8abd64d3c95133
- Enrichment time
- 2026-03-19T01:23:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.