At RSAC, the EU Leads While US Officials Are Sidelined

A batch of DarkReading stories from March 2026 highlights a surge in high‑impact threats and vulnerabilities: widening software‑supply‑chain compromises (Trivy, Checkmarx KICS, VS Code plug‑ins, LiteLLM and hundreds of poisoned packages from a GitHub/‘OpenClaw’ campaign); targeted malware and infostealers stealing credentials and secrets; a critical unauthenticated RCE in Oracle Fusion Middleware; active exploitation of a Cisco firewall flaw by ransomware actors; a sophisticated iPhone exploit chain (DarkSword) using multiple zero‑days; and the evolution of malware (GlassWorm, SnappyClient) to