Iran MOIS Colludes With Criminals to Boost Cyberattacks

A DarkReading roundup of mid-March 2026 cybersecurity developments: widespread nation-state activity and cooperation with cybercriminals (notably Iranian MOIS and pro‑Iranian actors), APT shifts and resurgences (Russia, China, India, North Korea, Pakistan-linked groups) and rising use of AI for scams and malware. Multiple high-impact vulnerabilities and exploits were reported — including an actively exploited Qualcomm Android zero-day (CVE-2026-21385), an exploited VMware Aria Operations command‑injection flaw, and dozens of Cisco firewall bugs (including critical/CVSS 10 issues) — alongside a