SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 88

Feed of security news (Mar 13–15, 2026) covering multiple active threats and law-enforcement actions: Google released fixes for two actively exploited Chrome vulnerabilities (CVE-2026-3909, CVE-2026-3910) which CISA added to its Known Exploited Vulnerabilities catalog; phishing against Starbucks’ Partner Central led to a breach impacting ~889 employees; Storm-2561 ran an SEO-poisoning campaign that lured victims to spoofed Ivanti/Cisco/Fortinet VPN sites to harvest corporate credentials; INTERPOL’s Operation Synergia III dismantled ~45,000 malicious IPs/servers and led to 94 arrests worldwide;