U.S. Defense Manufacturer IEH Hit by Phishing Attack, Exposing Potentially Export-Controlled Data

Security Affairs feed covering a phishing breach at defense manufacturer IEH with potential exposure of Microsoft 365 email and export-controlled data; malware campaigns and newsletters; CSS-based attacks against webmail and AI email tools; a China cybersecurity review of Palo Alto Networks; in-the-wild exploitation of a Metabase zero-day; CISA listing Progress LoadMaster CVE-2026-8037; a healthcare data breach affecting 3.8 million people; a WordPress XSS-to-RCE vulnerability chain; and IT-support impersonation campaigns stealing MFA credentials from financial firms.