EFF has a new boss to lead the fight against privacy-sucking forces of doom
2026-03-25T07:23:56Z•6765eeba55264459a94e00b10cbc3d4ae567f627cc699b427758bc1ecd09f93e
cisco-secure-firewallcloud-compromisecredential-theftcve-2026-20131darksworddata-leakddosextortionios-exploitiot-botnetlapsuslitellmmicrosoft-intuneout-of-band-patchpyPIransomwaresecret-stealersharepoint-exploitsupply-chain-attackthird-party-breachtrivyvoice-phishingzero-day
What happened
A wave of active, high-impact incidents and emerging threats across cloud, open-source supply chains, endpoints and networking appliances. Key stories: the Trivy supply‑chain compromise poisoned scanners and PyPI packages (LiteLLM), leading to thousands of cloud environments being infected and credential/secret theft and ties to extortion groups; ransomware actors exploited a pre‑patch zero‑day in Cisco Secure Firewall Management Center (CVE-2026-20131); Microsoft SharePoint and Intune were actively abused in separate operations; a new iOS exploit kit (“Darksword”) is being used by spyware/nsl
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- theregister_security
- Record identifier
- 6765eeba55264459a94e00b10cbc3d4ae567f627cc699b427758bc1ecd09f93e
- Enrichment time
- 2026-03-25T07:23:56Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.