Daily Threat Briefing — Mar 17, 2026

📰 Cybersecurity News Headlines

Top stories from leading cybersecurity publications as of March 17, 2026.

1. Boggy Serpens Threat Assessment
   — Unit 42
   
   Iranian threat group Boggy Serpens' cyberespionage evolves with AI-enhanced malware and refined social engineering. Unit 42 details their pe…
2. GlassWorm Malware Evolves to Hide in Dependencies
   — Dark Reading
   
   Researchers have identified dozens of malicious GlassWorm extensions that come with new evasion techniques.
3. Inside Olympic Cybersecurity: Lessons From Paris 2024 to Milan Cortina 2026
   — Dark Reading
   
   Discover how Franz Regul, former CISO for the Paris 2024 Olympics, tackled unique cybersecurity challenges to protect the Olympics from evol…
4. GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos
   — The Hacker News
   
   The GlassWorm malware campaign is being used to fuel an ongoing attack that leverages the stolen GitHub tokens to inject malware into hundre…
5. Stryker attack wiped tens of thousands of devices, no malware needed
   — Bleeping Computer
   
   Last week's cyberattack on medical technology giant Stryker was limited to its internal Microsoft environment and remotely wiped tens of tho…
6. Iranian Cyber Threat Evolution: From MBR Wipers to Identity Weaponization
   — Unit 42
   
   The evolution of Iranian cyber operations in broad context: from custom wiper malware to misuse of legitimate admin tools and more. The post…
7. CISA flags Wing FTP Server flaw as actively exploited in attacks
   — Bleeping Computer
   
   CISA warned U.S. government agencies to secure their Wing FTP Server instances against an actively exploited vulnerability that may be chain…
8. UK’s Companies House confirms security flaw exposed business data
   — Bleeping Computer
   
   Companies House, a British government agency that operates the registry for all U.K. companies, says its WebFiling service is back online a…
9. ⚡ Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & More
   — The Hacker News
   
   Some weeks in security feel normal. Then you read a few tabs and get that immediate “ah, great, we’re doing this now” feeling. This we…
10. Attackers Abuse LiveChat to Phish Credit Card, Personal Data
    — Dark Reading
    
    A social engineering campaign impersonating PayPal and Amazon uses customer support interactions to acquire sensitive info.
11. /proxy/ URL scans with IP addresses, (Mon, Mar 16th)
    — SANS ISC
    
    Attempts to find proxy servers are among the most common scans our honeypots detect. Most of the time, the attacker attempts to use a host h…
12. Why Security Validation Is Becoming Agentic
    — The Hacker News
    
    If you run security at any reasonably complex organization, your validation stack probably looks something like this: a BAS tool in one corn…

Generated by CryptXNet.ai Threat Intelligence Platform · March 17, 2026 · Sources: The Hacker News, Bleeping Computer, Krebs on Security, Dark Reading, SANS ISC, THN Threat Intel, Unit 42, Security.com