Daily Threat Briefing — Mar 30, 2026

📰 Cybersecurity News Headlines

Top stories from leading cybersecurity publications as of March 30, 2026.

1. DShield (Cowrie) Honeypot Stats and When Sessions Disconnect, (Mon, Mar 30th)
   — SANS ISC
   
   A lot of the information seen on DShield honeypots [1] is repeated bot traffic, especially when looking at the Cowrie [2] telnet and SSH ses…
2. FBI confirms hack of Director Patel's personal email inbox
   — Bleeping Computer
   
   The Handala hackers associated with Iran have breached the personal email account of FBI Director Kash Patel and published photos and docume…
3. File read flaw in Smart Slider plugin impacts 500K WordPress sites
   — Bleeping Computer
   
   A vulnerability in the Smart Slider 3 WordPress plugin, active on more than 800,000 websites, can be exploited to allow subscriber-level use…
4. Iran-Linked Hackers Breach FBI Director’s Personal Email, Hit Stryker With Wiper Attack
   — The Hacker News
   
   Threat actors with ties to Iran successfully broke into the personal email account of Kash Patel, the director of the U.S. Federal Bureau of…
5. TeamPCP Supply Chain Campaign: Update 003 – Operational Tempo Shift as Campaign Enters Monetization Phase With No New Compromises in 48 Hours, (Sat, Mar 28th)
   — SANS ISC
   
   This is the third update to the TeamPCP supply chain campaign threat intelligence report, "When the Security Scanner Became the Weapon" (v3.…
6. New Infinity Stealer malware grabs macOS data via ClickFix lures
   — Bleeping Computer
   
   A new info-stealing malware named Infinity Stealer is targeting macOS systems with a Python payload packaged as an executable using the open…
7. Citrix NetScaler Under Active Recon for CVE-2026-3055 (CVSS 9.3) Memory Overread Bug
   — The Hacker News
   
   A recently disclosed critical security flaw impacting Citrix NetScaler ADC and NetScaler Gateway is witnessing active reconnaissance activit…
8. TA446 Deploys DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign
   — The Hacker News
   
   Proofpoint has disclosed details of a targeted email campaign in which threat actors with ties to Russia are leveraging the recently disclos…
9. China Upgrades the Backdoor It Uses to Spy on Telcos Globally
   — Dark Reading
   
   Chinese APT Red Menshen's super-advanced BPFdoor malware defeats traditional cybersecurity protections. All telcos can do, really, is try hu…
10. Wartime Usage of Compromised IP Cameras Highlight Their Danger
    — Dark Reading
    
    The list of countries exploiting Internet-connected cameras to give them eyes inside their adversaries' borders continues to expand. What sh…
11. TeamPCP Supply Chain Campaign: Update 002 – Telnyx PyPI Compromise, Vect Ransomware Mass Affiliate Program, and First Named Victim Claim, (Fri, Mar 27th)
    — SANS ISC
    
    This is the second update to the TeamPCP supply chain campaign threat intelligence report, "When the Security Scanner Became the Weapon" (v3…
12. Infrastructure Attacks With Physical Consequences Down 25%
    — Dark Reading
    
    Operational technology (OT) at industrial and critical infrastructure sites seem to have been benefitting from a lull in ransomware, and hac…

Generated by CryptXNet.ai Threat Intelligence Platform · March 30, 2026 · Sources: The Hacker News, Bleeping Computer, Krebs on Security, Dark Reading, SANS ISC, THN Threat Intel, Unit 42, Security.com