Attackers have been exploiting CVE-2026-20131 since January, gaining root access to Cisco Firepower Management Center appliances. The zero-day allows unauthenticated remote code execution through a crafted HTTP request to the web interface.
A coordinated supply-chain campaign has compromised over 400 code repositories across GitHub, npm, and the Open VSX marketplace. The GlassWorm malware uses stolen tokens to force-push malicious code into trusted Python and JavaScript packages.
Aura confirms data breach exposing 900,000 marketing contacts
Telus Digital confirms breach after hacker claims 1 petabyte theft
Starbucks data breach impacts hundreds of employees
Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker
Poland's nuclear research centre targeted by cyberattack
MediSecure Network Exposes 14M Patient Records
UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access
Critical Unpatched Telnetd Flaw Enables Unauthenticated Root RCE
Google Fixes Two Chrome Zero-Days Exploited in the Wild
QNAP Patches Four Vulnerabilities Exploited at Pwn2Own
Apple Fixes WebKit Vulnerability Enabling Same-Origin Policy Bypass
ConnectWise patches flaw allowing ScreenConnect hijacking
SQLi flaw in Elementor Ally plugin impacts 250k+ WordPress sites
CISA Flags Actively Exploited n8n RCE Bug — 24,700 Instances Exposed
Veeam warns of critical flaws exposing backup servers to RCE
New 'Perseus' Android malware checks user notes for secrets
GlassWorm Malware Evolves to Hide in Dependencies
New 'Zombie ZIP' technique lets malware slip past security tools
FBI seeks victims of Steam games used to spread malware
APT41 Resurfaces With Novel Framework Targeting Defense Contractors
Marquis: Ransomware gang stole data of 672K people
AI-generated Slopoly malware used in Interlock ransomware attack
AiLock Claims England Hockey Data Breach, Investigation Launched
VoltZite Targets Power Grid Operators Across North America
Autonomous Offensive Security Firm XBOW Raises $120M at $1B+ Valuation
New font-rendering trick hides malicious commands from AI tools
Betterleaks: open-source secrets scanner to replace Gitleaks
Nuclei v3.4 Released: 2,400 New Templates Including Cloud and AI
Mar 23, 2026 — 5 min
Cisco zero-day under active exploit, GlassWorm supply chain spreads, and Google patches two Chrome zero-days.