Latest IT News, Cybersecurity Alerts & Tech Innovations

Microsoft Pulls Windows 11 KB5079391 Update Over Install Errors
Microsoft withdrew Windows 11 preview update KB5079391 on March 30, 2026, after widespread 0x80073712 installation failures.

Fortinet FortiClient EMS Hit by Active Zero-Day Attacks
Attackers are actively exploiting CVE-2026-21643, a critical remote code execution vulnerability in Fortinet's FortiClient EMS platform.

Iran-Linked Handala Hackers Breach FBI Director's Email
Iranian hackers compromised FBI Director Kash Patel's personal email account and leaked sensitive documents online.

Smart Slider 3 Plugin Flaw Exposes 800K WordPress Sites
Critical vulnerability in Smart Slider 3 WordPress plugin allows subscriber-level users to access arbitrary server files across 800,000 websites.

Microsoft Pulls Windows 11 Preview Build Over Install Bugs
Microsoft withdrew its latest Windows 11 Insider preview update on March 29, 2026, after users reported widespread installation failures.

Iranian Hackers Breach FBI Director Kash Patel's Email
Iranian-linked Handala Hack Team successfully compromised FBI Director Kash Patel's personal email account, leaking sensitive documents online.

Infinity Stealer Targets macOS with Python-Based Payload
New Infinity Stealer malware uses Python and Nuitka compiler to steal credentials from macOS systems through sophisticated social engineering campaigns.

Infiniti Stealer Targets Mac Users via Fake Cloudflare CAPTCHA
Attackers deploy Infiniti infostealer on macOS through fake Cloudflare CAPTCHA pages using sophisticated ClickFix social engineering techniques.

CVE-2026-3055: Citrix NetScaler Critical Flaw Under Attack
Critical CVE-2026-3055 vulnerability in Citrix NetScaler ADC and Gateway faces active reconnaissance as attackers probe memory overread flaw.

Russian APT TA446 Targets iOS with DarkSword Exploit Kit
Russian state-sponsored group TA446 deploys DarkSword exploit kit in targeted email campaigns against iOS devices.

CISA Adds Critical F5 BIG-IP CVE-2025-53521 to KEV Catalog
CISA added CVE-2025-53521 affecting F5 BIG-IP Access Policy Manager to its Known Exploited Vulnerabilities catalog following confirmed active exploitation.

TeamPCP Hackers Compromise Telnyx PyPI Package
TeamPCP threat group compromised the official Telnyx Python package on PyPI, injecting credential-stealing malware hidden in WAV audio files.

Apple Pushes Lock Screen Alerts for iOS Security Updates
Apple sends urgent Lock Screen notifications to older iOS devices warning of active web-based attacks targeting outdated software.

Open VSX Registry Bug Let Malicious VS Code Extensions Bypass Security
Open VSX's pre-publish scanning pipeline contained a critical flaw that allowed malicious Visual Studio Code extensions to bypass security vetting and reach the registry.

European Commission Confirms AWS Cloud Breach Investigation
The European Commission is investigating a security breach after attackers gained unauthorized access to its Amazon Web Services cloud infrastructure.

TP-Link Patches Critical Router Flaws Enabling RCE
TP-Link released security updates fixing high-severity vulnerabilities that allow authentication bypass and remote code execution on popular router models.

Microsoft Releases KB5079391 Preview for Windows 11 24H2/25H2
Microsoft's KB5079391 preview update brings 29 improvements to Windows 11 24H2 and 25H2, including Smart App Control and display enhancements.

Dutch Police Confirm Phishing Attack Breach
The Dutch National Police disclosed a security breach from a successful phishing attack with limited impact on operations.

Android 17 Beta 3 Reaches Platform Stability
Google released Android 17 Beta 3 on March 26, 2026, marking platform stability with locked APIs for developer app submissions.

Ajax Amsterdam Confirms Data Breach Affecting Hundreds
Dutch football club Ajax Amsterdam disclosed hackers exploited IT vulnerabilities to access personal data of several hundred individuals.

CISA Warns of Active Exploits Targeting Langflow AI Framework
CISA added CVE-2026-33017 to its Known Exploited Vulnerabilities catalog after confirming active exploitation of a critical code injection flaw in Langflow.

