FBI links Signal phishing attacks to Russian intelligence services (2026-03-20 20:45 UTC)
Kurz: The FBI has issued a public service announcement warning that Russian intelligence-linked threat actors are actively targeting users of encrypted messaging apps such as Signal and WhatsApp in phishing campaigns that have already compromised…
Kurz: Oracle has released an out-of-band security update to fix a critical unauthenticated remote code execution vulnerability in Identity Manager and Web Services Manager tracked as CVE-2026-21992. […]
Kurz: Trivy, a popular open-source vulnerability scanner maintained by Aqua Security, was compromised a second time within the span of a month to deliver malware that stole sensitive CI/CD secrets. The latest incident impacted GitHub Actions “aqu…
Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure (2026-03-20 15:15 UTC)
Kurz: A critical security flaw impacting Langflow has come under active exploitation within 20 hours of public disclosure, highlighting the speed at which threat actors weaponize newly published vulnerabilities. The security defect, tracked as CV…
Google Adds 24-Hour Wait for Unverified App Sideloading to Reduce Malware and Scams (2026-03-20 10:57 UTC)
Kurz: Google on Thursday announced a new “advanced flow” for Android sideloading that requires a mandatory 24-hour wait period to install apps from unverified developers in an attempt to balance openness with safety. The new changes come against …