CYBER INTEL — THE WANG REPORT

Sunday, March 22, 2026 at 12:51 PM GMT+8

WORM UNLEASHED: TRIVY SUPPLY CHAIN ATTACK SPREADS CANISTERWORM TO 47 NPM PACKAGES, CI/CD SECRETS DRAINED

Trivy Supply Chain Attack Triggers Self-Spreading CanisterWorm Across 47 npm Packages The Hacker News

THE WANG REPORT — CYBERSECURITY BREAKING NEWS & REGULATORY WATCH

BREACHES & ATTACKS

LANGFLOW ZERO-DAY WEAPONIZED WITHIN 20 HOURS OF DISCLOSURE The Hacker News

BAY AREA CITY DECLARES STATE OF EMERGENCY AFTER RANSOMWARE PARALYZES NETWORKS bing news

OPSEC FAIL: BEAST RANSOMWARE GANG EXPOSES OWN SERVER Dark Reading

75 TRIVY TAGS HIJACKED IN SECOND BREACH — CI/CD PIPELINE SECRETS STOLEN The Hacker News

AZURE MONITOR ALERTS WEAPONIZED FOR MICROSOFT IMPERSONATION PHISHING BleepingComputer

TRIVY SCANNER BREACHED — INFOSTEALER PUSHED VIA OFFICIAL GITHUB ACTIONS BleepingComputer

Foster City Networks Paralyzed; Emergency Declaration Imminent startpage news

Police Nuke 373,000 Dark Web Sites in Global Operation Alice BleepingComputer

REGULATORY & COMPLIANCE

CISA TO FEDS: PATCH MAX-SEVERITY CISCO FLAW BY SUNDAY OR ELSE BleepingComputer

HKMA, HKUST SEAL CYBERSECURITY RESEARCH PACT AS THREATS MOUNT bing news

CISA ADDS APPLE, CRAFT CMS, LARAVEL BUGS TO MUST-PATCH LIST The Hacker News

Brokers Must Evolve as Cyber Risk Landscape Accelerates bing news

Hotel CISO: Cyber Reckoning No Longer Postponable yahoo news

AI + CYBER

AI BOTS BYPASSING CONTROLS, STEALING SECRETS, CAUSING CHAOS bing news

YOUR AI GIRLFRIEND IS A SPY: 150 MILLION USERS AT RISK yahoo news

Behavioral Analytics Emerges as Answer to AI-Powered Cyberattacks The Hacker News

Firms Bet Big on AI Defense But Admit Returns Are Elusive bing news

RSAC 2026: AI Hype Collides With Grim Operating Reality qwant news

THREAT INTEL & TOOLS

FBI ALERT: RUSSIAN INTEL HIJACKING SIGNAL AND WHATSAPP IN MASS PHISHING BLITZ BleepingComputer

INTERLOCK GANG HAD CISCO ZERO-DAY WEEKS BEFORE THE WORLD KNEW Dark Reading

ORACLE EMERGENCY PATCH: UNAUTHENTICATED RCE THREATENS IDENTITY MANAGER BleepingComputer

GEOPOLITICAL CYBERWAR: WIPERS REPLACE RANSOMWARE AS WEAPON OF CHOICE BleepingComputer

Russian Intelligence Seizes Encrypted Messaging Accounts in Phishing Wave The Hacker News

Oracle Identity Manager Flaw Enables Unauthenticated Code Execution The Hacker News

Fusion Middleware Critical RCE: No Auth Required Dark Reading

SentinelOne, Cloudflare Expand AI-Driven Security Alliance bing news

SentinelOne-Cloudflare AI Pact Deepens Integrated Defense Push startpage news

Google Adds 'Advanced Flow' for Safer Android APK Sideloading BleepingComputer

Android to Impose 24-Hour Wait on Unverified App Installs The Hacker News