Trivy Hack Spreads Infostealer, Signal, WhatsApp Targeted, Oracle Patches Critical Flaw

THN Daily Updates Webinar ➞ Exposure-Driven Resilience: Automate Testing to Validate & Improve Your Security Posture Manual security testing can’t keep pace with evolving threats. This webinar reveals how automation and continuous validation strengthen your organization’s security posture, uncover blind spots in real time, and prove resilience before attackers do. Download Now Sponsored LATEST NEWS Mar 23, 2026 We Found Eight Attack Vectors Inside AWS Bedrock. Here's What Attackers Can Do with Them AWS Bedrock is Amazon's platform for building AI-powered applications. It gives developers access to foundation models and the tools to connect those models directly to enterprise data and systems. That connectivity is... Read More Microsoft Warns IRS Phishing Hits 29,000 Users, Deploys RMM Malware Microsoft has warned of fresh campaigns that are capitalizing on the upcoming tax season in the U.S. to harvest credentials and deliver malware. The email campaigns take advantage of the urgency and time-sensitive natur... Read More The CISO's Guide: From VPN Replacement to Comprehensive ZTNA Modernize secure access and eliminate lateral movement by connecting users directly to applications. Read More Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper Cybersecurity researchers have uncovered malicious artifacts distributed via Docker Hub following the Trivy supply chain attack, highlighting the widening blast radius across developer environments. The last known cle... Read More Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA Systems Threat actors are suspected to be exploiting a maximum-severity security flaw impacting Quest KACE Systems Management Appliance (SMA), according to Arctic Wolf. The cybersecurity company said it observed malicious activ... Read More Telegram's Crackdown Changed How Threat Actors Act, But Not Where They Act Telegram blocked 43M channels in 2025, but cybercrime persists as actors adapt, maintaining platform dominance and forcing continuous monitoring. Read More FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks Threat actors affiliated with Russian Intelligence Services are conducting phishing campaigns to compromise commercial messaging applications (CMAs) like WhatsApp and Signal to seize control of accounts belonging to ind... Read More Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager Oracle has released security updates to address a critical security flaw impacting Identity Manager and Web Services Manager that could be exploited to achieve remote code execution. The vulnerability, tracked as CVE-20... Read More Webinar ➞ Exposure-Driven Resilience: Automate Testing to Validate & Improve Your Security Posture Manual security testing can’t keep pace with evolving threats. This webinar reveals how automation and continuous validation strengthen your organization’s security posture, uncover blind spots in real time, and prove resilience before attackers do. Download Now Sponsored This email was sent to sikubaycom.s3cr3tz@blogger.com. You are receiving this newsletter because you opted-in to receive relevant communications from THN. To manage your email newsletter preferences, please click here. Contact THN: info@thehackernews.com Unsubscribe THN | K.P BLock, Pitampura, Delhi