BuzzSec

Cybersecurity researchers are calling attention to a new campaign where threat actors are abusing FortiGate Next-Generation Firewall (NGFW) appliances as entry points to breach victim networks.  The activity involves the exploitation of recently disclosed security vulnerabilities or weak credentials to extract configuration files containing service account credentials and network topology from The Hacker News https://thehackernews.com/2026/03/fortigate-devices-exploited-to-breach.html

from Human Risk Management Blog https://blog.knowbe4.com/cyberheistnews-vol-16-10-how-to-spot-a-phishing-website-before-it-steals-your-data

Cybersecurity researchers have disclosed nine cross-tenant vulnerabilities in Google Looker Studio that could have permitted attackers to run arbitrary SQL queries on victims' databases and exfiltrate sensitive data within organizations' Google Cloud environments. The shortcomings have been collectively named LeakyLooker by Tenable. There is no evidence that the vulnerabilities were exploited in from The Hacker News https://thehackernews.com/2026/03/new-leakylooker-flaws-in-google-looker.html

Security awareness programs are built on measurement. Before you can reduce human risk, you need a clear understanding of where knowledge gaps exist across your workforce. For many organizations, that process starts with a baseline assessment. from Human Risk Management Blog https://blog.knowbe4.com/announcing-the-custom-sapa-agent-security-awareness-measurement-built-for-your-environment

The Russian state-sponsored hacking group tracked as APT28 has been observed using a pair of implants dubbed BEARDSHELL and COVENANT to facilitate long‑term surveillance of Ukrainian military personnel. The two malware families have been put to use since April 2024, ESET said in a new report shared with The Hacker News. APT28, also tracked as Blue Athena, BlueDelta, Fancy Bear, Fighting Ursa, from The Hacker News https://thehackernews.com/2026/03/apt28-uses-beardshell-and-covenant.html

Countries around the world are becoming increasingly concerned about their dependencies on the US. If you’ve purchase US-made F-35 fighter jets, you are dependent on the US for software maintenance. The Dutch Defense Secretary recently said that he could jailbreak the planes to accept third-party software. from Schneier on Security https://www.schneier.com/blog/archives/2026/03/jailbreaking-the-f-35-fighter-jet.html