BuzzSec

Salesforce has warned of an increase in threat actor activity that's aimed at exploiting misconfigurations in publicly accessible Experience Cloud sites by making use of a customized version of an open-source tool called AuraInspector. The activity, per the company, involves the exploitation of customers' overly permissive Experience Cloud guest user configurations to obtain access to sensitive from The Hacker News https://thehackernews.com/2026/03/threat-actors-mass-scan-salesforce.html

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerability list is as follows - CVE-2021-22054 (CVSS score: 7.5) - A server-side request forgery (SSRF) vulnerability in Omnissa Workspace One UEM (formerly VMware Workspace One UEM) that from The Hacker News https://thehackernews.com/2026/03/cisa-flags-solarwinds-ivanti-and.html

As I wrote in my recent book, How AI and Quantum Impacts Cyber Threats and Defenses , as we humans use AI more and more, AI will begin to communicate with itself using new AI-only communication methods that humans cannot easily see or read. from Human Risk Management Blog https://blog.knowbe4.com/ai-to-ai-communication-and-secret-ai-code-must-be-stopped-at-all-costs

The North Korean threat actor known as UNC4899 is suspected to be behind a sophisticated cloud compromise campaign targeting a cryptocurrency organization in 2025 to steal millions of dollars in cryptocurrency. The activity has been attributed with moderate confidence to the state-sponsored adversary, which is also tracked under the cryptonyms Jade Sleet, PUKCHONG, Slow Pisces, and from The Hacker News https://thehackernews.com/2026/03/unc4899-used-airdrop-file-transfer-and.html

from Human Risk Management Blog https://blog.knowbe4.com/your-knowbe4-fresh-compliance-plus-content-updates-february-2026

Mid-market organizations are constantly striving to achieve security levels on a par with their enterprise peers. With heightened awareness of supply chain attacks, your customers and business partners are defining the security level you must meet. What if you could be the enabler for your organization to remain competitive — and help win business — by easily demonstrating that you meet these from The Hacker News https://thehackernews.com/2026/03/can-security-platform-finally-deliver.html