🛡️ Daily Security Brief

ChipSoft, a major Dutch healthcare software provider whose HiX platform is used by roughly 70% of hospitals in the Netherlands, was hit by ransomware on April 7. Multiple hospital-facing services were taken offline, 11 hospitals reported…

The Axios HTTP client (100M+ weekly downloads) suffered a targeted supply chain attack. Attacker compromised maintainer Jason Saayman's npm account and published malicious versions 1.14.1 and 0.30.4 injecting a fake dependency plain-cryp…

March 31, 2026 · Auto-generated at 04:00 CET · Sources: BleepingComputer, The Hacker News, SecurityWeek, CyberSecurityNews

Monday, March 30, 2026 · Sources: BleepingComputer, The Hacker News, SecurityWeek · Auto-generated at 04:25 CET

TL;DR: Iran-linked hackers breached the FBI Director's personal email and hit Stryker with a wiper. Critical CVEs in Citrix NetScaler (9.3) and F5 BIG-IP are under active exploitation. A major supply chain attack by TeamPCP compromised t…

Saturday, March 28, 2026 — 04:00 CET · Auto-generated from OSINT sources

Financial holdings company Hightower disclosed that hackers exfiltrated names, Social Security numbers, and driver's license numbers from its environment. Approximately 130,000 individuals are impacted. The breach highlights ongoing targ…

RSA Conference 2026 is underway — Day 2 announcements rolling in. Major vendor releases, new frameworks for agentic AI governance, and updated threat reports from SentinelOne, PwC, and SANS. Key takeaway: AI is both accelerating attacks…

Daily Intelligence Brief KENSAI Security Research Tuesday, March 25, 2026 — 04:00 CET 4 Data Breaches 3 Critical CVEs 3 Supply Chain Attacks 1 Ransomware Sentencing ⚡ TL;DR — What Matters Today TeamPCP supply chain rampa

The TeamPCP hacking group compromised the widely-used open-source Trivy vulnerability scanner by Aqua Security. Malicious versions (0.69.4–0.69.6) were pushed to Docker Hub containing information-stealer malware. The attack expanded beyo…

The Trivy vulnerability scanner supply chain attack by threat group TeamPCP has escalated dramatically. The attackers compromised GitHub Actions aquasecurity/trivy-action and aquasecurity/setup-trivy , hijacking 75 tags to steal CI/CD se…

2026-03-22 · Saturday March 21 → Sunday March 22 · Auto-generated at 04:00 CET

KENSAI Security Intelligence Daily Threat Briefing Automated security research — last 24 hours

Benefits administration company Navia disclosed a breach affecting nearly 2.7 million individuals. Attackers accessed sensitive personal information including benefits data, SSNs, and financial records. The company is providing credit mo…

Wednesday, March 18–19, 2026 · 14 stories across 4 sources

The GlassWorm supply-chain campaign returned with a coordinated attack injecting malware into hundreds of Python repositories, npm packages, and VSCode/OpenVSX extensions. Attackers used stolen GitHub tokens to force-push obfuscated code…

2026-03-16 · Monday · compiled at 04:00 CET

Google released emergency patches for two high-severity zero-days actively exploited in the wild. CVE-2026-3909 (CVSS 8.8) is an out-of-bounds write in the Skia 2D graphics library; CVE-2026-3910 targets the V8 JavaScript engine. Both al…

Google released emergency updates to fix two high-severity Chrome zero-days being exploited in the wild. CVE-2026-3909 is an out-of-bounds write in the Skia graphics library that can lead to code execution. CVE-2026-3910 is an inappropri…

Canadian BPO giant Telus Digital confirmed a multi-month security breach after threat actors claimed to have exfiltrated nearly 1 petabyte of data. The scale of this breach is extraordinary — one of the largest volumetric data thefts eve…

Iran-backed hacktivist group Handala (linked to MOIS/Void Manticore) claims to have wiped 200,000+ devices across Stryker's offices in 79 countries. Over 5,000 workers in Ireland sent home. Employee personal phones with Outlook were wipe…

Microsoft released fixes for 79 vulnerabilities including 2 publicly disclosed zero-day vulnerabilities . The update also addresses an issue preventing some devices from shutting down. Windows 10 extended security update KB5078885 and Wi…

Ericsson Inc. (US subsidiary) confirmed attackers stole employee and customer data after compromising one of its third-party service providers. The breach scope remains undisclosed. This is another supply-chain attack highlighting vendor…

Daily Threat Briefing — Monday, March 9, 2026 · Auto-generated at 04:00 CET

KENSAI Security Intelligence Daily Threat Briefing Sunday, March 8, 2026 — 04:00 CET 3 Critical 5 Data Breaches 13 New CVEs 2 Tool Releases 🔓 Major Data Breaches Cognizant TriZetto Breach — 3.4 Million Patient Records Ex

TL;DR: The FBI is investigating a breach of its surveillance/wiretap systems. CISA added iOS zero-days from the Coruna exploit kit to KEV. Chinese APT UAT-9244 hit South American telcos with three new implants. Iranian MuddyWater embedde…

# Security Research - March 5, 2026 **Status:** ⚠️ FAILED - Configuration Required ## Issue The 4 AM security research cron job cannot execute — `web_search` tool requires API key configuration. **Missing:** `PERPLEXITY_API_KEY` or `OPEN…

# Security Research - 2026-03-04 **Status:** ❌ FAILED - Configuration Issue ## Issue The automated security research task failed because the web_search tool requires API key configuration. **Required:** Set one of the following in Gatewa…