Daily Security Briefing #202

March 23, 2026 | Read Online

Critical vulnerabilities exposed, AI security concerns, and widespread IIS deployment risks…

Executive Summary

The cybersecurity landscape is witnessing a surge in critical vulnerabilities, with Citrix’s NetScaler ADC and Gateway products being the latest to be hit. Meanwhile, researchers have identified over 511,000 End-of-Life Microsoft Internet Information Services (IIS) instances exposed online, posing significant security risks. Additionally, AI security concerns are growing as attackers exploit trust mechanisms to poison AI training data. Furthermore, North Korean hackers have been attributed to a malware family distributed via malicious Visual Studio Code projects.

Top Articles

M-Trends 2026: Data, Insights, and Strategies From the Frontlines Google Threat Intelligence Group and partners took action against UNC2814, a PRC-nexus cyber espionage group targeting international governments and telecommunications organizations. The campaign, tracked since 2017, disrupted dozens of nations across four continents. Google Cloud Blog

CVE-2026-3055: Citrix NetScaler ADC and NetScaler Gateway Out-of-Bounds Read A critical vulnerability affecting Citrix’s NetScaler ADC and NetScaler Gateway products allows unauthenticated remote attackers to leak potentially sensitive information from the appliance’s memory. The CVSS score is 9.3, making it a high-priority fix. Rapid7

Microsoft Xbox One Hacked A decade after its release, the Microsoft Xbox One has been hacked using voltage glitching techniques. This impressive feat highlights the importance of security in even seemingly secure systems. Schneier

Check Point at RSAC – How We’re Helping Our Customers Secure their AI Transformation Enterprise organizations are rapidly adopting AI tools, but this transformation brings new security challenges. Check Point’s blueprint architecture for securing AI data centers is unveiled to help businesses manage new intrusion techniques and compliance risks. Checkpoint Blog

You Built the Brain. Now Protect It. Check Point’s blueprint architecture for securing AI data centers is designed to help businesses scale AI and transform infrastructure into a revenue-generating advantage while minimizing risk. Checkpoint Blog

511,000+ End-of-Life IIS Instances Found Online, Raising Security Risks Over 511,000 internet-facing Microsoft Internet Information Services (IIS) instances are currently running versions that have reached end-of-life (EOL), exposing organizations to serious cyber threats. GBHackers

CISA Warns of Craft CMS Code Injection Flaw Exploited in Active Attacks The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability affecting Craft CMS to its Known Exploited Vulnerabilities (KEV) catalog. Organizations utilizing this content management system are urged to apply mitigations immediately. GBHackers

North Korean Hackers Abuse VS Code Auto-Run Tasks to Deploy StoatWaffle Malware North Korean hackers have been attributed to a malware family distributed via malicious Microsoft Visual Studio Code (VS Code) projects, using “tasks.json” to distribute malware. The Hacker News

Over 511,000 End-of-Life Microsoft IIS Servers Exposed Online Security researchers have uncovered a massive global security risk involving outdated Microsoft Internet Information Services (IIS) servers. Over 511,000 internet-facing IIS instances are currently running versions that have reached end-of-life (EOL). CyberPress

Hackers Exploit Quest KACE SMA Flaw to Steal Credentials Hackers are actively exploiting a critical vulnerability in Quest KACE Systems Management Appliance (SMA) to gain unauthorized access, harvest credentials, and move laterally across enterprise networks. CyberPress

‘CanisterWorm’ Springs Wiper Attack Targeting Iran A financially motivated data theft and extortion group is attempting to inject itself into the Iran war, unleashing a worm that spreads through poorly secured cloud services and wipes data on infected systems. Krebs on Security

AI Transparency: This newsletter uses AI to curate, rank, and summarize cybersecurity content from leading industry blogs. All articles link directly to original authors. Executive summaries are AI-generated based on article content. I curate the sources and deliver the digest—the original authors deserve the credit for their excellent work.