This edition tracks the week’s highest-impact cybersecurity and AI-security developments, selected for relevance to security, technology, and communications leaders.
This issue details a major Iranian password-spraying campaign targeting Microsoft 365 environments and sophisticated phishing attacks on GitHub and antivirus users. It also tracks significant editorial hires at The Atlantic, Wired, Euronews, and Politico.
Sources
- [Iran-Nexus M365 Password Spray Campaign in the Middle East](https://blog.checkpoint.com/research/iran-nexus-password-spray-campaign-targeting-cloud-environments-with-a-focus-on-the-middle-east)
- [Fake VS Code Security Alerts on GitHub Used to Push Malware](https://www.bleepingcomputer.com/news/security/fake-vs-code-alerts-on-github-spread-malware-to-developers)
- [Bogus Avast Website Fakes Virus Scan to Install Venom Stealer](https://www.malwarebytes.com/blog/threat-intel/2026/03/bogus-avast-website-fakes-virus-scan-installs-venom-stealer-instead)
