InfoSecBulletin Cybersecurity for mankind
Today is Microsoft’s March 2026 Patch Tuesday, featuring security updates for 84 flaws, which include 2 zero-day vulnerabilities that were publicly disclosed.
This Patch Tuesday also addresses three “Critical” vulnerabilities, 2 of which are remote code execution flaws and the other is an information disclosure flaw.
Crack 85 Accounts and Steal 2,500+ Records
8-Agent AI Framework Used to Compromise Gov’t Entities in Asia
270+ Zimbra servers compromised in continuous attacks
Singapore Approves 200MW Data-Centre Expansion Under Second Call
Chameleon SEO Poisoning
Hackers poison Bing and Google search results to deliver phishing banking pages
Mysterious AI model “Ox Alpha” with free 100 trillion tokens a day for coders
After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
The number of bugs in each vulnerability category is listed below:
46 Elevation of Privilege Vulnerabilities
2 Security Feature Bypass Vulnerabilities
18 Remote Code Execution Vulnerabilities
10 Information Disclosure Vulnerabilities
4 Denial of Service Vulnerabilities
4 Spoofing Vulnerabilities
2 zero-days and Microsoft Office flaws:
Microsoft defines a zero-day flaw as one that is known to the public or being actively used but does not have a fix yet.
The two publicly disclosed zero-days are:
CVE-2026-21262: SQL Server Elevation of Privilege Vulnerability
CVE-2026-26127: .NET Denial of Service Vulnerability
Microsoft fixed two remote code execution bugs (CVE-2026-26110 and CVE-2026-26113) in Office that can be exploited through the preview pane. Users should update the app promptly.
