Microsoft's March 2026 Patch Tuesday includes fixes for 83 vulnerabilities affecting Windows, Office, SQL Server, Azure and .NET.

A new ClickFix attack variant uses fake CAPTCHA pages instructing victims to paste and execute malicious commands in Windows Terminal.

Unwitting victims are now being tricked into installing malware via Windows Terminal, but some experts say this is old news.

The Russian state-sponsored APT28 threat group is using a custom variant of the open-source Covenant post-exploitation framework for long-term espionage operations.

Your weekly cybersecurity roundup covering the latest threats, exploits, vulnerabilities, and security news you need to know.