Security Signals (2/24/26-3/10/26)

A curated security digest (Feb–Mar 2026) summarizing multiple active cyber threats and research: phishing campaigns and credential-harvesting kits (AiTM, GTFire, malvertising), numerous malware families and RATs (Agent Tesla, PlugX, Moonrise, Oblivion RAT, SurxRAT, Dohdoor), ransomware developments and BYOVD techniques (Reynolds, VEN0m, LockBit), supply-chain and malicious packages (npm, NuGet, malicious Go module), APT espionage campaigns and regional activity (GRIDTIDE, MuddyWater, Charming Kitten, APT37), plus exploitation vectors and vulnerabilities (open redirects, ActiveMQ exploits). The collection highlights broad, active risks to organizations across sectors and geographies.