Actively Exploited Zero-Days in Chrome and Cisco Firewalls Dominate a Week of Critical Patches and Policy Shifts

This week in cybersecurity saw a surge of critical incidents, led by Google patching two actively exploited zero-day vulnerabilities in Chrome, while the Interlock ransomware group was found to have exploited a Cisco firewall zero-day for over a month. Microsoft released its March Patch Tuesday, fixing 84 flaws, including two publicly disclosed bugs. In policy news, the White House unveiled a more offensive-focused national cyber strategy. Major data breaches also made headlines, with Navia exposing data of 2.7 million people and LexisNexis confirming a cloud breach. The period was marked by a clear trend of attackers leveraging zero-days for maximum impact and a continued rise in disruptive ransomware and phishing campaigns.