Iran-Linked Wiper Attack Cripples Medtech Giant Stryker; ShinyHunters Breaches Telus & Aura.com

On March 15, three critical zero-day vulnerabilities (CVE-2026-4181, CVE-2026-4182, CVE-2026-4183) were disclosed for the End-of-Life D-Link DIR-816 router. These unauthenticated remote command injection flaws, each with a CVSS score of 9.3, allow attackers full control over the device. D-Link has confirmed no patches will be issued due to the product's EoL status, leaving users permanently exposed. This incident serves as a stark, real-world example of the severe risks posed by unsupported edge devices, directly validating the urgency of CISA's directive for federal agencies to remove such hardware. Immediate decommissioning and replacement are the only effective mitigations.

Costa Rican officials have publicly attributed a January 2026 cyberattack on the state-owned Instituto Costarricense de Electricidad (ICE) to the Chinese-linked threat actor UNC2814. The attack resulted in the exfiltration of 9 gigabytes of data from administrative email systems. This attribution has sparked a diplomatic dispute, with China's ambassador demanding technical evidence from Costa Rica to substantiate the claims and rejecting the 'politicization' of cybersecurity incidents. This incident highlights the ongoing impact and geopolitical fallout of UNC2814's espionage activities, adding a specific victim and a significant international dimension to the campaign.

Further analysis of the Loblaw data breach provides deeper technical insights into the incident. Potential attack vectors include exploitation of public-facing applications (T1190) or phishing (T1566). The report details cyber observables for detection, such as large outbound data transfers and suspicious database queries. Mitigation strategies emphasize network segmentation (M1030, D3-NI), Data Loss Prevention (DLP), Network Traffic Analysis (D3-NTA), User Behavior Analytics (UBA), vulnerability management, and robust access controls. The breach remains contained to non-critical systems, with no change in the types of data compromised.

The latest report on the Starbucks data breach specifies that the compromised financial information includes employees' bank account and routing numbers, which were used for payroll. This provides a more granular understanding of the sensitive data exposed. Additionally, the article notes a new filing date with the Maine Attorney General's Office on March 14, 2026, indicating a recent regulatory update regarding the incident. The number of affected employees remains 889.