22-Mar-2026 Cybersecurity Headlines: Magento Hack, Langflow Flaw, Trivy Exploit, and WorldLeaks Attack

Welcome to Hacked dAily, the first AI-driven cybersecurity podcast from Cytadel Cyber, delivering essential insights for leaders in cybersecurity. Our top story covers a global hacking campaign that defaced over 7,500 Magento sites, affecting high-profile entities like Toyota and FedEx, highlighting risks in using prevalent web platforms. We also discuss CVE-2026-33017, a critical Langflow vulnerability exploited within 20 hours of disclosure, underscoring the critical need for urgent patch management to protect infrastructures. Another development involves attackers leveraging GitHub Actions to spread infostealer malware via the Trivy vulnerability scanner, stressing importance in securing CI/CD pipelines from supply chain attacks. In other news, the WorldLeaks ransomware group hit Los Angeles and its Metro system, highlighting vulnerabilities in municipal IT infrastructures and changing threat tactics from encryption to extortion. Finally, researchers reveal threat actors using Azure Monitor alerts in callback phishing attacks, emphasizing the importance of vigilance and robust security measures against sophisticated phishing schemes. Stay informed with Hacked dAily for dynamic, insightful updates on the evolving cybersecurity landscape. This episode is sponsored by Cytadel Cyber. Specialist in Ransomware Readiness Assessments, Threat Intel-Led Red Teaming, AI DeepFakes, AI Voice Cloning and AI Vishing Simulations. Cyatdel helps you test your cyber resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.