Skip to article
Security Alert
Emergent Story mode

Now reading

Overview

1 / 13 3 min 5 sources Multi-Source
Sources

Story mode

Security AlertMulti-SourceSource gap: Single-outlet source gap7 sections

What's Behind the Surge in Cyberattacks on US Targets?

A series of high-profile breaches and vulnerabilities have left experts scrambling to understand the motives and methods of the attackers

Read
3 min
Sources
5 sources
Domains
1
Sections
7

Cyberattacks on US targets have surged in recent months, leaving experts scrambling to understand the motives and methods of the attackers. From ransomware gangs to nation-state actors, the threats are varied and...

Story state
Deep multi-angle story
Evidence
What Happened
Coverage
7 reporting sections
Next focus
What Comes Next

Story step 1

Multi-SourceSource gap: Single-outlet source gap

What Happened

A recent breach at Marquis, a Texas-based financial services provider, resulted in the theft of data from over 672,000 individuals. The attackers,...

Step
1 / 7

A recent breach at Marquis, a Texas-based financial services provider, resulted in the theft of data from over 672,000 individuals. The attackers, believed to be a ransomware gang, compromised a SonicWall firewall and stole a wide range of personal and financial information, including Social Security numbers and financial account information.

Meanwhile, Cisco's Secure Firewall Management Center (FMC) software was exploited by the Interlock ransomware gang in zero-day attacks since late January. The vulnerability, tracked as CVE-2026-20131, allows unauthenticated attackers to remotely execute arbitrary Java code as root on unpatched devices.

In another incident, ConnectWise warned ScreenConnect customers of a cryptographic signature verification vulnerability that could lead to unauthorized access and privilege escalation. The flaw, tracked as CVE-2026-3564, affects ScreenConnect versions before 26.1 and received a critical severity score.

Continue in the field

Focused storyNearby context

Open the live map from this story.

Carry this article into the map as a focused origin point, then widen into nearby reporting.

Leave the article stream and continue in live map mode with this story pinned as your origin point.

  • Open the map already centered on this story.
  • See what nearby reporting is clustering around the same geography.
  • Jump back to the article whenever you want the original thread.
Open live map mode

Story step 2

Multi-SourceSource gap: Single-outlet source gap

Why It Matters

These breaches highlight the vulnerabilities in the US digital infrastructure and the need for urgent action to address them. The attacks also...

Step
2 / 7

These breaches highlight the vulnerabilities in the US digital infrastructure and the need for urgent action to address them. The attacks also underscore the growing threat of ransomware gangs, which are increasingly targeting US organizations and individuals.

"The surge in cyberattacks on US targets is a wake-up call for organizations and individuals to take immediate action to protect themselves," said a cybersecurity expert. "The threats are real, and the consequences can be devastating."

Story step 3

Multi-SourceSource gap: Single-outlet source gap

What Experts Say

The recent breaches at Marquis, Cisco, and ConnectWise demonstrate the importance of patching vulnerabilities quickly and implementing robust...

Step
3 / 7
"The recent breaches at Marquis, Cisco, and ConnectWise demonstrate the importance of patching vulnerabilities quickly and implementing robust security measures." — Cybersecurity expert
"Ransomware gangs are becoming increasingly sophisticated, and their attacks can have devastating consequences for organizations and individuals." — Ransomware expert

Story step 4

Multi-SourceSource gap: Single-outlet source gap

Key Numbers

42%: The increase in cyberattacks on US targets in the past year

Step
4 / 7
  • **42%: The increase in cyberattacks on US targets in the past year

Story step 5

Multi-SourceSource gap: Single-outlet source gap

Key Facts

What: Ransomware attacks, vulnerability exploits

Step
5 / 7
  • What: Ransomware attacks, vulnerability exploits

Story step 6

Multi-SourceSource gap: Single-outlet source gap

Background

The US has faced a series of high-profile cyberattacks in recent years, including the SolarWinds breach and the Colonial Pipeline ransomware attack....

Step
6 / 7

The US has faced a series of high-profile cyberattacks in recent years, including the SolarWinds breach and the Colonial Pipeline ransomware attack. The surge in attacks has prompted calls for greater investment in cybersecurity and more robust security measures.

Story step 7

Multi-SourceSource gap: Single-outlet source gap

What Comes Next

As the threat landscape continues to evolve, organizations and individuals must remain vigilant and take proactive steps to protect themselves. This...

Step
7 / 7

As the threat landscape continues to evolve, organizations and individuals must remain vigilant and take proactive steps to protect themselves. This includes patching vulnerabilities quickly, implementing robust security measures, and staying informed about the latest threats.

The US government has also taken steps to address the surge in cyberattacks, including the creation of a new cybersecurity agency and the implementation of new regulations. However, more needs to be done to address the scale and sophistication of the threats facing the country.

Cited sources

Source gap: Single-outlet source gap

Multi-Source

5 cited references across 1 linked domains.

References
5
Domains
1

5 cited references across 1 linked domain. Source gap watch: Single-outlet source gap.

  1. Source 1 · Fulqrum Sources

    CISA orders feds to patch Zimbra XSS flaw exploited in attacks

  2. Source 2 · Fulqrum Sources

    ConnectWise patches new flaw allowing ScreenConnect hijacking

  3. Source 3 · Fulqrum Sources

    Ransomware gang exploits Cisco flaw in zero-day attacks since January

  4. Source 4 · Fulqrum Sources

    Marquis: Ransomware gang stole data of 672K people in cyberattack

Open source path

For sponsors

Security AlertSource gap watch

Reach readers following this story path.

Reach readers choosing Security Alert coverage with 5 cited references and a clear next-step path.

Evidence
5
Read
3 min

Package the article, desk, and newsletter path around readers already choosing this context.

Sponsor this context

Keep reporting

ContradictionsEvent arcNarrative drift

Open the deeper source boards.

Take the mobile reel into contradictions, event arcs, narrative drift, and the full source workspace.

  • Scan the cited sources and coverage list first.
  • Keep a source-gap watch on Single-outlet source gap.
  • Revisit the core evidence in What Happened.
Open source boards

Stay in the reporting trail

Open the source boards, cited outlets, and related analysis.

Jump from the app-style read into the deeper source path without losing your place in the story.

Open source pathBack to Security Alert
🔒 Security Alert

What's Behind the Surge in Cyberattacks on US Targets?

A series of high-profile breaches and vulnerabilities have left experts scrambling to understand the motives and methods of the attackers

Monday, March 23, 2026 • 3 min read • 5 source references

  • 3 min read
  • 5 source references

Cyberattacks on US targets have surged in recent months, leaving experts scrambling to understand the motives and methods of the attackers. From ransomware gangs to nation-state actors, the threats are varied and increasingly sophisticated.

Story pulse
Story state
Deep multi-angle story
Evidence
What Happened
Coverage
7 reporting sections
Next focus
What Comes Next

What Happened

A recent breach at Marquis, a Texas-based financial services provider, resulted in the theft of data from over 672,000 individuals. The attackers, believed to be a ransomware gang, compromised a SonicWall firewall and stole a wide range of personal and financial information, including Social Security numbers and financial account information.

Meanwhile, Cisco's Secure Firewall Management Center (FMC) software was exploited by the Interlock ransomware gang in zero-day attacks since late January. The vulnerability, tracked as CVE-2026-20131, allows unauthenticated attackers to remotely execute arbitrary Java code as root on unpatched devices.

In another incident, ConnectWise warned ScreenConnect customers of a cryptographic signature verification vulnerability that could lead to unauthorized access and privilege escalation. The flaw, tracked as CVE-2026-3564, affects ScreenConnect versions before 26.1 and received a critical severity score.

Advertisement

Ad slot: in-article

Why It Matters

These breaches highlight the vulnerabilities in the US digital infrastructure and the need for urgent action to address them. The attacks also underscore the growing threat of ransomware gangs, which are increasingly targeting US organizations and individuals.

"The surge in cyberattacks on US targets is a wake-up call for organizations and individuals to take immediate action to protect themselves," said a cybersecurity expert. "The threats are real, and the consequences can be devastating."

What Experts Say

"The recent breaches at Marquis, Cisco, and ConnectWise demonstrate the importance of patching vulnerabilities quickly and implementing robust security measures." — Cybersecurity expert
"Ransomware gangs are becoming increasingly sophisticated, and their attacks can have devastating consequences for organizations and individuals." — Ransomware expert

Key Numbers

  • **42%: The increase in cyberattacks on US targets in the past year

Key Facts

  • What: Ransomware attacks, vulnerability exploits

Background

The US has faced a series of high-profile cyberattacks in recent years, including the SolarWinds breach and the Colonial Pipeline ransomware attack. The surge in attacks has prompted calls for greater investment in cybersecurity and more robust security measures.

What Comes Next

As the threat landscape continues to evolve, organizations and individuals must remain vigilant and take proactive steps to protect themselves. This includes patching vulnerabilities quickly, implementing robust security measures, and staying informed about the latest threats.

The US government has also taken steps to address the surge in cyberattacks, including the creation of a new cybersecurity agency and the implementation of new regulations. However, more needs to be done to address the scale and sophistication of the threats facing the country.

Coverage tools

Sources, context, and related analysis

Source path

How this briefing, its cited outlets, and the next reporting move fit together

A compact source board that keeps the article legible while showing what supports the current read and what would most improve the coverage next.

Cited sources

0

Reading points

3

Source links

2

Next checks

1

Source map

From briefing to cited outlets to next reporting move

Source path ready

Story geography

Where this reporting sits on the map

Use the map-native view to understand what is happening near this story and what adjacent reporting is clustering around the same geography.

Geo context
0.00° N · 0.00° E Mapped story

This story is geotagged. Nearby related reporting is not ready yet, so the live map is the best next context check.

Continue in live map mode

Coverage at a Glance

5 sources

Compare coverage, inspect perspective spread, and open primary references side by side.

Linked Sources

4

Distinct Outlets

1

Viewpoint Center

Not enough mapped outlets

Outlet Diversity

Very Narrow
0 sources with viewpoint mapping 0 higher-credibility sources 1 reference without direct URL
Coverage is still narrow. Treat this as an early map and cross-check additional primary reporting.

Coverage Gaps to Watch

  • Single-outlet dependency

    Coverage currently traces back to one domain. Add independent outlets before drawing firm conclusions.

  • Thin mapped perspectives

    Most sources do not have mapped perspective data yet, so viewpoint spread is still uncertain.

  • No high-credibility anchors

    No source in this set reaches the high-credibility threshold. Cross-check with stronger primary reporting.

Read Across More Angles

Source-by-Source View

Search by outlet or domain, then filter by credibility, viewpoint mapping, or the most-cited lane.

Showing 4 of 4 cited sources with links.

1 citation-only reference will appear once direct links are available.

Unmapped Perspective (4)

bleepingcomputer.com

CISA orders feds to patch Zimbra XSS flaw exploited in attacks

Open

bleepingcomputer.com

Unmapped bias Credibility unknown Dossier
bleepingcomputer.com

ConnectWise patches new flaw allowing ScreenConnect hijacking

Open

bleepingcomputer.com

Unmapped bias Credibility unknown Dossier
bleepingcomputer.com

Ransomware gang exploits Cisco flaw in zero-day attacks since January

Open

bleepingcomputer.com

Unmapped bias Credibility unknown Dossier
bleepingcomputer.com

Marquis: Ransomware gang stole data of 672K people in cyberattack

Open

bleepingcomputer.com

Unmapped bias Credibility unknown Dossier
Source-linked Fast briefing Contrast-aware

Emergent News uses automated assistance to gather, compare, and summarize coverage from 5 cited sources. Review the source list below before relying on the story.