French police on March 28 stopped an apparent bomb attack outside a Bank of America building in central Paris, arresting a man moments after he placed a makeshift explosive device, authorities and multiple news agencies said. The incident occurred at about 03:25–03:30 a.m. on Rue de la Boétie in the capital’s 8th arrondissement, a few streets from the Champs-Élysées. Officers detained one suspect as he was allegedly about to ignite a device comprising a five-litre container of liquid believed to be fuel and an ignition system whose ignition component initially tested at about 650 grams of explosive powder. A second person fled the scene. The national anti-terrorism prosecutor’s office (PNAT) has opened an investigation into attempted damage by fire and related terrorism offences; the Paris judicial police and domestic intelligence agency DGSI are involved and the device has been sent to the forensic lab. Police sources said the arrested man told investigators he had been recruited via Snapchat and offered about €600; his identity and any wider network remain under verification. Bank of America said it was liaising with French authorities. Interior Minister Laurent Nuñez praised the rapid intervention.

England drew 1-1 with Uruguay at Wembley on March 27-28 in a match that underlined Thomas Tuchel’s late-stage World Cup selections and growing fitness concerns. Ben White — recalled after withdrawing from England in 2022 — scored on his return but conceded a stoppage-time penalty; he was jeered by some fans and has been publicly backed by teammates. Tuchel reiterated his centre‑back pecking order, naming Ezri Konsa, Marc Guéhi, John Stones and the injured Trevoh Chalobah ahead of Harry Maguire, who still stayed in camp. Stones picked up a calf issue in training and returned to Manchester City for assessment. Arsenal trio Bukayo Saka, Declan Rice and Noni Madueke left the camp for medical checks (Madueke was seen in a knee brace after a heavy challenge). In total eight players were released ahead of Tuesday’s friendly with Japan as Tuchel trims the 35‑man group toward a final World Cup shortlist. The game also featured controversy over Manuel Ugarte receiving two yellow cards with no red; Tuchel publicly criticised officiating and VAR decisions.

Royal Challengers Bengaluru began their IPL 2026 title defence with a dominant six-wicket victory over Sunrisers Hyderabad at Bengaluru’s M. Chinnaswamy Stadium on March 28, 2026. Chasing 202, RCB reached 203 for 4 in 15.4 overs as Virat Kohli guided the run chase with an unbeaten 69 off 38 balls and Devdutt Padikkal struck 61 off 26. Debutant Jacob Duffy set the tone with 3-22 to rock SRH’s top order earlier; Ishan Kishan top-scored for Hyderabad with 80 off 38 and Aniket Verma’s late 43 off 18 boosted SRH to 201-9. The match also produced an early controversy when Heinrich Klaasen’s dismissal — a tumbling boundary catch by Phil Salt — was given out after a third-umpire review, prompting debate over boundary-cushion camera angles. The ODI-era greats and commentators lauded Kohli’s “chase master” performance. The fixture was played without a formal opening ceremony as RCB and the league paid tribute to 11 fans who died in a 2025 stampede; players wore black armbands, 11 seats remain vacant and security measures were stepped up. The game followed the franchise’s high-profile sale on March 24, 2026, to a consortium valuing RCB at about INR 16,600 crore.

On March 28, 2026, tens of thousands of demonstrators took part in the third nationwide “No Kings” day of action, with organisers reporting more than 3,000 events across all 50 states and parallel rallies in Europe, Australia and elsewhere. The movement, launched by Indivisible and allied groups last year, mobilised a mix of large city gatherings in New York, Los Angeles and Washington and a flagship rally at the Minnesota State Capitol in St. Paul — where organisers expected up to 100,000 attendees — featuring celebrities and political figures. Protesters cited grievances including a hardline immigration crackdown that led to the deaths of Renee Good and Alex Pretti, steep living costs and rising fuel prices, cuts to medical research funding, rollbacks on diversity and transgender rights, and U.S. military action in Iran. Organisers say previous “No Kings” days drew millions (estimated 4–7 million) and they aimed for even larger turnout; some put this event’s potential nationwide reach in the millions. The White House dismissed the demonstrations as “Trump Derangement Therapy,” while conservative outlets charged outside funding and ideological coordination; organisers maintain the coalition is decentralised.

Swiss food giant Nestlé said on March 28 that a truck carrying 413,793 KitKat bars — about 12 tonnes of the confectionery maker’s new range — was stolen while in transit between a production site in central Italy and a distribution hub in Poland. The vehicle and its cargo remain unaccounted for after disappearing last week, and Nestlé warned the loss could cause shortages in some European stores ahead of Easter. The company said the bars are traceable via unique on-pack batch codes and urged retailers, wholesalers and consumers to scan packs and report matches. Nestlé said investigations are ongoing alongside local authorities and supply-chain partners and cautioned that the stolen goods could be sold through unofficial channels across Europe. The firm described the incident as part of a wider rise in cargo theft and freight fraud.

Iran-linked hackers claiming the Handala Hack Team said on March 27-28, 2026 that they breached the personal Gmail account of FBI Director Kash Patel and published photographs, a resume and a sample of more than 300 emails online. The FBI confirmed it was "aware of malicious actors targeting Director Patel's personal email information," said steps had been taken to mitigate risks, and described the data as historical and not involving government systems. Independent analysis by some outlets, including TechCrunch, verified portions of the cache via message headers and cryptographic signatures; metadata shows most material dates from roughly 2010–2019 with some items to 2022. U.S. authorities say the Handala persona is tied to Iran-linked cyber units and noted the group previously claimed a destructive March attack on medical-device maker Stryker. The U.S. State Department's Rewards for Justice programme is offering up to $10 million for information leading to Handala members; U.S. law enforcement seized several Handala-linked domains on March 19. Handala also posted broader threats and bounty claims online, which have not been independently verified.