Cybersecurity briefing, 2026-03-09

• UAT-8616 activity affects Cisco Catalyst SD-WAN Controller
• Typosquatted phishing campaign harvests AWS console credentials
• Debian fixes 34 ImageMagick flaws in Trixie update
• White House orders Victim Restoration Program to reimburse fraud victims
• EU court adviser: banks must immediately refund phishing victims
• Phishers use .arpa IPv6 reverse DNS to evade email defenses

Recent editions

• Sunday, March 8, 2026: OpenAI agent finds 792 critical and 10,561 high-severity flaws · 5 stories
• Saturday, March 7, 2026: Iran-linked cyberattacks surge after US‑Israel operation Epic Fury · 10 stories
• Friday, March 6, 2026: Zero-day exploits hit enterprise devices in 2025 · 10 stories
• Thursday, March 5, 2026: CISA adds VMware Aria Operations flaw to KEV · 10 stories
• Wednesday, March 4, 2026: Actively exploited Qualcomm zero‑day hits Android chipsets · 10 stories
• Tuesday, March 3, 2026: Iran-linked cyberattacks surge after US‑Israel Operation Epic Fury · 10 stories
• Monday, March 2, 2026: Cisco SD‑WAN controllers targeted by long‑running zero‑day exploit · 5 stories