Cybersecurity briefing, 2026-03-11

• Microsoft releases March Patch Tuesday updates
• Attackers weaponize new RCEs to compromise cloud environments
• CISA orders emergency patches for SolarWinds, Ivanti, Workspace One
• ShinyHunters exploits misconfigured Experience Cloud to harvest CRM data
• Iran-aligned actors escalate cyber attacks on US, allies
• Russian GRU APT resurfaces using cloud-based espionage toolkit
• KadNap infects 14,000+ routers to build proxy botnet
• Debian issues Netty fixes for DoS and injection flaws
• Experience Cloud guest misconfigurations expose customer data
• Typosquatted phishing campaign harvests AWS console credentials

Recent editions

• Tuesday, March 10, 2026: UAT-8616 activity affects Cisco Catalyst SD-WAN Controller · 9 stories
• Monday, March 9, 2026: Typosquatted phishing campaign harvests AWS console credentials · 6 stories
• Sunday, March 8, 2026: OpenAI agent finds 792 critical and 10,561 high-severity flaws · 5 stories
• Saturday, March 7, 2026: Iran-linked cyberattacks surge after US‑Israel operation Epic Fury · 10 stories
• Friday, March 6, 2026: Zero-day exploits hit enterprise devices in 2025 · 10 stories
• Thursday, March 5, 2026: CISA adds VMware Aria Operations flaw to KEV · 10 stories
• Wednesday, March 4, 2026: Actively exploited Qualcomm zero‑day hits Android chipsets · 10 stories