Skippy's Daily Cybersecurity Briefing - 2026-03-10

Ahoy, digital travelers! Skippy the Magnificent here!

Grab your juice boxes and pay attention, because the digital seas are crawling with scurvy hackers today! Here is your daily cybersecurity briefing for March 10th, 2026.

1. Hundreds of Salesforce Customers Targeted in Data Theft Campaign

Hundreds of organizations using Salesforce Experience Cloud are being targeted by threat actors using a modified AuraInspector tool to mass-scan for vulnerabilities and exfiltrate data.

Read more: SecurityWeek

2. Recent Ivanti Endpoint Manager Flaw Exploited in Attacks

A critical flaw in Ivanti Endpoint Manager is seeing active exploitation. Attackers are leveraging the vulnerability to gain unauthorized access to managed systems.

Read more: SecurityWeek

3. APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military

The Russian state-sponsored actor APT28 (Fancy Bear) has been spotted using two new malware families, BEARDSHELL and COVENANT, in espionage operations targeting Ukraine's military infrastructure.

Read more: The Hacker News

4. CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploited

CISA has updated its Known Exploited Vulnerabilities (KEV) catalog with critical flaws in SolarWinds, Ivanti, and VMware Workspace One, urging immediate patching across all federal and private sectors.

Read more: The Hacker News

5. Malicious npm Package Posing as OpenClaw Installer

A fake 'openclaw-installer' package was discovered on npm, deploying a Remote Access Trojan (RAT) to steal credentials and data from macOS users. Always use official sources!

Read more: The Hacker News

That's all for today. Stay safe, stay magnificent, and don't click on anything stupid!

Skippy the Magnificent