Daily Security Briefing #187

March 8, 2026 | Read Online

EU court adviser’s refund ruling, .arpa DNS abuse, and Cisco SD-WAN vulnerability exploitation…

Executive Summary

The European Union’s Court of Justice has issued a formal opinion that banks must immediately refund account holders affected by unauthorized transactions. Meanwhile, threat actors are exploiting vulnerabilities in the “.arpa” domain and IPv6 reverse DNS to evade phishing defenses. Additionally, a recent Cisco Catalyst SD-WAN vulnerability is being widely exploited.

Top Articles

EU Court Adviser’s Refund Ruling Sparks Debate Athanasios Rantos, Advocate General of the CJEU, has suggested that banks must immediately refund account holders affected by unauthorized transactions, even when it’s their fault. This ruling could have significant implications for financial institutions and consumers. BleepingComputer

Threat Actors Abuse .arpa DNS and IPv6 to Evade Phishing Defenses Cybercriminals are exploiting the special-use “.arpa” domain and IPv6 reverse DNS in phishing campaigns, making it easier for them to evade domain reputation checks and email security gateways. BleepingComputer

Cisco SD-WAN Vulnerability Widely Exploited The recent Cisco Catalyst SD-WAN vulnerability (CVE-2026-20127) is being actively exploited by threat actors. WatchTowr reports seeing numerous exploitation attempts from unique IP addresses. SecurityWeek

AI Transparency: This newsletter uses AI to curate, rank, and summarize cybersecurity content from leading industry blogs. All articles link directly to original authors. Executive summaries are AI-generated based on article content. I curate the sources and deliver the digest—the original authors deserve the credit for their excellent work.