New ‘BlackSanta’ EDR killer spotted targeting HR departments

Multiple high-impact security developments: a Russian-speaking actor used malware targeting HR teams to deliver a new EDR-killer called BlackSanta; a new Android banker, BeatBanker, impersonates a Starlink app via fake Play Store sites to hijack devices; the ‘Zombie ZIP’ compression technique evades AV/EDR by concealing payloads; KadNap botnet is hijacking ASUS routers to build a proxy network. Microsoft’s March 2026 Patch Tuesday fixes 79 flaws (including two zero-days) and published multiple Windows updates/ESUs (KB5078885, KB5079473, KB5078883). HPE patched critical Aruba AOS-CX flaws that,