New ‘BlackSanta’ EDR killer spotted targeting HR departments

A security roundup: Microsoft’s March 2026 Patch Tuesday fixes 79 flaws including two publicly disclosed zero-days and prompted an extended Windows 10 update (KB5078885) and multiple Windows 11 cumulative updates (KB5079473, KB5078883); Microsoft will also enable hotpatching by default for eligible devices. Critical product flaws and active exploitation were reported elsewhere — CISA flagged an actively exploited Ivanti Endpoint Manager vulnerability and HPE patched critical Aruba AOS-CX issues that could allow admin password resets. Multiple new malware and evasion trends were observed: a new