IT-Sentinel

> TODAY'S SUMMARY (54 articles)

Today's cybersecurity news highlights several key threats and trends. Vanderbilt University has experienced a ransomware attack, reportedly by the BYOD group, compromising sensitive data. The Russian state-sponsored Turla group is utilizing a new malware toolset named "Cereal" to infiltrate Microsoft Exchange servers of government entities in Kazakhstan and Romania, showcasing escalating cyber-espionage tactics. Google has issued its eighth zero-day patch for Chrome this year, addressing a vulnerability actively exploited in the wild. Meanwhile, Apple and SAP have released important security updates to fix critical flaws in their software. Finally, spyware attacks are increasingly targeting a broader range of individuals, emphasizing the need for enhanced vigilance and protection measures.

// AI-powered summary generated at 12:00

> Meta rolls out anti-scam tools across WhatsApp, Facebook, and Messenger

[SOURCE] Malwarebytes [LANGUAGE: EN] [DATE: 2026-03-12 09:56]

New AI-powered protections aim to detect impersonation attempts, suspicious friend requests, and scam messages.

> Critical N8n Vulnerabilities Allowed Server Takeover

[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2026-03-12 09:54]

The bugs allowed unauthenticated attackers to execute arbitrary code, steal credentials, and take over servers. The post Critical N8n Vulnerabilities Allowed Server Takeover appeared first on SecurityWeek.

> AI Governance Guide: Principles & Frameworks

[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2026-03-12 09:47]

Learn what AI governance is, core principles, and how to build an AI governance framework that manages risk, identity, SaaS access, and continuous oversight. The post AI Governance Guide: Principles & Frameworks appeared first on Security Boulevard.

> Polyfill Supply Chain Attack Impacting 100k Sites Linked to North Korea

[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2026-03-12 09:40]

The 2024 incident was initially linked to China, but an infostealer infection has now revealed North Korean involvement. The post Polyfill Supply Chain Attack Impacting 100k Sites Linked to North Korea appeared first on SecurityWeek.

> Factors That Complicate Pricing When Using Microsoft Intune for Authentication

[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2026-03-12 09:33]

Learn how BYOD policies complicate Microsoft Intune authentication pricing, including Entra ID, Conditional Access, and additional security costs. The post Factors That Complicate Pricing When Using Microsoft Intune for Authentication appeared first on Security Boulevard.

> Iran Claim Massive Cyber-Attack on MedTech Firm Stryker

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2026-03-12 09:30]

The pro-Iran Handala group claims to have wiped 200,000 systems in destructive wiper malware attack on US firm Stryker

> DNSSEC Validation for SSL Certificates: CA/B Forum Ballot SC-085 Changes in March 2026

[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2026-03-12 09:29]

Beginning March 2026, Certificate Authorities (CAs) must verify DNSSEC signatures during CAA evaluation and Domain Control Validation (DCV) if DNSSEC has been enabled on the domain. This change has been approved by the CA/Browser Forum through the CA/B Forum Ballot SC-085v2 (TLS) and SMC014 (S/MIME)...

> Europe’s Sovereign Search Plan is Really a Security Strategy

[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2026-03-12 09:02]

Europe’s plan to build sovereign search infrastructure highlights a growing security concern: dependence on foreign platforms for access to information and AI knowledge may represent a systemic vulnerability. The post Europe’s Sovereign Search Plan is Really a Security Strategy appeared first on Se...

> North Korean fake IT worker tradecraft exposed

[SOURCE] CSO Online [LANGUAGE: EN] [DATE: 2026-03-12 09:00]

Research from GitLab has exposed the latest tradecraft behind North Korean fake IT worker scams. GitLab banned 131 North Korean-attributed accounts last year, most of which involved JavaScript repositories that acted as resources in the so-called Contagious Interview campai...

> ENISA Technical Advisory on Secure Package Managers: Essential DevSecOps Guidance

[SOURCE] Security Affairs [LANGUAGE: EN] [DATE: 2026-03-12 08:49]

ENISA’s first Technical Advisory on Secure Package Managers helps developers safely use third-party packages. ENISA has released its first Technical Advisory on Package Managers, focusing on how developers can safely consume third-party packages. The document (March 2026, v1.1) follows public feedba...

> U.S. CISA adds a flaw in n8n to its Known Exploited Vulnerabilities catalog

[SOURCE] Security Affairs [LANGUAGE: EN] [DATE: 2026-03-12 08:46]

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in n8n to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an n8n flaw, tracked as CVE-2025-68613 (CVSS score of 10.0), to its Known Exploited Vulnerabiliti...

> Codoxo’s Deepfake Detection identifies AI-generated medical records for health plans

[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-03-12 08:21]

Codoxo has announced the launch of Deepfake Detection, an AI-driven fraud detection tool now being deployed by health plans across the U.S. The solution helps identify AI-generated or manipulated medical documentation and diagnostic images submitted in support of claims before payment is made. Healt...

> CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url