March 2026

Microsoft Patches 84 Flaws in March Patch Tuesday, Including Two Public Zero-Days 2026-03-11 at 12:44 By Microsoft on Tuesday released patches for a set of 84 new security vulnerabilities affecting various software components, including two that have been listed as publicly known. Of these, eight are rated Critical, and 76 are rated Important in severity.

UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours 2026-03-11 at 12:44 By A threat actor known as UNC6426 leveraged keys stolen following the supply chain compromise of the nx npm package last year to completely breach a victim’s cloud environment within a span of 72 hours. The attack started

Watchdog clears £142M Post Office subsidy for Horizon fallout and IR35 bill 2026-03-11 at 12:15 By Lindsay Clark CMA advisers say extra support justified as remediation costs and tax liability mount The UK’s competition regulator has given a conditional thumbs-up to a request for £141.8 million in subsidies to the Post Office – a publicly

Real Talk About RSAC 2026 Conference 2026-03-11 at 12:00 By Monica White It’s a week of endless lines and overpriced coffee–and I’m here for all of it This article is an excerpt from SECURITY.COM View Original Source

AI has made the Command Line Interface more important and powerful than ever before 2026-03-11 at 09:36 By Mark Pesce Google knows asking agents to navigate GUIs designed for humans is ridiculous. Microsoft might not Opinion  The command line interface is making a comeback because graphical user interfaces are a poor fit for autonomous agents,

Atlassian built a tool to migrate Jira users to the cloud and it made the move slower 2026-03-11 at 09:21 By Simon Sharwood Fixed it amid user ire, swears new tool for bigger shifts is up to the job Atlassian has admitted that the tools it developed to move Jira users into the cloud were

Oracle says AI coding tools are helping it dodge the SaaSpocalypse 2026-03-11 at 09:21 By Simon Sharwood Big Red reckons paying for datacenters is easy when you have half a trillion dollars of cloud orders on the books Oracle says AI code generation tools have become so efficient, and it is so good at using

Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets 2026-03-11 at 09:21 By Cybersecurity researchers have discovered five malicious Rust crates that masquerade as time-related utilities to transmit .env file data to the threat actors. The Rust packages, published to crates.io, are listed below – chrono_anchor dnp3times time_calibrator time_calibrators time-sync