Daily Threat Briefing — Mar 12, 2026

📰 Cybersecurity News Headlines

Top stories from leading cybersecurity publications as of March 12, 2026.

1. INC Ransomware Group Holds Healthcare Hostage in Oceania
   — Dark Reading
   
   Government agencies, emergency clinics, and others in Australia, New Zealand, and Tonga have had serious run-ins with the prolific ransomwar…
2. Xygeni GitHub Action Compromised Via Tag Poison
   — Dark Reading
   
   Attackers operated an active C2 implant for up to a week and compromised AppSec vendor Xygeni's xygeni/xygeni-action in that time.
3. WhatsApp introduces parent-managed accounts for pre-teens
   — Bleeping Computer
   
   WhatsApp has begun rolling out parent-managed accounts for pre-teens, allowing parents and guardians to decide who can contact them and whic…
4. SQLi flaw in Elementor Ally plugin impacts 250k+ WordPress sites
   — Bleeping Computer
   
   An SQL injection vulnerability in Ally, a WordPress plugin from Elementor for web accessibility and usability with more than 400,000 install…
5. CISA orders feds to patch n8n RCE flaw exploited in attacks
   — Bleeping Computer
   
   The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered government agencies on Wednesday to patch their systems against an …
6. Researchers Trick Perplexity's Comet AI Browser Into Phishing Scam in Under Four Minutes
   — The Hacker News
   
   Agentic web browsers that leverage artificial intelligence (AI) capabilities to autonomously execute actions across multiple websites on beh…
7. Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker
   — Krebs on Security
   
   A hacktivist group with links to Iran's intelligence agencies is claiming responsibility for a data-wiping attack against Stryker, a global …
8. Critical n8n Flaws Allow Remote Code Execution and Exposure of Stored Credentials
   — The Hacker News
   
   Cybersecurity researchers have disclosed details of two now-patched security flaws in the n8n workflow automation platform, including two cr…
9. Chinese Nexus Actors Shift Focus to Qatar Amid Iranian Conflict
   — Dark Reading
   
   Two attacks on Qatari entities signal a shift in focus for China-backed actors and demonstrate how quickly they can pivot in response to geo…
10. Meta Disables 150K Accounts Linked to Southeast Asia Scam Centers in Global Crackdown
    — The Hacker News
    
    Meta on Wednesday said it disabled over 150,000 accounts associated with scam centers in Southeast Asia as part of a coordinated effort in p…
11. Analyzing "Zombie Zip" Files (CVE-2026-0866), (Wed, Mar 11th)
    — SANS ISC
    
    A new vulnerability (CVE-2026-0866) has been published: Zombie Zip.
12. ISC Stormcast For Wednesday, March 11th, 2026 https://isc.sans.edu/podcastdetail/9844, (Wed, Mar 11th)
    — SANS ISC
    
    (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Generated by CryptXNet.ai Threat Intelligence Platform · March 12, 2026 · Sources: The Hacker News, Bleeping Computer, Krebs on Security, Dark Reading, SANS ISC, THN Threat Intel, Unit 42, Security.com