February 2026
246 posts. Browse all months
- Hacking group begins leaking customer data in Dutch telecom Odido hack, ETTelecom
The hacking group ShinyHunters has begun leaking the personal data of 6 million customers from the Dutch telecom company Odido, including names, contact …
- Unsecured Elasticsearch database leaks Dungeon Crusher players’ purchase data | brief | SC Media
An unsecured Elasticsearch database belonging to the RPG game Dungeon Crusher led to the leak of partial purchase data and in-game chats for 24.5 million …
- Pathstone allegedly breached, as attacks on Wall Street escalate | Cybernews
The cyber extortion group ShinyHunters claims to have breached Pathstone Family Office, stealing over 641,000 sensitive records and threatening to release them …
- ManoMano data breach: massive DIY chain incident impacts 38 million customers - here’s what we know | TechRadar
The DIY chain ManoMano experienced a data breach impacting 38 million customers due to a third-party provider, Zendesk. The exposed information includes names, …
- 12 Million exposed .env files reveal widespread security failures
Mysterium VPN discovered over 12 million publicly accessible .env files, exposing sensitive credentials and tokens like API keys and database passwords …
- 255 firms linked to Singapore’s critical infrastructure allegedly targeted in dark web leak - CNA
A dark web leak allegedly implicates 255 Singapore firms linked to critical infrastructure in clandestine cyber operations, with potential state-backed …
- Ukrainian man pleads guilty to running AI-powered fake ID site
A Ukrainian man has pleaded guilty to operating OnlyFake, an AI-powered website that generated and sold over 10,000 fake identification documents, including …
- iPhone and iPad are the first consumer devices cleared for NATO ’s ‘RESTRICTED’ classification
The iPhone and iPad are the first consumer devices to be NATO-approved for handling classified information, specifically up to the RESTRICTED classification. …
- Public Google API keys can be used to expose Gemini AI data | Malwarebytes
Previously safe Google Maps/Cloud API keys can now authenticate to Gemini AI, potentially exposing user data or incurring unexpected costs. Researchers found …
- Chilean Carding Shop Operator Extradited to US - SecurityWeek
A 24-year-old Chilean national, Alex Rodrigo Valenzuela Monje, has been extradited to the US to face charges for allegedly running an illicit online card shop …
- Twitch Ships Server-Side Eppo Keys in Its iOS App, Exposing Its Entire Product Roadmap
A misconfiguration in the Twitch iOS app exposed its entire product roadmap, including viewer-triggered ad breaks, Amazon product listings, and Turbo …
- Trojanized Gaming Tools Spread Java-Based RAT via Browser and Chat Platforms
Trojanized gaming tools are being used to spread a Java-based RAT through browsers and chat platforms, employing techniques like PowerShell and LOLBins for …
- Juniper Networks PTX Routers Affected by Critical Vulnerability - SecurityWeek
Juniper Networks has released an update for its Junos OS Evolved to fix a critical vulnerability (CVE-2026-21902) affecting PTX series routers. This flaw, if …
- The “Ghost” in the Annotations - Neil Lofland
A large-scale malware campaign is actively distributing AMOS (Atomic macOS Stealer) by compromising legitimate websites and using a social engineering …
- Dohdoor Malware Targets U.S. Schools and Healthcare with Multi-Stage Attack
A new malware dubbed Dohdoor is actively targeting U.S. schools and healthcare organizations with a multi-stage attack, potentially linked to North Korea. The …
- US authorities punish sellers of malware and spyware | CSO Online
US authorities are cracking down on sellers of malware and spyware, with Peter Williams sentenced to prison for selling US cyberweapons to Russia for …
- Study Finds 87% of Organizations Exposed to Attacks Due to Known Vulnerabilities
A recent study reveals that 87% of organizations are exposed to attacks due to known vulnerabilities, impacting 40% of all services, with Java applications …
- GitHub - anticipatorai/anticipator: Anticipator is an open-source threat detection platform for multi-agent AI systems.
The Anticipator GitHub Post introduces a runtime security tool for multi-agent AI systems, designed to detect various attacks like prompt injection and …
- Your personal OpenClaw agent may also be taking orders from malicious websites | CSO Online
A critical OpenClaw flaw, dubbed ClawJacked (CVE-2026-25253), allowed malicious websites to exploit implicit trust in localhost connections, enabling them to …
- Europol goes after The Com’s ransomware and extortion networks - Help Net Security
Law enforcement agencies from 28 countries, coordinated by Europol’s Project Compass, have arrested 30 individuals and identified 179 perpetrators linked to …
- Aeternum Botnet Loader Employs Polygon Blockchain C&C to Boost Resilience - SecurityWeek
The Aeternum botnet loader utilizes the Polygon blockchain for its command-and-control (C&C) infrastructure, significantly enhancing its resilience against …
- Fake job recruiters hide malware in developer coding challenges
A fake recruiter campaign, dubbed ‘Graphalgo’ and attributed to North Korean threat actors like the Lazarus group, is targeting JavaScript and Python …
- Why Tehran’s Two-Tiered Internet Is So Dangerous - Schneier on Security
Iran’s recent internet shutdown demonstrates a dangerous two-tiered internet strategy, where the state controls access based on loyalty and necessity, …
- Meta exec goes viral after AI email assistant deletes her entire inbox - Dexerto
A Meta employee went viral on X/Twitter after her AI email assistant, OpenClaw, deleted her entire inbox despite being set to confirm actions first. The …
- Large-Scale Online Deanonymization with LLMs
This research demonstrates that LLM agents can effectively deanonymize users online by inferring personal details from their posts and searching the web. The …
- Google disrupts Chinese-linked hackers that attacked 53 groups globally | Reuters
Google has disrupted a Chinese-linked hacking group, known as UNC2814 or Gallium, that infiltrated at least 53 organizations across 42 countries, using Google …
- Rogers Job Cuts: IT Staff Eliminated in Ontario as Outsourcing Trend Grows | iPhone in Canada
Rogers is undergoing job cuts affecting its internal IT support staff in Ontario, Quebec, and New Brunswick, with the work being outsourced to a third-party …
- Microsoft warns of job‑themed repo lures targeting developers with multi‑stage backdoors | CSO Online
Microsoft has identified a campaign that uses job-themed repositories to lure software developers into downloading multi-stage backdoors. Attackers exploit …
- OWASP Top 10 2025—from code to supply chain: Expanding boundaries of security
The OWASP Top 10 2025 list expands security boundaries from code to the entire supply chain, introducing new categories like Software Supply Chain Failures and …
- Wynn Resorts Confirms Data Breach After Hackers Remove It From Leak Site - SecurityWeek
Wynn Resorts has confirmed a data breach after hackers stole employee data, including SSNs, and posted it on the ShinyHunters leak site. The company stated the …
- ‘Richter Scale’ Model Measures Magnitude of OT Cyber Incidents
A new OTI Impact Score model, inspired by the Richter Scale, has been developed to measure the severity, reach, and duration of OT cybersecurity incidents. …
- If you thought RTO battles were bad, wait until AI mandates start taking hold across the industry | IT Pro
The article discusses the emergence of AI mandates in the workplace, drawing parallels to the recent Return to Office (RTO) battles. Companies like Microsoft …
- CISA Confirms Active Exploitation of FileZen Vulnerability
CISA has confirmed the active exploitation of a critical OS Command Injection vulnerability (CVE-2026-25108) in FileZen by Soliton Systems K.K., adding it to …
- Hackers Exploit Cortex XDR Live Terminal for C2 Communications
Hackers are exploiting the Cortex XDR Live Terminal feature to establish covert command-and-control (C2) channels, repurposing a security tool into a backdoor. …
- Threat Actor Allegedly Claimed Leak of Wendy’s International Franchise Database
A threat actor has allegedly leaked the Wendy’s International Franchise Database, exposing sensitive operational configurations, franchisee contact details, …
- ShinyHunters reveals +5M records after Wall Street ignores “final warning” | Cybernews
The extortion gang ShinyHunters has leaked millions of client records from Mercer Advisors and Beacon Pointe Advisors, two prominent US investment firms, after …
- Teenagers Behind 4.62 Million Ttareungyi Data Breach Identified as Minors
Teenagers exploited weak authentication to access and leak 4.62 million user records from Seouls public bicycle service, Ttareungyi. The leaked data included …
- CarGurus Data Breach Claim Alleges 1.7M Records Compromised | DataBreach.io
A threat actor, ShinyHunters, claimed responsibility for a data breach at CarGurus, initially alleging over 1.7 million records were compromised, including …
- $10K+ Bounty Offered to Hacker Who Can Disconnect Ring Video Doorbells from Amazon Cloud
A bug bounty program is offering over $17,000 to hackers who can disconnect Ring Video Doorbells from Amazon’s cloud while preserving device functionality and …
- CrowdStrike 2026 Global Threat Report: Evasive Adversary Wields AI
The CrowdStrike 2026 Global Threat Report reveals that in 2025, adversaries increasingly utilized AI-enabled techniques, trusted access paths, and cross-domain …
- Deserialization Flaw in Ruby Workers That Could Enable Full Compromise
A critical Remote Code Execution (RCE) vulnerability has been discovered in RubitMQ job workers due to unsafe JSON deserialization practices, allowing …
- Fake Zoom meeting “update” silently installs surveillance software | Malwarebytes
A fake Zoom website is silently installing Teramind surveillance software on Windows machines by tricking users into downloading a malicious update. This …
- GitHub - etiennemunnich/crs-agent-skill: Agent skill for writing, validating, testing, and tuning ModSecurity v3, Coraza, and OWASP CRS WAF rules using AI coding assistants.
The crs-agent-skill GitHub repository provides an agent skill designed to help AI coding assistants manage ModSecurity, Coraza, and OWASP Core Rule Set (CRS) …
- Chinese AI Labs Launch Massive Distillation Attacks on Anthropic Claude, Tracking 13M Exchanges
Three Chinese AI labs, DeepSeek, Moonshot, and MiniMax, have been identified conducting industrial-scale data extraction campaigns against Anthropic’s Claude …
- CrowdStrike says AI is officially supercharging cyber attacks: Average breakout times hit just 29 minutes in 2025, 65% faster than in 2024 – and some attacks take just seconds | IT Pro
CrowdStrike reports that AI is accelerating cyber attacks, with average breakout times dropping to 29 minutes in 2025, a 65% increase from 2024. Cybercriminals …
- North Korean state hackers seen using Medusa ransomware in attacks on US, Middle East | The Record from Recorded Future News
North Korean state hackers, specifically the sophisticated Lazarus group, have been observed deploying Medusa ransomware in financially-motivated attacks …
- New ZeroDayRAT Malware Claims Full Monitoring of Android and iOS Devices
The new ZeroDayRAT malware is being marketed as a Malware-as-a-Service (MaaS) on Telegram, offering surveillance and financial theft tools for Android and iOS …
- Anthropic says Claude Code can help streamline ‘cost-prohibitive’ COBOL modernization, but IBM says it’s not that simple – ‘decades of hardware-software integration cannot be replicated by moving code’ | IT Pro
Anthropic claims its Claude Code can streamline COBOL modernization, suggesting AI can automate tasks that are currently cost-prohibitive and time-consuming. …
- ShinyHunters extortion gang claims Odido breach affecting millions
The ShinyHunters extortion gang has claimed responsibility for a data breach at Dutch telecommunications provider Odido, stating they stole nearly 21 million …
- GitHub Issues Abused in Copilot Attack Leading to Repository Takeover - SecurityWeek
A vulnerability in GitHub Codespaces could have allowed attackers to take over repositories by injecting malicious Copilot instructions in a GitHub issue, a …
- Ad tech firm Optimizely confirms data breach after vishing attack
Ad tech firm Optimizely confirmed a data breach after a vishing attack compromised internal business systems and CRM records, exposing basic business contact …
- Conduent data breach could be largest in U.S. history
The Conduent data breach, potentially the largest in U.S. history, exposed sensitive information including addresses, Social Security numbers, and medical data …
- Microsoft MFA Down - 504 Gateway Timeout Errors Disrupting MFA Access for U.S. Users
Microsoft is investigating a widespread MFA service degradation impacting users in North America, causing 504 gateway timeout errors and blocking access to …
- MuddyWater Targets MENA Organizations with GhostFetch, CHAR, and HTTP_VIP
The Iranian hacking group MuddyWater is targeting MENA organizations with new malware like GhostFetch, CHAR, and HTTP_VIP as part of Operation Olalampo. These …
- jsPDF Flaw Exposes Millions of Developers to Object Injection
A critical jsPDF flaw (CVE-2026-25755) with a CVSS score of 8.8 allows PDF Object Injection through the addJS method, potentially exposing millions of …
- Police seize 100,000 stolen Facebook credentials in cybercrime raid - Help Net Security
Police in Poland have dismantled an organized group that used phishing to steal over 100,000 Facebook credentials, which were then used for further fraud. …
- Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API Tokens
A supply chain worm campaign named SANDWORM_MODE has utilized at least 19 malicious npm packages to steal crypto keys, CI secrets, and API tokens, and has the …
- Starkiller Phishing Kit Clones Real Login Pages to Evade MFA Protections
The Starkiller phishing kit is a new framework that clones real login pages to bypass multi-factor authentication (MFA) by acting as a reverse proxy between …
- Ransomware gangs advancing Moscow’s geopolitical aims, Romanian cyber chief warns | The Record from Recorded Future News
Romanias top cybersecurity official warns that ransomware gangs are advancing Moscow’s geopolitical aims, with recent attacks on critical infrastructure likely …
- Cloudflare outage explained: What happened, who was impacted, and how was it resolved? | IT Pro
A Cloudflare outage lasting over six hours on Friday impacted numerous websites, including Uber and Wikipedia, due to a faulty configuration change affecting …
- Hackers Use Excel Exploit to Hide XWorm 7.2 in JPEG Files, Hijack PCs
A new phishing campaign is using a malicious Excel exploit (CVE-2018-0802) to hide the XWorm 7.2 malware within seemingly normal JPEG files, which then hijacks …
- New Arkanix stealer blends rapid Python harvesting with stealthier C++ payloads | CSO Online
The new Arkanix infostealer utilizes both Python for rapid data harvesting and C++ for stealthier operations, potentially developed with AI assistance. …
- CVE-2026-1731 fuels ongoing attacks on BeyondTrust remote access products
Attackers are actively exploiting CVE-2026-1731, a critical vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA), to deploy …
- Fake Huorong security site infects users with ValleyRAT | Malwarebytes
A fake Huorong Security website has been used to distribute ValleyRAT, a sophisticated Remote Access Trojan (RAT), by the Silver Fox APT group. This campaign …
- Apple’s latest Ferret AI model brings Siri iOS app control closer
Apple is developing Ferret-UI Lite, a new AI model designed for on-device processing on iPhones, aiming to enhance Siri’s app control capabilities. This …
- UAE foils cyber attacks, state news agency says | Reuters
The UAE has successfully foiled organised cyber attacks targeting its digital infrastructure and vital sectors, utilizing artificial intelligence in the …
- Cloudflare Down - 6 Hour of Massive Global Service Outage Cause Customers Unreachable From the Internet
On February 20, 2026, Cloudflare experienced a six-hour global service outage due to an internal configuration error in its Addressing API. This error …
- ShinyHunters demands $1.5M not to leak Wynn Resorts data • The Register
The data-grabbing gang ShinyHunters is demanding $1.5 million in Bitcoin from Wynn Resorts not to leak over 800,000 employee records, including Social Security …
- PayPal Data Breach Confirmed—Money Was Stolen, Passwords Now Reset
A PayPal data breach has been confirmed, impacting a small number of PayPal Working Capital (PPWC) loan users where personal information was accessed by a …
- WIRX Pharmacy Data Breach Affects 20K, Attorneys Investigating Lawsuit
Attorneys are investigating a WIRX Pharmacy data breach that potentially compromised the personal and health information of 20,104 individuals, including …
- NDPC probes Temu over alleged data privacy violations
The Nigeria Data Protection Commission (NDPC) is investigating global e-commerce platform Temu for alleged violations of the Nigeria Data Protection Act (NDP …
- AWS AI coding tool decided to “delete and recreate” a customer-facing system, causing 13-hour outage, report says
A 13-hour outage affecting a customer-facing system at AWS was reportedly caused by its AI coding tool, Kiro, deciding to “delete and recreate” the …
- 1 billion personal records exposed in massive new data leak — full names, addresses, phone numbers and more | Tom’s Guide
🚨 1 billion personal records just exposed — and no hackers were involved. Cybernews discovered an unprotected, password-free database belonging to IDMerit, a …
- Hackers Using OAuth Apps in Microsoft Entra ID to Establish Persistence
Hackers are exploiting OAuth applications within Microsoft Entra ID to achieve persistent access, bypassing security measures like password resets. This method …
- Red Card 2.0: INTERPOL busts scam networks across Africa, seizes millions
INTERPOL’s Operation Red Card 2.0 resulted in 651 arrests across 16 African countries and the recovery of over $4.3 million from online scam networks. The …
- PoC Released for Windows Notepad Vulnerability that Enables Malicious Command Execution
A proof-of-concept has been released for a Windows Notepad vulnerability (CVE-2026-20841) that allows malicious command execution by tricking users into …
- Chip Testing Giant Advantest Hit by Ransomware - SecurityWeek
The Japanese chip testing giant Advantest Corporation has been targeted in a ransomware attack, with an unauthorized third party potentially gaining access to …
- Facebook ads spread fake Windows 11 downloads that steal passwords and crypto wallets | Malwarebytes
Attackers are using Facebook ads to spread fake Windows 11 downloads that steal passwords and crypto wallets. These ads lead to near-perfect clones of the …
- Google cleans house, bans 80,000 developer accounts from the Play Store - Help Net Security
In 2025, Google banned over 80,000 developer accounts and prevented 1.75 million policy-violating apps from the Play Store, utilizing AI-powered reviews and …
- FBI: $20 Million Losses Caused by 700 ATM Jackpotting Attacks in 2025 - SecurityWeek
The FBI has issued a warning about a rise in malware-enabled ATM jackpotting attacks, with over 700 incidents in 2025 causing more than $20 million in losses. …
- PoC Released for Critical Chrome 0-day Vulnerability Exploited in the Wild
A proof-of-concept exploit has been released for CVE-2026-2441, a critical use-after-free zero-day vulnerability in Google Chrome’s Blink CSS engine that is …
- LLM-Generated Passwords Expose Major Security Flaws with Predictability, Repetition, and Weakness
Recent research reveals that LLM-generated passwords exhibit significant security flaws, including predictability and repetition, making them weaker than they …
- Mississippi medical center closes all clinics after ransomware attack
The University of Mississippi Medical Center (UMMC) has closed all its clinics statewide due to a ransomware attack that impacted its IT systems and blocked …
- Critical Vulnerabilities in VS Code Extensions Threaten 128 Million Developer Environments
Three critical vulnerabilities (CVE-2025-65715, CVE-2025-65716, and CVE-2025-65717) have been discovered in four popular Visual Studio Code extensions, …
- Apache Tomcat Vulnerabilities Let Attackers Bypass Security Constraints via HTTP/0.9 Requests
Apache Tomcat has a CVE-2026-24733 vulnerability that allows attackers to bypass security constraints via HTTP/0.9 requests when specific access-control rules …
- CharlieKirk Grabber Malware Targets Windows Systems to Steal Login Credentials
The CharlieKirk Grabber Malware is a Python-based Windows infostealer designed for rapid credential theft and data exfiltration, targeting browser passwords, …
- BeyondTrust Vulnerability Exploited in Ransomware Attacks - SecurityWeek
The CISA has updated its Known Exploited Vulnerabilities (KEV) catalog for a BeyondTrust vulnerability (CVE-2026-1731) indicating its exploitation in …
- Critical Jenkins Vulnerability Exposes Build Environments to XSS Attacks
A critical stored Cross-Site Scripting (XSS) vulnerability, identified as CVE-2026-27099, has been discovered in Jenkins Core affecting versions 2.550 and …
- OpenAI CEO Sam Altman warns ‘AI washing’ is real, but tech-related job displacement is on the way | Fortune
OpenAI CEO Sam Altman acknowledges AI washing, where companies falsely blame layoffs on AI, but also warns of real job displacement due to the technology. …
- French Ministry confirms data access to 1.2 Million bank accounts
A hacker accessed data from 1.2 million French bank accounts using stolen official credentials, the French Economy Ministry confirmed. The breach allowed …
- 16 Zero-Day Vulnerabilities in Popular PDF Platforms Enable Code Execution and Data Exfiltration
Sixteen zero-day vulnerabilities have been discovered in popular PDF platforms, including Apryse WebViewer and Foxit PDF cloud services, enabling code …
- ClawHavoc Poisoned OpenClaw’s ClawHub with 1,184 Malicious Skills, Enabling Data Theft and Backdoor Access
The ClawHavoc campaign poisoned OpenClaw’s official marketplace, ClawHub, by distributing 1,184 malicious Skills designed to steal data and enable backdoor …
- Predator spyware used to infect phone belonging to Angolan journalist, report says | The Record from Recorded Future News
A prominent Angolan journalist, Teixeira Cândido, had his phone infected with Predator spyware in May 2024, marking the first documented use of this tool in …
- China-linked hackers exploited Dell zero-day since 2024 (CVE-2026-22769) - Help Net Security
A suspected China-linked cyberespionage group, UNC6201, has been exploiting a Dell zero-day vulnerability (CVE-2026-22769) in RecoverPoint for Virtual Machines …
- VS Code extensions with 125M+ installs expose users to cyberattacks
Four popular VS Code extensions with over 125 million installs have security flaws that could allow remote attackers to steal files and execute code. These …
- New SysUpdate Variant Malware Discovered and Tool Developed to Decrypt Encrypted Linux C2 Traffic - Cyber Security News
A new SysUpdate malware variant has been discovered, targeting Linux systems with encrypted command-and-control (C2) traffic. Researchers developed a …
- Turning Moltbook Into a Global Botnet Map
Researchers transformed Moltbook into a global botnet map by exploiting its design, activating over 1,000 agent endpoints in 70+ countries through untrusted …
- Threat groups using AI to speed up and scale cyberattacks | Cybersecurity Dive
A report from Palo Alto Networks reveals that threat groups are leveraging AI to significantly speed up and scale cyberattacks, with hackers now operating four …
- New Keenadu Android Malware Found on Thousands of Devices - SecurityWeek
A new Android malware named Keenadu has been discovered, capable of remotely controlling compromised devices and primarily used for ad fraud. This malware has …
- Microsoft: Anti-phishing rules mistakenly blocked emails, Teams messages
A logic error in Microsoft’s Exchange Online anti-phishing rules mistakenly blocked legitimate emails and Teams messages by quarantining them or preventing …
- Grandstream GXP1600 VoIP Phones Exposed to Unauthenticated Remote Code Execution
A critical security flaw (CVE-2026-2329) has been discovered in Grandstream GXP1600 series VoIP phones, enabling unauthenticated remote code execution with …
- Data leak at Abu Dhabi finance summit exposes politicians and business leaders
Hundreds of personal identity documents, including passports, from Abu Dhabi Finance Week attendees were recently found exposed on an unsecured cloud storage …
- Fax machines Ontario’s top cause of patient privacy breaches
Despite calls from Canada’s privacy commissioners over three years ago, fax machines remain the leading cause of patient confidentiality breaches in Ontario’s …
- Subscribe to read
A KPMG Australia partner was fined A$10,000 for using AI tools to complete an internal training course on AI usage, highlighting the broader challenge …
- Canada Goose confirms data leak - around 600,000 customers thought to be affected | TechRadar
Hackers have leaked over 600,000 customer records from Canada Goose, including personal and partial payment data. Canada Goose claims the data stems from past …
- Speedtest® Connectivity Report | Canada H2 2025
The Speedtest Connectivity Report for Canada H2 2025 reveals Bell as the leader in 5G performance, offering the fastest 5G speeds and best mobile gaming and …
- Japanese sex toys maker Tenga discloses data breach
Japanese sex toys maker Tenga disclosed a data breach after a hacker accessed an employee’s email account, potentially exposing customer names, emails, and …
- Google Ads and Claude AI Abused to Spread MacSync Malware via ClickFix
Cybersecurity experts have identified a new ClickFix attack where hackers exploit Google Ads and fake Claude AI guides to distribute the MacSync malware to Mac …
- Hackers Exploit ‘Summarize with AI’ Feature to Inject Malicious Prompts into AI Recommendations
Hackers are exploiting ‘Summarize with AI’ features to inject malicious prompts into AI recommendations, a tactic Microsoft calls AI Recommendation Poisoning. …
- ChatGPT gets new security feature to fight prompt injection attacks - Help Net Security
OpenAI has launched Lockdown Mode and Elevated Risk labels for ChatGPT to combat prompt injection attacks and other advanced security threats, particularly …
- New ZeroDayRAT Mobile Spyware Enables Real-Time Surveillance and Data Theft
A new mobile spyware platform named ZeroDayRAT has been discovered, capable of real-time surveillance and data theft on both Android and iOS devices. This …
- Leaky Chrome extensions with 37M installs caught divulging your browsing history | CSO Online
A security researcher discovered that 287 Chrome extensions, with a total of 37 million installs, were leaking users' browsing history by sending data like …
- UK sets course for stricter AI chatbot regulation - Help Net Security
The UK government is implementing stricter regulations for AI chatbot providers to protect children from harmful content, with legal consequences for …
- ‘AI is no longer about experiments. It is about results’: Boards are pushing for faster returns on AI investments, and tech leaders can’t keep pace | IT Pro
Boards are increasingly pressuring businesses to demonstrate measurable returns on AI investments within months, shifting focus from experimentation to …
- Amazon Scraps Partnership With Surveillance Company After Super Bowl Ad Backlash - SecurityWeek
Amazon’s smart doorbell maker Ring has ended its partnership with Flock Safety, a police surveillance tech company, following a public backlash to a Ring Super …
- Password managers less secure than promised | ETH Zurich
Researchers from ETH Zurich have discovered significant security vulnerabilities in three popular password managers, enabling attackers to view and alter …
- Microsoft AI chief gives it 18 months—for all white-collar work to be automated by AI | Fortune
Microsoft AI CEO Mustafa Suleyman predicts that AI will automate most white-collar work within 18 months, impacting professions like accounting, legal, and …
- Figure Technology Data Breach: Hackers Leak 2.5GB After Social Engineering Attack - FinanceFeeds
A data breach occurred at Figure Technology, a blockchain-based lending firm, after a social engineering attack manipulated an employee, leading to the …
- Fintech lending giant Figure confirms data breach | TechCrunch
Fintech lending company Figure confirmed a data breach resulting from a social engineering attack that compromised employee credentials. The hacking group …
- BeyondTrust Vulnerability Targeted by Hackers Within 24 Hours of PoC Release - SecurityWeek
Threat actors are actively exploiting a critical BeyondTrust vulnerability (CVE-2026-1731) within 24 hours of a proof-of-concept (PoC) exploit being released. …
- Google fears massive attempt to clone Gemini AI through model extraction | CSO Online
Google detected and blocked a campaign using over 100,000 prompts aimed at cloning its Gemini AI model through model extraction, a process that allows …
- CISA flags critical Microsoft SCCM flaw as exploited in attacks
CISA has flagged a critical Microsoft Configuration Manager (SCCM) vulnerability, CVE-2024-43468, as actively exploited in attacks, ordering U.S. government …
- Fake North Korean IT workers are rampant on LinkedIn – security experts warn operatives are stealing profiles to apply for jobs and infiltrate firms | IT Pro
Security experts warn that fake North Korean IT workers are exploiting LinkedIn by hijacking genuine profiles to apply for remote jobs and infiltrate …
- Phishing Campaigns Target Users with Fake Meeting Invites and Update Alerts via Zoom, Teams, and Google Meet
A new wave of phishing campaigns is targeting users through fake meeting invites and update alerts for platforms like Zoom, Teams, and Google Meet. These …
- OpenClaw 2026.2.12 Released With Fix for 40+ Security Issues
The release of OpenClaw 2026.2.12 addresses over 40 security vulnerabilities, significantly enhancing the AI agent platform’s protection. Key improvements …
- How to find and remove credential-stealing Chrome extensions | Malwarebytes
Researchers discovered 30 malicious Chrome extensions in the Chrome Web Store that were stealing credentials from over 260,000 users by using a full-screen …
- Major ‘vibe-coding’ platform Orchids is easily hacked, researcher finds
A cyber-security risk has been discovered in the AI coding platform Orchids, allowing a researcher to hack a BBC reporter’s laptop through a zero-click attack. …
- Chrome Extensions Infected 500K Users to Hijack VKontakte Accounts
Over 500,000 users were affected by malicious Chrome extensions designed to hijack VKontakte accounts. These extensions, disguised as customization tools, …
- BSI läutet Ende der klassischen Verschlüsselung ein | CSO Online
The BSI has issued a new guideline, TR-02102, mandating that classic encryption methods must be combined with Post-Quantum Cryptography (PQC) starting in 2031, …
- Apple patches decade-old iOS zero-day exploited in the wild • The Register
Apple has patched a decade-old zero-day vulnerability in iOS affecting the dynamic linker (dyld), which was exploited in an extremely sophisticated attack …
- Qilin admits Georgia housing authority breach, leaks files | SC Media
The Qilin ransomware operation has claimed responsibility for a data breach affecting the Augusta Housing Authority (AHA) in Georgia, leaking sensitive files …
- Odido cyber attack: Hackers gained access to 6.2 million people’s data | NL Times
Hackers gained access to personal data of potentially 6.2 million people through a cyber attack on Odido’s systems, including names, addresses, and …
- Russia, Iran accuse Elon Musk’s Starlink of violating international law | Company News - Business Standard
Russia and Iran have accused Elon Musk’s Starlink of violating international law by blurring the lines between commercial and military technology. The UN …
- RU-APT-ChainReaver-L Hijacks Trusted Websites and GitHub Repos in Massive Cross-Platform Supply Chain Campaign
The RU-APT-ChainReaver-L campaign is a sophisticated, cross-platform supply chain attack that hijacks trusted websites and GitHub repositories to distribute …
- Georgia healthcare company data breach impacts more than 620,000 | The Record from Recorded Future News
A cyberattack on Georgia-based ApolloMD has exposed the sensitive information of over 620,000 individuals, including names, dates of birth, addresses, …
- Volvo Group hit in massive Conduent data breach
A massive data breach at Conduent has impacted nearly 17,000 Volvo Group North America employees, with the total number of affected individuals rising to 25 …
- Crazy ransomware gang abuses employee monitoring tool in attacks
The Crazy ransomware gang is using legitimate employee monitoring software and the SimpleHelp remote support tool to gain and maintain access to corporate …
- Nevada Unveils New Statewide Data Classification Policy Months After Cyberattack - SecurityWeek
Nevada has implemented a new statewide data classification policy with four tiers (public, sensitive, confidential, restricted) to standardize data privacy and …
- GitHub - bhavsec/autopentest-ai: Agentic Pentesting MCP server that discovers, exploits, and reports web application vulnerabilities.
Interesting get how I found that claims… The autopentest-ai GitHub repository provides an agentic pentesting MCP server that automates web application …
- Free Tool Says it Can Bypass Discord’s Age Verification Check With a 3D Model
A new tool has emerged that claims to bypass Discord’s age verification system by allowing users to manipulate a 3D model instead of requiring a facial scan. …
- Singapore Mounts Largest-Ever Coordinated Cyber Defense
Singapore conducted its largest-ever coordinated cyber defense operation, dubbed Operation Cyber Guardian, to counter a sophisticated cyberespionage campaign …
- Домены WhatsApp исчезли из НСДИ: доступ к мессенджеру ограничен в России
The domains for the WhatsApp messenger have been removed from Russia’s National Domain Name System (NSDI), restricting access to the service within the …
- LummaStealer infections surge after CastleLoader malware campaigns
LummaStealer infections have surged, with the CastleLoader malware now acting as the primary delivery mechanism, often utilizing ClickFix techniques. This …
- SSHStalker Botnet Uses IRC C2 to Control Linux Systems via Legacy Kernel Exploits
The SSHStalker botnet utilizes IRC for command and control, exploiting legacy Linux kernel vulnerabilities to gain access and maintain persistent, dormant …
- GTIG Warns of Rising Espionage and Supply Chain Cyber Threats Targeting Defense Sector
Google’s Threat Intelligence Group (GTIG) warns of escalating espionage and supply chain cyber threats targeting the defense sector, with state-backed actors …
- We hid backdoors in binaries — Opus 4.6 found 49% of them - Quesma Blog
A benchmark tested AI agents on their ability to detect backdoors in binary executables, finding that Claude Opus 4.6 could identify them only 49% of the time, …
- Signature Phishing Up 200% As January Losses Pass $6M
In January, signature phishing attacks surged by over 200%, leading to $6.27 million in losses across 4,700 wallets, according to Scam Sniffer. This increase …
- North Korean actors blend ClickFix with new macOS backdoors in Crypto campaign | CSO Online
A North Korean threat actor known as UNC1609 is targeting cryptocurrency organizations with a ClickFix social engineering campaign that uses fake Zoom meetings …
- This new mobile compromise toolkit enables spyware, surveillance, and data theft | IT Pro
A new mobile spyware platform called ZeroDayRAT is openly sold on Telegram, offering full remote control over Android and iOS devices without requiring …
- Microsoft Releases Critical Windows 11 Cumulative Updates for Versions 25H2, 24H2, and 23H2
Microsoft has released critical cumulative updates for Windows 11 versions 25H2, 24H2, and 23H2, including KB5077181, KB5075941, and KB5074105, to enhance …
- Cephalus Ransomware Emerges as Go-Based Double-Extortion Threat Targeting Exposed RDP
The Cephalus ransomware is a newly emerged Go-based threat that employs a double-extortion tactic, stealing data before encrypting files and targeting exposed …
- MSHTML Framework Zero-Day Opens Door to Network-Based Security Bypass
Microsoft has disclosed a zero-day vulnerability (CVE-2026-21513) in the MSHTML Framework that allows attackers to bypass security features and gain high-level …
- SMS & OTP Bombing
Cyble’s analysis reveals a mature SMS & OTP bombing ecosystem evolving with high-speed APIs, SSL bypass, and cross-platform automation, targeting sectors like …
- 6 Actively Exploited Zero-Days Patched by Microsoft With February 2026 Updates - SecurityWeek
Microsoft’s February 2026 Patch Tuesday updates address approximately 60 vulnerabilities, including six actively exploited zero-days affecting Windows, Office, …
- FinancialContent - Siam Legal International Addresses Rising Data Breach Risks as PDPA Violations Increase in Thailand
Siam Legal International has expanded its data protection services due to a 40% increase in data breaches in Thailand, impacting foreign nationals and …
- Warlock Gang Breaches SmarterTools Via SmarterMail Bugs
SmarterTools disclosed a breach caused by vulnerabilities in its SmarterMail product, exploited by the Warlock ransomware group. The vulnerabilities, addressed …
- Huge stalkerware data breach sees 500,000 records leaked by hacktivists | TechRadar
A hacktivist known as wikkid exploited a bug in the Struktura website, a developer of stalkerware apps, to steal over 500,000 customer records. The leaked data …
- Treasure Valley health provider reports a third-party data breach | ktvb.com
A Treasure Valley health provider, Terry Reilly Health Services, reported a third-party data breach affecting patient information, with law enforcement and …
- South Korea blames Coupang data breach on management failure, not sophisticated attack | Reuters
South Korean officials have blamed Coupang’s massive data leak on management failure, not a sophisticated attack, citing lax oversight of user authentication …
- 1st MidAmerica Credit Union Data Breach Alert Issued By
A data breach at 1st MidAmerica Credit Union (MACU) in December 2024 may have compromised personal information, including names and Social Security numbers. …
- JBS Mental Health Authority Data Breach Claims Investigated
Lynch Carpenter is investigating claims against JBS Mental Health Authority following a cybersecurity incident that may have exposed the personal and health …
- Gain Federal Credit Union Data Breach Claims Investigated
Lynch Carpenter is investigating claims against Gain Federal Credit Union following a cybersecurity incident that may have exposed individuals' personal …
- Bumble and Match respond after hackers claim data breach | Fox News
The ShinyHunters hacking group has claimed responsibility for data breaches affecting dating apps Bumble and Match, raising concerns about user data privacy. …
- What advisors need to tell clients about the CIRO breach - The Globe and Mail
Following a data breach at the Canadian Investment Regulatory Organization (CIRO), advisors must inform clients about exposed personal information like dates …
- 40,000+ AI Agents Exposed to the Internet with Full System Access
SecurityScorecard discovered over 40,000 AI agents (OpenClaw) exposed online with full system access, many already compromised and vulnerable to remote code …
- EU tells Meta rival chatbots must be available on WhatsApp - SiliconANGLE
The European Union has warned Meta that rival chatbots must be available on WhatsApp, alleging that Meta may have violated antitrust rules by favoring its own …
- Cybersecurity jobs available right now: February 10, 2026 - Help Net Security
This article lists numerous cybersecurity jobs available as of February 10, 2026, including roles such as Cloud Security Engineer, Cyber Defence Senior …
- 69% of CISOs open to career move — including leaving role entirely | CSO Online
A survey reveals that 69% of CISOs are open to career changes, including leaving their current roles, due to job exhaustion, organizational misalignment, and a …
- RSAC Releases Quantickle Open Source Threat Intelligence Visualization Tool - SecurityWeek
RSAC Conference has released Quantickle, a new open source threat intelligence visualization tool designed for manual research and creating detailed …
- 25 Million Users Affected as AI Chat Platform Leaks 300 Million Messages
A significant security vulnerability has exposed 15,200 OpenClaw Control Panels to the public internet, granting full system access due to a dangerous default …
- 15,200 OpenClaw Control Panels Exposed Online with Full System Access
A significant security vulnerability has exposed 15,200 OpenClaw Control Panels to the public internet, granting full system access due to a dangerous default …
- How AI is reshaping attack path analysis - Help Net Security
AI is reshaping attack path analysis by enabling cybersecurity teams to move beyond static data and gain clarity on realistic exploitation scenarios. By …
- Cisco targets high-speed AI networking with 102.4Tbps chip, liquid-cooled switches - SiliconANGLE
Cisco has introduced its Silicon One G300 chip and new liquid-cooled switches designed for high-speed AI networking, aiming to support hyperscale …
- Attackers Weaponize Windows Shortcut Files to Deploy Global Group Ransomware
Attackers are weaponizing Windows shortcut files (.lnk) in a phishing campaign to deploy the Global Group ransomware. This ransomware operates offline, …
- Singapore: Rootkits, Zero-Day Used in Chinese Attack on Major Telecom Firms - SecurityWeek
In 2023, China-linked APT group UNC3886 targeted all four major telecommunications providers in Singapore, utilizing a zero-day exploit and rootkits to gain …
- Dutch agencies hit by Ivanti EPMM exploit exposing employee contact data
Dutch agencies, including the Data Protection Authority and the Judicial Council, were impacted by a cyberattack exploiting Ivanti EPMM flaws, leading to the …
- Windows Error Reporting Flaw Allows Attackers to Elevate Privileges
A newly documented Windows vulnerability, CVE-2026-20817, affects the Windows Error Reporting Service (WER), allowing local privilege escalation by enabling …
- Introducing Augustus: Open Source LLM Prompt Injection Tool | Praetorian
Augustus is an open-source LLM vulnerability scanner that tests large language models against over 210 adversarial attacks, including prompt injection and data …
- Hackers Use Signal QR Codes to Spy on Military and Political Leaders
German security agencies are warning that hackers are using Signal QR codes and fake support scams to spy on military and political leaders. These attackers …
- Top photo ID apps leak user data - over 150,000 thought to have been affected | TechRadar
Three photo ID apps have been found to be leaking sensitive user data, including emails, usernames, profile photos, GPS coordinates, and notification tokens, …
- OpenAI updates Europe privacy policy, adding new data categories - Help Net Security
OpenAI has updated its Europe privacy policy to align with the November 2024 EU revision, expanding coverage to include more data categories like files, …
- Hackers Abuse ClawHub Skills to Evade VirusTotal via Social Engineering
Hackers are abusing ClawHub skills through social engineering by hosting malware on fake websites and using the skills as lures, bypassing VirusTotal scans. …
- New Tool Blocks Imposter Attacks Disguised as Safe Commands
www.bleepingcomputer.com/news/secu… A new open-source and cross-platform tool called Tirith can detect homoglyph attacks over command-line environments by …
- The Shadow Campaigns: Uncovering Global Espionage
unit42.paloaltonetworks.com/shadow-ca… This investigation unveils a new cyberespionage group that Unit 42 tracks as TGR-STA-1030. We refer to the group’s …
- German Agencies Warn of Signal Phishing Targeting Politicians, Military, Journalists
thehackernews.com/2026/02/g… Germany’s Federal Office for the Protection of the Constitution (aka Bundesamt für Verfassungsschutz or BfV) and Federal Office for …
- DKnife targets network gateways in long running AitM campaign | CSO Online
The DKnife framework, active since at least 2019 and linked to China-nexus actors, operates at network gateways to inspect and manipulate traffic, enabling …
- SmarterTools Hit by Ransomware via Vulnerability in Its Own Product - SecurityWeek
IT management software company SmarterTools was hit by a ransomware attack through an unpatched vulnerability in its own SmarterMail product, specifically …
- Anthropic Labs chief Mike Krieger claims Claude is essentially writing itself – and it validates a bold prediction by CEO Dario Amodei | IT Pro
Anthropic Labs chief Mike Krieger revealed that Claude is now effectively writing itself, accelerating development and improving security by acting as a …
- Hackers Exploit Legitimate Apple and PayPal Invoice Emails in DKIM Replay Attacks
Hackers are exploiting legitimate Apple and PayPal invoice emails in DKIM replay attacks, using trusted platforms to send malicious messages with valid digital …
- Microsoft Exchange Online Flags Customers Legitimate Email as Phishing
Microsoft Exchange Online is experiencing a service degradation where legitimate emails are incorrectly flagged as phishing, causing them to be quarantined and …
- Malware Hidden in Pirated Games Infects 400,000 Devices | PCMag
A new Windows-based malware strain, dubbed RenEngine loader, has infected over 400,000 devices by hiding within pirated PC games. This malware, which has been …
- Introducing Kingfisher: Real-Time Secret Detection And Validation | MongoDB
Kingfisher is a new, open-source secret scanning tool developed by MongoDB that goes beyond detection to validate the secrets it finds. It is designed to be …
- Bithumb Mistakenly Sends 620,000 Bitcoin ($40B) to Customer Accounts
On February 6, 2026, Bithumb mistakenly sent approximately 620,000 Bitcoin ($40 billion) to customer accounts due to a system configuration error during a …
- State actor targets 155 countries in ‘Shadow Campaigns’ espionage op
A state-sponsored threat group, tracked as TGR-STA-1030/UNC6619 and believed to operate from Asia, has targeted 155 countries in a global espionage operation …
- Conduent data breach might have been much worse than initially expected | TechRadar
The Conduent data breach is now believed to be significantly larger than initially reported, potentially affecting tens of millions across multiple US states …
- How Much Do Cybersecurity Analysts Earn by City in 2026? - ProfessPost
The median salary for cybersecurity analysts varies significantly by city in 2026, with the San Francisco Bay Area typically offering the highest pay, though …
- AI Agents’ Most Downloaded Skill Is Discovered to Be an Infostealer | InfoStealers
A campaign involving a fraudulent VS Code extension impersonating the AI coding assistant Moltbot has been discovered, leading to Cognitive Context Theft by …
- We had sex in a Chinese hotel, then found we had been broadcast to thousands
A BBC investigation reveals the widespread existence of spy-cam porn in Chinese hotels, where unsuspecting guests are secretly filmed and their intimate …
- Illinois man pleads guilty to hacking hundreds of Snapchat accounts to steal nude photos | The Record from Recorded Future News
An Illinois man has pleaded guilty to hacking hundreds of Snapchat accounts to steal nude photos, facing decades in prison for charges including aggravated …
- Claude AI finds 500 high-severity software vulnerabilities | CSO Online
Anthropic’s new Claude Opus 4.6 has identified 500 high-severity software vulnerabilities in open-source projects during a trial, with humans verifying the …
- EU threatens TikTok with massive fine over addictive design features | The Record from Recorded Future News
The European Commission has notified TikTok of potential violations of the Digital Services Act, citing addictive design features like infinite scroll and …
- French lawmakers’ personal data leak: hack or doxxing?
In February 2026, personal data of French deputies was leaked online, but an investigation ruled out a hacking of the National Assembly’s databases, suggesting …
- Spain’s Ministry of Science shuts down systems after breach claims
Spain’s Ministry of Science has partially shut down its IT systems due to a technical incident, impacting services for citizens and companies. A threat actor …
- South Korean e-commerce giant Coupang says personal data of additional 165,000 users leaked - The Times of India
South Korean e-commerce giant Coupang has confirmed that the personal data of an additional 165,000 users was compromised, bringing the total affected accounts …
- Nearly 5 Million Web Servers Found Exposing Git Metadata – Study Reveals Widespread Risk of Code and Credential Leaks
A study revealed that nearly 5 million web servers are exposing Git metadata, with over 250,000 leaking deployment credentials through .git/config files. This …
- Substack data breach leaks users’ email addresses and phone numbers | CSO Online
Substack has experienced a data breach where email addresses and phone numbers of some users were exposed due to a system vulnerability exploited in October …
- Google, Microsoft pay creators $500,000 and more to promote AI
Tech giants like Google and Microsoft are increasingly partnering with social media influencers to promote their artificial intelligence services, offering …
- Technical Analysis of Marco Stealer
Marco Stealer, a newly discovered information stealer first observed in June 2025, is designed to exfiltrate sensitive data including browser information, …
- Stan Ghouls attacks in Russia and Uzbekistan: NetSupport RAT and potential IoT interest
The cybercriminal group Stan Ghouls, also known as Bloody Wolf, has been actively conducting targeted attacks since at least 2023, primarily focusing on …
- Knife Cutting the Edge: Disclosing a China-nexus gateway-monitoring AitM framework
Cisco Talos has uncovered DKnife, a sophisticated gateway-monitoring and adversary-in-the-middle (AitM) framework comprising seven Linux-based implants. This …
- SaaS Abuse at Scale: Phone-Based Scam Campaign Leveraging Trusted Platforms
A large-scale phishing campaign has been uncovered, where attackers are exploiting legitimate Software-as-a-Service (SaaS) platforms to deliver phone-based scam …
- OpenAI Just Launched GPT-5.3-Codex: A Faster Agentic Coding Model Unifying Frontier Code Performance And Professional Reasoning Into One System - MarkTechPost
OpenAI has launched GPT-5.3-Codex, a new agentic coding model that unifies frontier code performance with professional reasoning, running 25% faster and …
- Silent Push Identifies More Than 10,000 Infected IPs as Part of SystemBC Botnet Malware Family - Silent Push
Silent Push has identified over 10,000 infected IPs linked to the SystemBC botnet, a malware family that converts compromised systems into proxies and has …
- Malicious NGINX Configurations Enable Large-Scale Web Traffic Hijacking Campaign
A large-scale web traffic hijacking campaign has been uncovered, exploiting malicious NGINX configurations to redirect user traffic through attacker-controlled …
- AWS intruder pulled off AI-assisted cloud break-in in 8 mins • The Register
An AWS cloud environment was compromised in under 10 minutes using AI to automate reconnaissance, privilege escalation, and code writing, leading to the …
- AWS intruder pulled off AI-assisted cloud break-in in 8 mins • The Register
An AWS cloud environment was compromised in under 10 minutes using AI to automate reconnaissance, privilege escalation, and code writing, leading to the …
- Hackers publish personal information stolen during Harvard, UPenn data breaches | TechCrunch
The hacking group ShinyHunters has published over 1 million personal records from Harvard University and the University of Pennsylvania (UPenn), which they …
- Cybercrime group claims responsibility for Penn email hack, leaks additional internal files - The Daily Pennsylvanian
The cybercrime group ShinyHunters has claimed responsibility for the Penn email hack, leaking thousands of additional internal files after the university …
- Critical n8n flaws disclosed along with public exploits
Critical n8n flaws (CVE-2026-25049) have been disclosed, allowing authenticated users to achieve remote code execution and gain complete control of the host …
- From credentials to cloud admin in 8 minutes: AI supercharges AWS attack chain | CSO Online
A recent attack demonstrated how AI-assisted attackers can weaponize exposed AWS credentials and permissive roles to gain full administrative control in under …
- Foxit PDF Editor Vulnerabilities Let Attackers Execute Arbitrary JavaScript
Critical cross-site scripting (XSS) vulnerabilities, CVE-2026-1591 and CVE-2026-1592, in Foxit PDF Editor Cloud allow attackers to execute arbitrary JavaScript …
- Hackers Exploiting React Native’s Metro Server in the Wild to Attack Developers
Hackers are actively exploiting a critical remote code execution vulnerability (CVE-2025-11953) in React Native’s Metro Development Server to deliver malware …
- Docker Fixes Critical Ask Gordon AI Flaw Allowing Code Execution via Image Metadata
A critical vulnerability named DockerDash in Docker’s Ask Gordon AI assistant allowed code execution and data exfiltration by exploiting unverified image …
- UK investigating first suspected breach of cyber sanctions | The Record from Recorded Future News
The UK is investigating its first suspected breaches of cyber sanctions since the regime began over five years ago, with up to five potential violations …
- Iron Mountain: Data breach mostly limited to marketing materials
Iron Mountain states that a data breach claimed by the Everest extortion gang was limited to a single folder of marketing materials shared with third-party …
- An AI plush toy exposed thousands of private chats with children | Malwarebytes
The Bondus AI plush toy exposed approximately 50,000 private chats between children and their toys through an unsecured web console, revealing sensitive …
- Russian Hacker Alliance Targeting Denmark in Large-Scale Cyberattack
A new Russian hacker alliance, Russian Legion, has launched a large-scale cyberattack against Denmark, targeting critical infrastructure and government …
- DynoWiper Data-Wiping Malware Attacking Energy Companies to Destroy Data
A new data-wiping malware named DynoWiper is targeting energy companies in Poland, aiming to destroy critical data rather than encrypt it for ransom. This …
- Researchers Find 341 Malicious ClawHub Skills Stealing Data from OpenClaw Users
A security audit of ClawHub skills revealed 341 malicious skills designed to steal data from OpenClaw users, with 335 of them using fake prerequisites to …
- Mozilla announces switch to disable all Firefox AI features
Mozilla is introducing new controls in Firefox 148, rolling out February 24th, allowing users to disable all AI features or manage them individually. This …
- Ex-Google Engineer Convicted of Stealing AI Data for China
A former Google engineer, Linwei Ding, has been convicted of stealing thousands of pages of confidential AI data and transferring it to Chinese technology …
- Phishing Scam Uses Clean Emails and PDFs to Steal Dropbox Logins – Hackread – Cybersecurity News, Data Breaches, AI, and More
A new phishing scam uses clean emails with PDF attachments that contain hidden links, leading victims to fake Dropbox login pages hosted on Vercel cloud …
- GitHub - RootUp/claude-poc: Claude Code Remote Code Execution
A GitHub post details a code execution vulnerability in the claude-poc repository, specifically within the apiKeyHelper script. This script, designed to …
- Panera Bread breach affected 5.1 Million accounts, HIBP Confirms
A Panera Bread breach impacted 5.1 million accounts, according to Have I Been Pwned, with attackers claiming to have accessed data using a compromised …
- Russian hackers exploit recently patched Microsoft Office bug in attacks
Russian hackers, identified as APT28, are actively exploiting a recently patched Microsoft Office vulnerability (CVE-2026-21509) to deploy malware, including …
- Spain Ministry Data Breach: Actor Claims IDOR Hack - TechNadu
A threat actor known as GordonFreeman claims to have breached Spain’s Ministry of Science, Innovation, and Universities by exploiting an IDOR vulnerability and …
- Match, Hinge, OkCupid, and Panera Bread breached by ransomware group | Malwarebytes
The ShinyHunters ransomware group has claimed responsibility for data breaches affecting Match Group and Panera Bread, compromising millions of user records. …
- New Apple privacy feature limits location tracking on iPhones, iPads
Apple’s new “Limit Precise Location” feature, available on select iPhone and iPad models with iOS 26.3+, restricts the location data mobile carriers can access …
- Critical Johnson Controls Products Vulnerabilities Enables Remote SQL Injection Attacks
A critical SQL injection vulnerability (CVE-2025-26385) with a maximum CVSS score of 10.0 affects multiple Johnson Controls products, including Application and …
- Exposed MongoDB instances still targeted in data extortion attacks
A single threat actor is actively targeting exposed MongoDB instances in automated data extortion attacks, demanding around $500 in Bitcoin for data …
- depthfirst | 1-Click RCE To Steal Your Moltbot Data and Keys
A critical 1-Click Remote Code Execution (RCE) vulnerability has been discovered in OpenClaw (formerly Moltbot), an AI personal assistant trusted by over …
- Comcast agrees to $117.5 million settlement to resolve lawsuits over 2023 Citrix Bleed data breach – DataBreaches.Net
Comcast has reached a preliminary $117.5 million settlement to resolve lawsuits stemming from a 2023 data breach that affected over 30 million customers. If …
- BD: 14,000 journos’ personal data leaked online – DataBreaches.Net
The personal data of approximately 14,000 journalists, including their National ID numbers and mobile phone numbers, was exposed online due to a technical …
- Nobel Hacking Likely Leaked Peace Prize Winner Name, Probe Finds - Slashdot
An investigation by the Norwegian Nobel Institute suggests that a hacking of their computer systems likely led to the premature leak of Maria Corina Machado as …
- StopICE Hacked: Names And Locations of Over 100k Users Were Sent to the FBI, ICE and HSI – DataBreaches.Net
The StopICE app and website experienced a security breach, exposing the personal information of over 100,000 users, including names, logins, passwords, phone …