access ai android api apple attack authentication backdoor breach browser business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email exploit finance flaw framework fraud germany google government group hacker hacking healthcare identity infrastructure intelligence Internet jobs law leak linux malicious malware microsoft network north-korea open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
Ransomware gang uses ISPsystem VMs for stealthy payload delivery
Ransomware operators are hosting and delivering malicious payloads at scale by abusing virtual machines (VMs) provisioned by ISPsystem, a legitimate virtual infrastructure management provider. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ransomware-gang-uses-ispsystem-vms-for-stealthy-payload-delivery/ also interesting: Cybersecurity Snapshot: Prompt Injection and Data Disclosure Top OWASP’s List of Cyber Risks for GenAI LLM Apps The dirty dozen: 12 worst…
-
Chrome Vulnerabilities Allow Code Execution, Browser Crashes
Google released a Chrome security update fixing two high-severity flaws that could enable code execution or crashes via malicious websites. The post Chrome Vulnerabilities Allow Code Execution, Browser Crashes appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-google-chrome-security-update-february-2026/ also interesting: Chrome UseFree Flaw Lets Attackers Execute Arbitrary Code Cybersecurity Snapshot: Global Agencies…
-
Microsoft Brings Back Google’s Hayete Gallot to Run Security
CEO Nadella Names Gallot EVP, Current Head Charlie Bell Takes New Engineering Role. Microsoft CEO Satya Nadella announced leadership changes tied to security and engineering quality including Hayete Gallot’s return from Google as EVP of security and a new individual contributor role for current security leader Charlie Bell focused on engineering quality. First seen on…
-
CISA orders feds to disconnect unsupported network edge devices
The government is worried about hackers accessing systems through insecure and poorly monitored routers, firewalls and similar equipment at the network perimeter. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisa-edge-devices-binding-operational-directive/811539/ also interesting: Cybersecurity Snapshot: Study Raises Open Source Security Red Flags, as Cyber Agencies Offer Prevention Tips Against Telecom Spying Attacks The 2024 cyberwar playbook:…
-
Microsoft Overhauls Security Leadership as AI Expands Enterprise Attack Surface
Microsoft brings back Hayete Gallot to lead Security while Charlie Bell moves to an engineering quality mandate, both reporting to CEO Satya Nadella. The post Microsoft Overhauls Security Leadership as AI Expands Enterprise Attack Surface appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-gallot-security-bell-engineering-quality/ also interesting: Security und GenAI Zwischen Innovation und…
-
ICE and CBP’s Face-Recognition App Can’t Actually Verify Who People Are
ICE has used Mobile Fortify to identify immigrants and citizens alike over 100,000 times, by one estimate. It wasn’t built to work like that”, and only got approved after DHS abandoned its own privacy rules. First seen on wired.com Jump to article: www.wired.com/story/cbp-ice-dhs-mobile-fortify-face-recognition-verify-identity/ also interesting: Europol says Home Routing mobile encryption feature aids criminals iPhone-Android:…
-
Microsoft Urges Users to Finally Ditch NTLM Authentication
Seeking to Add Urgency, Mandiant Publishes Rainbow Tables for NTLM Key Hashes. For nearly 30 years, security experts have warned organizations to ditch the weak NTLM authentication protocol in Windows. But its use persists, even amidst easy and active exploits. Now Google has published rainbow tables for NTLMv1. Will this finally drive holdout organizations to…
-
OpenClaw AI Agent Sparks Global Security Alarm
Open-Source Tool Security ‘Dumpster Fire,’ Experts Warn. An open-source AI assistant that exploded in popularity over the past month is exposing users to data theft, malicious code and runaway costs. Users can add functions called skills that connect assistants with different services – and hackers have been quick to add malicious examples. First seen on…
-
Incognito Market admin sentenced to 30 years for running $105 million dark web drug empire
He promised “the best security there is” to hundreds of thousands of drug buyers, while quietly making the kind of mistake that guaranteed a 30-year sentence. And maybe training police on cryptocurrency while running a running a vast Tor-hidden drug bazaar wasn’t such a good idea. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/incognito-market-admin-sentenced-30-years-105-million-dark-web-drug-empire also…
-
AISURU/Kimwolf Botnet Launches Record-Setting 31.4 Tbps DDoS Attack
The distributed denial-of-service (DDoS) botnet known as AISURU/Kimwolf has been attributed to a record-setting attack that peaked at 31.4 Terabits per second (Tbps) and lasted only 35 seconds.Cloudflare, which automatically detected and mitigated the activity, said it’s part of a growing number of hyper-volumetric HTTP DDoS attacks mounted by the botnet in the fourth quarter…
-
Microsoft to shut down Exchange Online EWS in April 2027
Microsoft announced today that the Exchange Web Services (EWS) API for Exchange Online will be shut down in April 2027, after nearly 20 years. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-to-shut-down-exchange-web-services-in-cloud-in-2027/ also interesting: Understanding OWASP’s Top 10 list of non-human identity critical risks 7 obsolete security practices that should be terminated immediately How bright…
-
Keeper Security Announces 2026 MSP Partner Program
Keeper Security has announced the launch of its 2026 Managed Service Provider (MSP) Partner Program. The program helps managed service providers to deliver enterprise-grade privileged access management while growing their recurring revenue. This new launch is aligned with Keeper’s strategy to invest in its channel sales program that combines aggressive partner economics, expanded enablement materials…
-
Asia-based government spies quietly broke into critical networks across 37 countries
And their toolkit includes a new, Linux kernel rootkit First seen on theregister.com Jump to article: www.theregister.com/2026/02/05/asia_government_spies_hacked_37_critical_networks/ also interesting: The most notorious and damaging ransomware of all time China-Nexus Nation State Actors Exploit SAP NetWeaver (CVE-2025-31324) to Target Critical Infrastructures Computer mice can eavesdrop on private conversations, researchers discover TDL 007 – Cyber Warriors Digital…
-
Substack says intruder lifted emails, phone numbers in months-old breach
Contact details were accessed in an intrusion that went undetected for months, the blogging outfit says First seen on theregister.com Jump to article: www.theregister.com/2026/02/05/substack_admit_security_incident/ also interesting: TDL001 – Cybersecurity Explained: Privacy, Threats, and the Future – Chester Wisniewski Harvard reports vishing breach exposing alumni and donor contact data Coupang CEO Resigns Following Major Data Breach…
-
One of Europe’s largest universities knocked offline for days after cyberattack
An alleged ransomware attack has taken down the systems of the Sapienza University of Rome. First seen on techcrunch.com Jump to article: techcrunch.com/2026/02/05/one-of-europes-largest-universities-knocked-offline-for-days-after-cyberattack/ also interesting: Ascension Faces Multiple Lawsuits Following Ransomware Attack Brandywine Realty Trust says data stolen in ransomware attack 8Base Ransomware Group Launches Cyberattack on Bieler Lang GmbH, Threatens Data Leak The Changing…
-
All gas, no brakes: Time to come to AI church
This week, Joe cautions the rush to adopt AI tools rife with truly awful security vulnerabilities. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/all-gas-no-brakes-time-to-come-to-ai-church/ also interesting: Securing AI’s new frontier: Visibility, governance, and mitigating compliance risks AI May Fix a 15-Year-Old Bug It Helped Spread BruteForceAI: Free AI-powered login brute force tool Centraleyes AI Framework…
-
CISA tells agencies to stop using unsupported edge devices
A binding operational directive issued Thursday looks to combat an attack pathway that has been behind some of the biggest attacks and most common exploits in recent years. First seen on cyberscoop.com Jump to article: cyberscoop.com/cisa-bod-directive-unsupported-edge-devices-firewalls-routers/ also interesting: CISA Adds Second BeyondTrust Flaw to KEV Catalog Amid Active Attacks CISA tags NAKIVO backup flaw as…
-
CISA gives federal agencies one year to rip out endlife devices
The U.S. cyber defense agency issued an operational directive on Thursday mandating federal agencies to “remove any hardware and software devices that is no longer supported by its original equipment manufacturer.” First seen on therecord.media Jump to article: therecord.media/cisa-gives-federal-agencies-one-year-end-of-life-devices also interesting: Frequently Asked Questions About Iranian Cyber Operations What is a CISO? The top IT…
-
CrowdStrike Remains In Prime Position Amid AI ‘Software Apocalypse:’ Analyst
While the ‘software apocalypse’ strikes Wall Street due to fears over AI’s impact on the industry, vendors including cybersecurity giant CrowdStrike are well-positioned to see massive opportunities regardless of how AI disruption plays out, according to prominent analyst Daniel Ives. First seen on crn.com Jump to article: www.crn.com/news/security/2026/crowdstrike-remains-in-prime-position-amid-ai-software-apocalypse-analyst also interesting: 7 biggest cybersecurity stories of…
-
Branchenexperten kommentieren den Safer Internet Day 2026
Tags: InternetDer Safer Internet Day 2026 nächste Woche, steht im Zeichen von digitaler Verantwortung, Medienkompetenz und Sicherheit im vernetzten Alltag. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/branchenexperten-kommentieren-den-safer-internet-day-2026/a43588/ also interesting: XDRLösung von CrowdStrike: Umfassender Schutz für Internet of Things Assets Cybersecurity’s oversimplification problem: Seeing AI as a replacement for human agency Massive Botnet Targets ASUS Routers…
-
Italian university La Sapienza goes offline after cyberattack
Tags: cyberattackRome’s “La Sapienza” university has been targeted by a cyberattack that impacted its IT systems and caused widespread operational disruptions at the educational institute. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/italian-university-la-sapienza-goes-offline-after-cyberattack/ also interesting: UnitedHealth Says Patient Data Exposed in Change Healthcare Cyberattack AI-driven state-sponsored cyberattacks worry security professionals HTML-Dateien dominieren unter schädlichen E-Mail-Anhängen Steel…
-
Salt Security warns autonomous AI agents are the next major security blind spot
Experiments involving autonomous AI agents coordinating, sharing code and acting without human supervision have captured plenty of attention in recent weeks. Platforms such as Moltbook and tools like Clawdbot have been framed as glimpses into a future where AI systems organise themselves in the wild. For security leaders, however, the fascination quickly fades once the…
-
Threat Group Running Espionage Operations Against Dozens of Governments
Unit 42 researchers say an Asian threat group behind what they call the Shadow Campaigns has targeted government agencies in 37 countries in a wide-ranging global cyberespionage campaign that has involved phishing attacks and the exploitation of a more than a dozen known vulnerabilities. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/threat-group-running-espionage-operations-against-dozens-of-governments/ also interesting: Cybersecurity…
-
AI and Regulation Redefine Application Security, New Global Study Finds
Artificial intelligence has overtaken all other forces shaping application security, according to a major new industry study that shows organisations racing to secure AI-generated code while responding to growing regulatory pressure. The 16th edition of the Building Security In Maturity Model (BSIMM), released by Black Duck, analysed real-world software security practices across 111 organisations worldwide,…
-
Attackers Use Legitimate Forensic Driver to Disable Endpoint Security, Huntress Warns
Tags: attack, cybercrime, endpoint, incident response, malicious, software, threat, tool, vulnerabilityCybercriminals are increasingly turning trusted software against defenders, according to new research from Huntress, which has uncovered a real-world attack in which threat actors used a legitimate but vulnerable driver to disable endpoint security tools before deploying further malicious activity. In a detailed incident response analysis, Huntress researchers observed attackers abusing an outdated EnCase forensic…
-
Proton Warns European Startups: No One Is Too Small to Be Targeted by Hackers
Tags: breach, business, cybercrime, cybersecurity, dark-web, data, hacker, monitoring, privacy, startupSwiss privacy company Proton is urging European startups to rethink their cybersecurity approach after new research based on dark-web breach monitoring found that early-stage companies are increasingly targeted by cybercriminals, with significant consequences for innovation, data protection, and business continuity. The push comes as Proton launches its new initiative, “Build in Private,” aimed at helping…
-
Harlan Parrott Appointed as KnowBe4’s VP of AI Innovation
KnowBe4 has announced the appointment of Harlan Parrott as VP of AI Innovation, following the company’s 10-year anniversary celebration of pioneering Artificial Intelligence (AI) in cybersecurity. As VP, Parrott will lead the AI Center of Excellence by overseeing the company’s product suite and the expansion of AI capabilities within its internal operations. Since the release…
-
CISA confirms exploitation of VMware ESXi flaw by ransomware attackers
CVE-2025-22225, a VMware ESXi arbitrary write vulnerability, is being used in ransomware campaigns, CISA confirmed on Wednesday by updating the vulnerability’s entry in … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/05/cisa-cve-2025-22225-ransomware-exploitation/ also interesting: CISA Confirms VMware ESXi 0-Day Vulnerability Exploited in Ransomware Operations BlackByte Ransomware group targets recently patched VMware ESXi flaw CVE-2024-37085 U.S.…
-
OpenClaw and the Growing Security Risks of Agentic AI
OpenClaw’s rise shows how agentic AI can expand attack surfaces and introduce new enterprise security risks. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/openclaw-and-the-growing-security-risks-of-agentic-ai/ also interesting: Your Data, Your Responsibility: Securing Your Organization’s Future in the Cloud ThreatPlattformen ein Kaufratgeber Shadow AI is breaking corporate security from within How AI agents are turning security inside-out
-
Cryptohack Roundup: Step Finance, CrossCurve Exploits
Also: US Sanctions UK-Registered Exchanges Over Iran Ties. This week, Step Finance and CrossCurve hacks, the United States sanctioned U.K.-registered exchanges over Iran ties, forfeiture finalization of funds linked to Helix, Coinbase data breach, 2025’s illicit crypto flows and a UK regulator banned Coinbase ads. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cryptohack-roundup-step-finance-crosscurve-exploits-a-30685 also interesting:…
-
Pro-Russian group Noname057(16) launched DDoS attacks on Milano Cortina 2026 Winter Olympics
Italy stopped Russian-linked cyberattacks targeting Foreign Ministry offices and Winter Olympics websites and hotels, Foreign Minister Tajani said. Italy has thwarted a series of Russian-linked cyberattacks aimed at Foreign Ministry offices, including one in Washington, as well as Winter Olympics websites and hotels in Cortina d’Ampezzo, according to Foreign Minister Antonio Tajani. >>We have foiled…
-
Alleged 764 member arrested, charged with CSAM possession in New York
Tags: lawAuthorities have arrested multiple members of 764 during the past year, reflecting heightened law enforcement activity targeting the violent extremist collective. First seen on cyberscoop.com Jump to article: cyberscoop.com/764-member-arrested-charged-csam-new-york/ also interesting: 27 DDoS-for hire platforms seized by law enforcement Bipartisan duo wants to renew 10-year-old cyberthreat information sharing law Europol disrupts pro-Russian NoName057(16) DDoS hacktivist…
-
Russian hackers attacking European maritime and transport orgs using Microsoft Office exploit
Russian state-linked hackers are exploiting a Microsoft Office vulnerability to target maritime organizations across Europe as part of a “sophisticated espionage campaign,” researchers said. First seen on therecord.media Jump to article: therecord.media/russian-hackers-microsoft-office-europe also interesting: The 2024 cyberwar playbook: Tricks used by nation-state actors Russian hackers exploited a critical Office bug within days of disclosure APT28…
-
Asian government’s espionage campaign breached critical infrastructure in 37 countries
The victims included national telecommunications firms, finance ministries and police agencies, with most targets suggesting an economic focus, Palo Alto Networks said. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/asian-governments-espionage-campaign-breached-critical-infrastructure-in-3/811472/ also interesting: US hits back against China’s Salt Typhoon group The Rise of Typhoon Cyber Groups China-Nexus Nation State Actors Exploit SAP NetWeaver (CVE-2025-31324) to…
-
Critical flaw in SolarWinds Web Help Desk under exploitation
The vulnerability could allow an attacker to achieve remote code execution.; First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/critical-flaw-solarwinds-web-help-desk-exploitation/811487/ also interesting: OpenSSH fixes flaws that enable manthe-middle, DoS attacks Google Issues Security Fix for Actively Exploited Chrome V8 Zero-Day Vulnerability Chrome Zero-Day Type Confusion Flaw Actively Exploited in the Wild Critical RCE flaw allows full…
-
Orchid Security Adds Ability to Audit Behaviors by Identity
Orchid Security today added an ability to conduct audits to its platform that enables cybersecurity teams to track behaviors of specific identities. Company CEO Roy Katmor said Identity Audit is designed to make it possible to unify proprietary audit data captured from unmanaged applications with audit logs data collected from third-party identity and access management..…
-
Model Confusion – Vortrainierte KI-Modelle lassen sich verwirren und angreifen
Tags: aiFirst seen on security-insider.de Jump to article: www.security-insider.de/cyberangriffe-ki-modelle-checkmarx-untersuchung-a-0bc66c780087f561ee80913ec6d614d7/ also interesting: Cloud security incidents make organizations turn to AI-powered prevention Proof of Concept: Boosting Security and Taming AI ‘Lies’ Red Teaming AI Systems: Why Traditional Security Testing Falls Short North Korealinked KONNI uses AI to build stealthy malware tooling
-
When cloud logs fall short, the network tells the truth
Cloud logs can be inconsistent or incomplete, creating blind spots as environments scale and change. Corelight shows how network-level telemetry provides reliable visibility when cloud logs fall short. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/when-cloud-logs-fall-short-the-network-tells-the-truth/ also interesting: 8 Cyber Predictions for 2025: A CSO’s Perspective Top cybersecurity M&A deals for 2025 Unified Security Visibility…
-
Romanian oil pipeline operator Conpet discloses cyberattack
Conpet, Romania’s national oil pipeline operator, has disclosed that a cyberattack disrupted its business systems and took down the company’s website on Tuesday. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/romanian-oil-pipeline-operator-conpet-discloses-cyberattack-qilin-ransomware/ also interesting: 8 Cyber Predictions for 2025: A CSO’s Perspective CISOs embrace rise in prominence, with broader business authority Overcome the myriad challenges of…
-
OpenAI Frontier organizes AI agents under one system
OpenAI introduced Frontier, a platform designed to organize AI agents that perform business tasks within internal systems and workflows. The platform connects data from … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/05/openai-frontier-ai-agents/ also interesting: Microsoft Adds Inline Data Protection to Edge for Business to Block GenAI Data Leaks 13 cybersecurity myths organizations need to…
-
Why Telemetry Is the Backbone of Production AI
Datadog’s Yrieix Garnier on Production AI, Trust, Cost and Failure Modes. As enterprises move from artificial intelligence pilots to production, observability, cost control and trust are emerging as critical success factors. Yrieix Garnier, vice president of products at Datadog, shares what separates scalable AI from systems that quietly fail. First seen on govinfosecurity.com Jump to…
-
Godent Rolls Out Scanner-as-a-Service Model to Drive Digital Transformation in European Dentistry
Godent has announced the launch of its scanner-as-a-service program for European DSOs, combining free intraoral scanners with a fully integrated digital lab infrastructure to modernize dental workflows. First seen on hackread.com Jump to article: hackread.com/godent-scanner-as-a-service-model-european-dentistry/ also interesting: Legacy Systems and Policies Expose West to Cyber Disruption 6 things keeping CISOs up at night Who Owns…
-
Data breach at govtech giant Conduent balloons, affecting millions more Americans
The ransomware attack at Conduent allowed hackers to steal a “significant number of individuals’ personal information” from the govtech giant’s systems. Conduent handles personal and health data of more than 100 million people across America. First seen on techcrunch.com Jump to article: techcrunch.com/2026/02/05/data-breach-at-govtech-giant-conduent-balloons-affecting-millions-more-americans/ also interesting: Cybersecurity Snapshot: Study Raises Open Source Security Red Flags, as…
-
Substack warns customers of data breach following hacker’s dark web claims
Customers of the newsletter platform Substack were notified on Wednesday of a breach, following a hacker’s claims on the dark web of a trove of stolen data. First seen on therecord.media Jump to article: therecord.media/substack-data-breach-notification also interesting: LuLu Hypermarket Data Breach Reportedly Affects 196,000 Customers in IntelBroker-Led Cyberattack LuLu Hypermarket Data Breach Reportedly Affects 196,000…
-
Malicious Commands in GitHub Codespaces Enable RCE
Flaws in GitHub Codespaces allow RCE via crafted repositories or pull requests First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/malicious-commands-in-github/ also interesting: Gen AI is transforming the cyber threat landscape by democratizing vulnerability hunting Big hole in big data: Critical deserialization bug in Apache Parquet allows RCE Microsoft’s November 2025 Patch Tuesday Addresses 63 CVEs…
-
Cyber Success Trifecta: Education, Certifications & Experience
Colonel Georgeo Xavier Pulikkathara, CISO at iMerit discusses the importance of fundamentals, continuous learning, and human ingenuity in the face of AI-driven cybersecurity evolution. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/the-trifecta-of-cyber-success-education-certifications-and-experience also interesting: 12 cybersecurity resolutions for 2025 TDL001 – Cybersecurity Explained: Privacy, Threats, and the Future – Chester Wisniewski 71% of CISOs hit…
-
n8n Flaw Puts Hundreds of Thousands of Enterprise AI Systems at Risk
A n8n sandbox escape flaw could allow any authenticated user to take over enterprise AI workflows at massive scale. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/n8n-flaw-puts-hundreds-of-thousands-of-enterprise-ai-systems-at-risk/ also interesting: Critical Nvidia Security Flaw Exposes Cloud AI Systems to Host Takeover Microsoft Offers $30,000 Bounties for AI Security Flaws AI-powered attacks rise as CISOs prioritize AI…
-
macOS Users Hit by Python Infostealers Posing as AI Installers
Microsoft details 3 Python Infostealers hitting macOS users via fake AI tools, Google ads, and Terminal tricks to steal passwords and crypto, then erase traces. First seen on hackread.com Jump to article: hackread.com/macos-users-python-infostealers-posing-ai-installers/ also interesting: macOS Users Hit by Python Infostealers Posing as AI Installers Black Hat SEO Poisoning Search Engine Results For AI to…
-
macOS Users Hit by Python Infostealers Posing as AI Installers
Microsoft details 3 Python Infostealers hitting macOS users via fake AI tools, Google ads, and Terminal tricks to steal passwords and crypto, then erase traces. First seen on hackread.com Jump to article: hackread.com/macos-users-python-infostealers-posing-ai-installers/ also interesting: macOS Users Hit by Python Infostealers Posing as AI Installers Cybersecurity Snapshot: Tenable Report Spotlights Cloud Exposures, as Google Catches…