A new mobile spyware operation known as ZeroDayRAT has been documented targeting both Android and iOS devices. The cross-platform tool provides attackers with persistent access to personal communications, precise location data and banking activity. According to a new advisory published… Read More "New Mobile Spyware ZeroDayRAT Targets Android and iOS"
SmarterTools confirmed last week that the Warlock (aka Storm-2603) ransomware gang breached its network by exploiting an unpatched SmarterMail instance. The incident took place on January 29, 2026, when a mail server that was not updated to the latest version… Read More "Warlock Ransomware Breaches SmarterTools Through Unpatched SmarterMail Server"
A single benign-sounding prompt can systematically strip safety guardrails from major language and image models, raising fresh questions about the durability of AI alignment when models are customized for enterprise use, according to Microsoft research. The technique, dubbed GRP-Obliteration, weaponizes… Read More "Single prompt breaks AI safety in 15 major language models"
The Singapore government disrupted cyber-attacks attributed to Chinese-nexus cyber threat group UNC3886 which targeted the country’s four telecommunications operators. The law enforcement operation, dubbed Operation Cyber Guardian, spanned from the summer of 2025 to early 2026 but remained secret until… Read More "Singapore Takes Down Chinese Hackers Targeting Telco Networks"
SolarWinds Web Help Desk and OpenClaw flaws are among the vulnerabilities, drawing significant interest by threat actors. Cyble Vulnerability Intelligence researchers tracked 1,093 vulnerabilities in the last week, and well over 200 of the disclosed vulnerabilities already have a publicly available Proof-of-Concept (PoC), significantly increasing the likelihood of real-world attacks on those… Read More "1,000+ Flaws Found, Including Critical IT & ICS Vulnerabilities"
The Hacker NewsFeb 10, 2026Application Security / Artificial Intelligence January 5, 2026, Seattle, USA — ZAST.AI announced the completion of a $6 million Pre-A funding round. This investment came from the well-known investment firm Hillhouse Capital, bringing ZAST.AI’s total funding… Read More "ZAST.AI Raises $6M Pre-A to Scale “Zero False Positive” AI-Powered Code Security"
Unlike many modern ransomware operations that rely on external command-and-control (C2) infrastructure, the Global Group payload executes locally once delivered, complicating detection and response efforts by traditional network-centric security controls, the researchers noted. Weaponized LNK files The infection chain begins… Read More "Windows shortcut weaponized in Phorpiex-linked ransomware campaign"
The National Cyber Security Centre (NCSC) has issued an alert to critical national infrastructure (CNI) providers, urging them to act now to protect against “severe” cyber threats. The alert comes following coordinated cyber-attacks which targeted Poland’s energy infrastructure with malware… Read More "NCSC Issues Warning Over “Severe” Cyber-Attacks Targeting CNI"
Several European government institutions appear to have been targeted in a coordinated campaign designed to steal data on mobile users, it has emerged. First reported late last week, the incidents occurred at the European Commission, the Finnish government, and at least… Read More "European Governments Breached in Zero-Day Attacks Targeting Ivanti"
Ravie LakshmananFeb 10, 2026Data Breach / Vulnerability The Netherlands’ Dutch Data Protection Authority (AP) and the Council for the Judiciary confirmed both agencies (Rvdr) have disclosed that their systems were impacted by cyber attacks that exploited the recently disclosed security… Read More "Dutch Authorities Confirm Ivanti Zero-Day Exploit Exposed Employee Contact Data"
