The UK’s Information Commissioner’s Office (ICO) has launched an investigation into Elon Musk’s social network X (formerly Twitter) in relation to non-consensual sexual imagery generated by Grok, the platform’s AI assistant. In a statement released on February 3, the UK’s… Read More "ICO Launches Investigation into X Over AI Non Consensual Sexual Images"
Two agents involved in the shooting deaths of US citizens in Minneapolis are reportedly part of highly militarized DHS units whose extreme tactics are generally reserved for war zones. Source link Read More "The Paramilitary ICE and CBP Units at the Center of Minnesota's Killings"
Key Takeaways Cloud malware avoids files, running in memory and abusing cloud-native services to evade legacy antivirus Attackers exploit misconfigured IAM, APIs, storage, and legitimate management tools for stealthy persistence Fileless execution, living-off-the-land techniques, and encrypted cloud C2 now dominate… Read More "Inside Cloud Malware Analysis: Techniques and Real-World Use Cases"
Ravie LakshmananFeb 03, 2026Artificial Intelligence / Vulnerability Cybersecurity researchers have disclosed details of a now-patched security flaw impacting Ask Gordon, an artificial intelligence (AI) assistant built into Docker Desktop and the Docker Command-Line Interface (CLI), that could be exploited to… Read More "Docker Fixes Critical Ask Gordon AI Flaw Allowing Code Execution via Image Metadata"
More than 40,000 WordPress sites using the Quiz and Survey Master plugin have been affected by a SQL injection vulnerability that allowed authenticated users to interfere with database queries. The flaw existed in versions 10.3.1 and earlier and could be… Read More "SQL Injection Flaw Affects 40,000 WordPress Sites"
Ravie LakshmananFeb 03, 2026Open Source / Vulnerability Threat actors have been observed exploiting a critical security flaw impacting the Metro Development Server in the popular “@react-native-community/cli” npm package. Cybersecurity company VulnCheck said it first observed exploitation of CVE-2025-11953 (aka Metro4Shell)… Read More "Hackers Exploit Metro4Shell RCE Flaw in React Native CLI npm Package"
Experts argue that the most unsettling takeaway isn’t that AI introduced a new attack technique. It is that AI removed hesitation.“When you strip this attack down to its essentials, what stands out isn’t a breakthrough technique,” said Shane Barney, CISO… Read More "From credentials to cloud admin in 8 minutes: AI supercharges AWS attack chain"
New findings reveal almost 400 fake crypto trading add-ons in the project behind the viral Moltbot/OpenClaw AI assistant tool can lead users to install information-stealing malware. These add-ons, called skills, masquerade as cryptocurrency trading automation tools and target ByBit, Polymarket,… Read More "Hundreds of Malicious Crypto Trading Addons Found in Moltbot/OpenClaw"
The Hacker NewsFeb 03, 2026Threat Detection / Enterprise Security Most security teams today are buried under tools. Too many dashboards. Too much noise. Not enough real progress. Every vendor promises “complete coverage” or “AI-powered automation,” but inside most SOCs, teams… Read More "Learn What to Build, Buy, and Automate"
Wenn OT-Fachkräfte in den Ruhestand gehen, droht ein massiver Wissensverlust. Das kann erhebliche Folgen für die Cybersicherheit haben. vectorfusionart – shutterstock.com Zwar stellen Cyberkriminelle und staatlich unterstützte Angreifer gerade für den Industriesektor eine enorme und steigende Gefahr dar. Dennoch besteht… Read More "Cyberrisiko Ruhestand | CSO Online"
