Ravie LakshmananFeb 13, 2026Malware / Critical Infrastructure Several state-sponsored actors, hacktivist entities, and criminal groups from China, Iran, North Korea, and Russia have trained their sights on the defense industrial base (DIB) sector, according to findings from Google Threat Intelligence… Read More "Google Links China, Iran, Russia, North Korea to Coordinated Defense Sector Cyber Operations"
“While it’s true this bug existed in the libpng library for three decades, this is not a doomsday-level threat,” said Satnam Narang, senior staff research engineer at Tenable, the firm behind the Nessus vulnerability assessment scanner. The vulnerable png_set_quantize function,… Read More "Researchers unearth 30-year-old vulnerability in libpng library"
Chinese money laundering networks (CMLNs) now dominate global activity thanks to illicit cryptocurrency flows, Chainalysis has warned. The blockchain analytics firm said its analysis revealed Chinese-language money launderers processed 20% of these funds over the past five years. Last year… Read More "Chinese Money Launderers Drive Global Ecosystem Worth $82bn"
Ravie LakshmananFeb 13, 2026Threat Intelligence / Malware A previously undocumented threat actor has been attributed to attacks targeting Ukrainian organizations with malware known as CANFAIL. Google Threat Intelligence Group (GTIG) described the hack group as possibly affiliated with Russian intelligence… Read More "Google Ties Suspected Russian Actor to CANFAIL Malware Attacks on Ukrainian Orgs"
Louis Vuitton drew the heaviest penalty at KRW 21.385 billion. In that case, an employee’s device was compromised by malware, allowing threat actors to harvest SaaS account credentials. The breach resulted in the exposure of personal data belonging to roughly… Read More "“Security remains the provider’s responsibility even when using SaaS” Personal Information Protection Commission imposes 36 billion won in fines on three luxury brands’ Korean subsidiaries"
Does your chatbot know too much? Here’s why you should think twice before you tell your AI companion everything. 17 Nov 2025 • , 4 min. read In the movie “Her” the film’s hero strikes up an ultimately doomed romantic… Read More "What if your romantic AI chatbot can’t keep a secret?"
Security researchers have warned that the open source ecosystem has become a “structural risk,” after revealing another surge in malicious packages last year. Sonatype said in its 2026 State of the Software Supply Chain report that developers downloaded components 9.8… Read More "Researchers Uncover 454,000+ Malicious Open Source Packages"
Ravie LakshmananFeb 13, 2026Cloud Security / Cyber Espionage A previously unknown threat actor tracked as UAT-9921 has been observed leveraging a new modular framework called VoidLink in its campaigns targeting the technology and financial services sectors, according to findings from… Read More "UAT-9921 Deploys VoidLink Malware to Target Technology and Financial Sectors"
Hidden command-line arguments Beyond target spoofing, Beukema demonstrated a technique for hiding malicious command-line instructions behind legitimate executables. LNK files can launch trusted Windows binaries while passing attacker-controlled instructions through embedded arguments, enabling “living-off-the-land” (LOLBINs) execution without pointing directly to… Read More "Four new reasons why Windows LNK files cannot be trusted"
ESET researchers have identified new MuddyWater activity primarily targeting organizations in Israel, with one confirmed target in Egypt. MuddyWater, also referred to as Mango Sandstorm or TA450, is an Iran-aligned cyberespionage group known for its persistent targeting of government and… Read More "MuddyWater: Snakes by the riverbank"
