AI adoption is accelerating faster than enterprise oversight, creating a rapidly widening attack surface across all sectors, said Zscaler in its ThreatLabz 2026 AI Security Report. The annual report, published on January 27, 2026, analyzed 989.3 billion AI and machine… Read More "AI Security Threats Loom as Enterprise Usage Jumps 91%"
„Mit der Abkündigung der klassischen Verschlüsselungsverfahren setzen wir neue Maßstäbe. Die Umstellung auf Verfahren der Post-Quanten-Kryptographie ist alternativlos, die Technische Richtlinie gibt nun konkreten Handlungsbedarf vor“, erklärt BSI-Präsidentin Claudia Plattner. Die TR-02102 dient in vielen Bereichen weltweit als Referenzdokument für… Read More "BSI läutet Ende der klassischen Verschlüsselung ein"
Identity is effectively the new network boundary. It must be protected at all costs. 04 Dec 2025 • , 4 min. read What do M&S and Co-op Group have in common? Aside from being among the UK’s most recognizable high… Read More "Why identity is critical to improving cybersecurity posture"
Over 260,000 Google Chrome users have downloaded fake AI assistants designed to deliver malicious browser extensions which can steal login credentials, monitor emails and enable remote access by attackers. Over 30 Google Chrome extensions designed to deliver the phoney AI… Read More "Fake AI Assistants in Google Chrome Web Store Steal Passwords"
Cybersecurity researchers have discovered a malicious Google Chrome extension that’s designed to steal data associated with Meta Business Suite and Facebook Business Manager. The extension, named CL Suite by @CLMasters (ID: jkphinfhmfkckkcnifhjiplhfoiefffl), is marketed as a way to scrape Meta… Read More "Malicious Chrome Extensions Caught Stealing Business Data, Emails, and Browsing History"
Real root cause analysis is hard. It requires asking “why” until you’re uncomfortable with the answers — the truths — about processes that don’t work, decisions that seemed reasonable at the time and assumptions that were wrong. It requires being… Read More "The foundation problem: How a lack of accountability is destroying cybersecurity"
In 2024, ESET researchers noticed previously undocumented malware in the network of a Southeast Asian governmental entity. This led us to uncover even more new malware on the same system, none of which had substantial ties to any previously tracked… Read More "LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan"
G7 nations have identified cyber threats as the most significant risk they face, for the second consecutive year, Asthe Munich Security Conference (MSC)opened in Germany on February 13, the event’s partner consultancy, Kekst CNC, released the latest edition of its… Read More "Munich Security Conference: Cyber Threats Lead G7 Risk Index"
The Hacker NewsFeb 13, 2026Supply Chain Security / DevSecOps In December 2025, in response to the Sha1-Hulud incident, npm completed a major authentication overhaul intended to reduce supply-chain attacks. While the overhaul is a solid step forward, the changes don’t… Read More "npm’s Update to Harden Their Supply Chain, and Points to Consider"
Attackers integrate AI into malware operations Gemini is being misused in other ways too, Google said, with some bad actors embedding its APIs directly into malicious code. Google identified a new malware family it called HONESTCUE that integrates Gemini’s API… Read More "Google fears massive attempt to clone Gemini AI through model extraction"
