Ravie LakshmananFeb 26, 2026Cybersecurity / Hacking News Nothing here looks dramatic at first glance. That’s the point. Many of this week’s threats begin with something ordinary, like an ad, a meeting invite, or a software update. Behind the scenes, the… Read More "Kali Linux + Claude, Chrome Crash Traps, WinRAR Flaws, LockBit & 15+ Stories"
A newly identified botnet loader is shifting command-and-control (C2) operations onto the Polygon blockchain, eliminating the central servers that authorities and security firms have historically targeted to dismantle malicious networks. Aeternum C2, uncovered by Qrator Research Lab while monitoring cybercrime… Read More "Aeternum Botnet Shifts Command Control to Polygon Blockchain"
Ravie LakshmananFeb 26, 2026Malware / Threat Intelligence A previously undocumented threat activity cluster has been attributed to an ongoing malicious campaign targeting education and healthcare sectors in the U.S. since at least December 2025. The campaign is being tracked by… Read More "UAT-10027 Targets U.S. Education and Healthcare with Dohdoor Backdoor"
More than 32 million high-confidence phishing emails were detected by Darktrace in 2025, showcasing a substantial escalation in identity-driven cyber threats. The data was collected by Darktrace from incidents across its global customer base and points to a year defined by automation, convergence… Read More "Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks"
Ravie LakshmananFeb 26, 2026Malware / Software Security Cybersecurity researchers have disclosed details of a new malicious package discovered on the NuGet Gallery, impersonating a library from financial services firm Stripe in an attempt to target the financial sector. The package,… Read More "Malicious StripeApi NuGet Package Mimicked Official Library and Stole API Tokens"
A forthcoming update to the UK General Data Protection Regulation (GDPR) is about to introduce major changes in the governance of the Information Commissioner’s Office (ICO). The national data protection regulator will move from a single-leader model – under the… Read More "UK’s Data Watchdog Gets a Makeover to Match Growing Demands"
SolarWinds Web Help Desk and OpenClaw flaws are among the vulnerabilities, drawing significant interest by threat actors. Cyble Vulnerability Intelligence researchers tracked 1,093 vulnerabilities in the last week, and well over 200 of the disclosed vulnerabilities already have a publicly available Proof-of-Concept (PoC), significantly increasing the likelihood of real-world attacks on those… Read More "1,000+ Flaws Found, Including Critical IT & ICS Vulnerabilities"
Introduction: Steal It Today, Break It in a Decade Digital evolution is unstoppable, and though the pace may vary, things tend to fall into place sooner rather than later. That, of course, applies to adversaries as well. The rise of… Read More "Expert Recommends: Prepare for PQC Right Now"
Als Hauptgrund für diese Entwicklung führt Crowdstrike den zunehmenden Einsatz von KI-Tools bei Cyberangriffen an. So hätten Angreifer, die KI nutzen, ihre Aktivitäten um 89 Prozent erhöht. Den Sicherheitsforschern zufolge setzen insbesondere staatlich unterstützte und kriminelle Gruppen zunehmend KI ein,… Read More "Hacker kompromittieren immer schneller | CSO Online"
A prolific hacking and cyber-espionage campaign which targeted organizations around the world for almost a decade has been disrupted by Google and its international partners. In a blog post, Google Threat Intelligence Group (GTIG) detailed the malicious activity by UNC2814,… Read More "Google Disrupts ‘Prolific’ and ‘Elusive’ China-Linked Hacking Campaign"
