A low-skilled cyber threat actor has been observed leveraging several generative AI (GenAI) tools to deploy a malicious campaign aimed at compromising Fortinet’s FortiGate firewall appliances. In an Amazon Web Services (AWS) Security blog published on February 20, CJ Moses,… Read More "Russian Cyber Threat Actor Uses GenAI to Compromise Fortinet Firewalls"
The Hacker NewsFeb 23, 2026Artificial Intelligence / Zero Trust As more organizations run their own Large Language Models (LLMs), they are also deploying more internal services and Application Programming Interfaces (APIs) to support those models. Modern security risks are being… Read More "How Exposed Endpoints Increase Risk Across LLM Infrastructure"
Ein Hacker hat sich Zugriff auf Mitarbeiterdaten von RTL verschafft. nitpicker – shutterstock.com Die RTL Group wurde offenbar Opfer einer Cyberattacke. Wie Cybernews berichtet, brüstet sich ein Cyberkrimineller namens LuneBF mit gestohlenen Daten von mehr als 27.000 Mitarbeitern der Mediengruppe.… Read More "Hacker stiehlt Daten von Tausenden RTL-Mitarbeitern"
Advantest Corporation, the Japanese technology company and prominent manufacturer of testing equipment for the semiconductor industry, has been hit by a ransomware attack. In a statement released on February 19, the company, which is a supplier to major chip producers… Read More "Leading Semiconductor Supplier Advantest Hit by Ransomware Attack"
Cybersecurity researchers have disclosed what they say is an active “Shai-Hulud-like” supply chain worm campaign that has leveraged a cluster of at least 19 malicious npm packages to enable credential harvesting and cryptocurrency key theft. The campaign has been codenamed… Read More "Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API Tokens"
Patch, but verify first Unit 42 directed organizations to Ivanti’s security advisory for remediation guidance, which recommends applying version-specific RPM patches for EPMM 12.x branches that require no appliance downtime. Ivanti cautioned, however, that the patch does not survive a… Read More "Attackers exploit Ivanti EPMM zero-days to seize control of mobile device management servers"
Nearly two-fifths of ATM jackpotting attacks recorded in the US since 2020 occurred last year, the FBI has warned. A new FBI Flash alert claimed that the 700+ attacks seen in 2025 resulted in losses of over $20m. Typically, threat actors deploy… Read More "Jackpotting Surge Costs Banks Over $20m, Warns FBI"
Ravie LakshmananFeb 23, 2026Threat Intelligence / Artificial Intelligence The Iranian hacking group known as MuddyWater (aka Earth Vetala, Mango Sandstorm, and MUDDYCOAST) has targeted several organizations and individuals mainly located across the Middle East and North Africa (MENA) region as… Read More "MuddyWater Targets MENA Organizations with GhostFetch, CHAR, and HTTP_VIP"
“AI can defeat CAPTCHA systems and analyse voice biometrics to compromise authentication,” according to cybersecurity vendor Dispersive. “This capability underscores the need for organizations to adopt more advanced, layered security measures.” Leveraging deepfakes for social engineering AI-generated deepfakes are being… Read More "13 ways attackers use generative AI to exploit your systems"
US and international cybersecurity agencies have issued new guidance to help critical infrastructure operators safely incorporate AI into operational technology (OT) systems. Published on December 3, the guidance was developed collaboratively by the US Cybersecurity and Infrastructure Security Agency (CISA) and… Read More "US and Australia Issue Guidance for Secure AI in Infrastructure"
