A multi-stage phishing campaign is using a sneaky technique to evade detection by security tools and harvest corporate credentials for well-known cloud storage services, researchers have warned. Forcepoint X-Labs issued an alert about the ongoing campaign on February 2, which… Read More "New Password-Stealing Phishing Campaign Targets Dropbox Credentials"
Posted by Dave Kleidermacher, VP Engineering, Android Security & Privacy Today marks a watershed moment and new benchmark for open-source security and the future of consumer electronics. Google is proud to announce that protected KVM (pKVM), the hypervisor that powers… Read More "Android’s pKVM Becomes First Globally Certified Software to Achieve Prestigious SESIP Level 5 Security Certification"
If you operate containers on AWS you’re likely familiar with how vulnerabilities can accumulate. The majority of container images currently include least one critical security flaw. Frequently hidden within a base image or an overlooked dependency. This makes enhancing your AWS container security essential. It’s the method to prevent problems such, as data… Read More "AWS ECR Scanning: The Practical Guide to Securing Your Containers"
In yet another software supply chain attack, the open-source, artificial intelligence (AI)-powered coding assistant Cline CLI was updated to stealthily install OpenClaw, a self-hosted autonomous AI agent that has become exceedingly popular in the past few months. “On February 17,… Read More "Cline CLI 2.3.0 Supply Chain Attack Installed OpenClaw on Developer Systems"
The business social networking site is a vast, publicly accessible database of corporate information. Don’t believe everyone on the site is who they say they are. 16 Jan 2026 • , 4 min. read In November, Britain’s Security Service began… Read More "Why LinkedIn is a hunting ground for threat actors – and how to protect yourself"
ESET researchers have identified an Android malware implant that uses generative AI (GenAI) for persistence purposes. This malicious implant is an advanced version of VNCSpy, a piece of malware that appeared on VirusTotal in January 2026 and was represented by… Read More "Android Malware Hijacks Google Gemini to Stay Hidden"
Posted by Eric Lynch, Senior Product Manager, Android Security, and Sherif Hanna, Group Product Manager, Google C2PA Core At Made by Google 2025, we announced that the new Google Pixel 10 phones will support C2PA Content Credentials in Pixel Camera… Read More "How Pixel and Android are bringing a new level of trust to your images with C2PA Content Credentials"
Security teams today are not failing because they lack tools. Most organizations already have firewalls, EDR, SIEM, cloud monitoring, and multiple detection layers. Yet attackers still manage to enter networks, stay hidden, and move laterally before detection. That gap between… Read More "What Is Fidelis Network Deception and Why Security Teams Use It"
Ravie LakshmananFeb 20, 2026Malware / Threat Intelligence Cybersecurity researchers have disclosed details of a new ClickFix campaign that abuses compromised legitimate sites to deliver a previously undocumented remote access trojan (RAT) called MIMICRAT (aka AstarionRAT). “The campaign demonstrates a high… Read More "ClickFix Campaign Abuses Compromised Sites to Deploy MIMICRAT RAT"
Theoretisch sind all diese Probleme behebbar. Die Autoren der Analyse stellen fest: „Trotz der Geschwindigkeit und Automatisierung, die wir beobachten, beginnen die meisten Vorfälle mit nichts radikal Neuem: Es sind Lücken, die immer wieder auftauchen. In vielen Fällen verließen sich… Read More "KI und Komplexität als Brandbeschleuniger für Cyberkriminelle"
