Usually, when you see a feel-good story about finding a lost dog, you don’t immediately react with fear and revulsion. But that was indeed the case in response to a Super Bowl commercial from Amazon-owned security camera company Ring. There’s… Read More "A $10K Bounty Awaits Anyone Who Can Hack Ring Cameras to Stop Sharing Data With Amazon"
Posted by Nathan Parker, Chrome security team Chrome has been advancing the web’s security for well over 15 years, and we’re committed to meeting new challenges and opportunities with AI. Billions of people trust Chrome to keep them safe by… Read More "Architecting Security for Agentic Capabilities in Chrome"
“Most teams have far more integrations than they realize, and many retain broad privileges long after the original business need,” he pointed out. “In parallel, we should raise the security bar for any SaaS vendor we rely on, [with] clear… Read More "New phishing campaign tricks employees into bypassing Microsoft 365 MFA"
A long-running malware operation known as SystemBC has been linked to more than 10,000 infected IP addresses worldwide, including systems associated with sensitive government infrastructure. According to new research by Silent Push, the findings reinforce concerns about the malware’s continued… Read More "Global SystemBC Botnet Found Active Across 10,000 Infected Systems"
“Lin cannot seriously dispute that the decision to allow opioid sales on Incognito was his own,” the prosecution’s filing reads. “And, Lin made that decision knowing full well that encouraging opioids is tantamount to welcoming fentanyl poisonings.” Yet portions of… Read More "An FBI ‘Asset’ Helped Run a Dark Web Site That Sold Fentanyl-Laced Drugs for Years"
Posted by Liz Prucka, Hamzeh Zawawy, Rishika Hooda, Android Security and Privacy Team Last year, Google’s Android Red Team partnered with Arm to conduct an in-depth security analysis of the Mali GPU, a component used in billions of Android devices… Read More "Google Online Security Blog: Further Hardening Android GPUs"
Ravie LakshmananFeb 19, 2026Vulnerability / Network Security Microsoft has disclosed a now-patched security flaw in Windows Admin Center that could allow an attacker to escalate their privileges. Windows Admin Center is a locally deployed, browser-based management tool set that lets… Read More "Microsoft Patches CVE-2026-26119 Privilege Escalation in Windows Admin Center"
Although appearing to be a re-naming of the existing initiative, CAISI’s mandate is now wider, and more overtly political. Bluntly, “CAISI aims to foster the emerging ecosystem of industry-led AI standards and protocols while cementing US dominance at the technological… Read More "US dominance of agentic AI at the heart of new NIST initiative"
A critical security flaw affecting Docker’s Ask Gordon AI assistant has been disclosed by cybersecurity researchers, revealing how unverified metadata can be turned into executable instructions. The issue, dubbed DockerDash by Noma Labs, exposes weaknesses across the full AI execution… Read More "DockerDash Exposes AI Supply Chain Weakness In Docker’s Ask Gordon"
Posted by Chrome Root Program Team Secure connections are the backbone of the modern web, but a certificate is only as trustworthy as the validation process and issuance practices behind it. Recently, the Chrome Root Program and the CA/Browser Forum… Read More "HTTPS certificate industry phasing out less secure domain validation methods"
