A sophisticated fraud campaign exploiting Indonesia’s official Coretax tax platform has led to an estimated nationwide financial impact of $1.5m to $2m. According to findings released by Group-IB, the operation began in July 2025 and intensified in January 2026 during the… Read More "Industrial-Scale Fake Coretax Apps Drive $2m Fraud in Indonesia"
A newly observed variant of Remcos RAT has introduced real-time surveillance features and stronger evasion techniques, marking a shift in how the malware operates on compromised Windows systems. The updated strain no longer relies primarily on storing stolen data locally.… Read More "Remcos RAT Expands Real-Time Surveillance Capabilities"
Ravie LakshmananFeb 19, 2026Cybersecurity / Hacking News The cyber threat space doesn’t pause, and this week makes that clear. New risks, new tactics, and new security gaps are showing up across platforms, tools, and industries — often all at the… Read More "OpenSSL RCE, Foxit 0-Days, Copilot Leak, AI Password Flaws & 20+ Stories"
CredShields announces that the OWASP Smart Contract Security Project has officially released the OWASP Smart Contract Top 10 2026, a risk prioritization framework derived from structured analysis of 2025 smart contract incidents representing hundreds of millions in contract related losses.… Read More "CredShields Leads OWASP Smart Contract Top 10 2026 as Governance and Access Failures Drive Onchain Risk"
A newly uncovered phishing kit allows cybercriminals to steal usernames and passwords with a toolkit which spoofs live login pages and bypasses multi-factor authentication (MFA) protections, cybersecurity analysts have warned. Dubbed Starkiller, the phishing platform has been detailed by researchers… Read More "Starkiller: New ‘Commercial-Grade’ Phishing Kit Bypasses MFA"
Vulnerabilities affecting n8n, OpenSSL and GNU Inetutils are among the flaws being noticed by threat actors and security researchers alike. Cyble Vulnerability Intelligence researchers tracked 1,147 vulnerabilities in the last week, and more than 128 of the disclosed vulnerabilities already have a publicly available Proof-of-Concept (PoC), significantly increasing the likelihood of real-world attacks. … Read More "Top IT Vulnerabilities This Week"
Wenn CISOs stärkere Programme, bessere Widerstandsfähigkeit und eine sicherere Zukunft wollen, müssen sie ihren Ansatz weiterentwickeln. Overearth – shutterstock.com Cybersicherheit wird oft wie ein Spiel behandelt. Unternehmen jagen schnellen Erfolgen hinterher, haken Compliance-Listen ab oder klopfen sich nach einem einzigen… Read More "Cybersicherheit braucht Reife und keine Checklisten"
The number of industrial control system (ICS) security advisories published in 2025 topped 500 for the first time since records began, with the severity of vulnerabilities also increasing, according to Forescout. The security vendor revealed the findings in its new report,… Read More "Industrial Control System Vulnerabilities Hit Record Highs"
A new report published Tuesday finds that while violent threats to public servants across the US have been increasing, “comprehensive” state-level consumer privacy laws do not provide adequate protections for those civil servants, creating a “data-to-violence pipeline.” The report was… Read More "How Data Brokers Can Fuel Violence Against Public Servants"
Critical SolarWinds, Ivanti EPMM, Microsoft Office, and Siemens ICS vulnerabilities are being discussed on underground forums, while 15 CISA ICS advisories impacted Energy and Critical Manufacturing sectors. Cyble Research & Intelligence Labs (CRIL) tracked 1,158 vulnerabilities last week. Of these, 251 vulnerabilities already… Read More "The Week In Vulnerabilities: SolarWinds, Ivanti, And Critical ICS Exposure"
