If your data is on the dark web, it’s probably only a matter of time before it’s abused for fraud or account hijacking. Here’s what to do. 13 Jan 2026 • , 6 min. read Contrary to popular belief, much… Read More "Your information is on the dark web. What happens next?"
Security researchers observed a 30% annual increase in ransomware victims listed on extortion sites last year, with AI helping to lower the barrier to entry for new threat groups. Searchlight Cyber’s new report, Ransomware’s Record Year: Tracking a Volatile Landscape in… Read More "Record Number of Ransomware Victims and Groups in 2025"
Ravie LakshmananFeb 18, 2026Zero-Day / Vulnerability A maximum severity security vulnerability in Dell RecoverPoint for Virtual Machines has been exploited as a zero-day by a suspected China-nexus threat cluster dubbed UNC6201 since mid-2024, according to a new report from Google… Read More "Dell RecoverPoint for VMs Zero-Day CVE-2026-22769 Exploited Since Mid-2024"
Der Angriff konnte zurückgeschlagen werden. Trotzdem mussten Reisende mit Einschränkungen leben. Deutsche Bahn AG/Volker Emersleben Die Störungen der Auskunfts- und Buchungssysteme der Deutschen Bahn sind nach Unternehmensangaben auf einen Cyberangriff zurückzuführen. Inzwischen stehen die Systeme wieder zur Verfügung, wie die… Read More "Cyberangriff auf Bahn stört Auskunftssysteme"
Should verified identities become the standard online? Australia’s social media ban for under-16s shows why the question matters. 14 Jan 2026 • , 5 min. read New legislation in Australia makes it illegal for those under 16 to have a… Read More "Is it time for internet services to adopt identity verification?"
Dell yesterday released a patch for a critical zero-day vulnerability in its RecoverPoint for Virtual Machines product, which Mandiant said has been silently exploited by a Chinese APT group since 2024. CVE-2026-22769 is a hardcoded credential bug with a maximum… Read More "Chinese APT Group Exploits Dell Zero-Day for Two Years"
Ravie LakshmananFeb 18, 2026Vulnerability / Application Security Notepad++ has released a security fix to plug gaps that were exploited by an advanced threat actor from China to hijack the software update mechanism to selectively deliver malware to targets of interest.… Read More "Notepad++ Fixes Hijacked Update Mechanism Used to Deliver Targeted Malware"
When generative AI (GenAI) hit the consumer market with the release of OpenAI’s ChatGPT, users worldwide flocked to the product and started experimenting with the tool’s capabilities across industries. The release also sent an instant panic through the hearts of… Read More "A new approach for GenAI risk protection"
ESET researchers have uncovered an Android spyware campaign leveraging romance scam tactics to target individuals in Pakistan. The campaign uses a malicious app posing as a chat platform that allows users to initiate conversations with specific “girls” – fake profiles… Read More "Fake dating app used as lure in targeted spyware campaign in Pakistan"
A months-long supply chain attack that affected the Notepad++ update process has been linked to a compromise of shared hosting infrastructure rather than a flaw in the software’s code. This according to an ongoing investigation involving external security experts and the… Read More "Notepad++ Update Hijacking Linked to Hosting Provider Compromise"
