A guilty plea has been entered by a Minnesota man accused of participating in a large-scale cyber-attack against a fantasy sports and betting platform, according to US prosecutors. The case involves a credential stuffing scheme that led to the compromise… Read More "Third Defendant Pleads Guilty in Fantasy Sports Betting Hack Case"
Ravie LakshmananFeb 17, 2026Enterprise Security / Artificial Intelligence New research from Microsoft has revealed that legitimate businesses are gaming artificial intelligence (AI) chatbots via the “Summarize with AI” button that’s being increasingly placed on websites in ways that mirror classic… Read More "Microsoft Finds “Summarize with AI” Prompts Manipulating Chatbot Recommendations"
In addition to traditional information security responsibilities, such as security operations, security engineering, GRC, and application security, many CISOs now oversee business risk functions, including risk and compliance, third-party risk management, disaster recovery, and product security. “Nearly 30% also have… Read More "With CISOs stretched thin, re-envisioning enterprise risk may be the only fix"
Security researchers claim to have documented a major shift in the infostealer landscape after witnessing the first live attack targeting an OpenClaw configuration environment. Formerly known as Clawdbot and Moltbot, OpenClaw is a popular agentic AI assistant that runs locally… Read More "Infostealer Targets OpenClaw to Loot Victim’s Digital Life"
Internet users have been warned to stay alert to increasingly sophisticated online scams this festive season, after experts observed a torrent of AI-powered content. Check Point claimed to have detected 33,500 unique Christmas-themed phishing emails and over 10,000 seasonal social… Read More "Phishing Messages and Social Ads Flood Users Ahead of Christmas"
Ravie LakshmananFeb 17, 2026Encryption / Mobile Security Apple on Monday released a new developer beta of iOS and iPadOS with support for end-to-end encryption (E2EE) in Rich Communications Services (RCS) messages. The feature is currently available for testing in iOS… Read More "Apple Tests End-to-End Encrypted RCS Messaging in iOS 26.4 Developer Beta"
A US fintech firm with thousands of car dealership clients has revealed a data breach impacting 5.8 million end customers. Michigan-headquartered 700Credit provides credit reporting, identity verification and other services to over 20,000 dealers across the US. It revealed in a… Read More "Millions of Car Owners Hit By Credit700 Data Breach"
A Russian state-sponsored malicious campaign that has been targeting critical infrastructure organizations in Western countries for years has shifted its tactics from vulnerability exploitation to compromising misconfigured customer network edge devices. While the threat actor remains unidentified, Amazon has attributed… Read More "Amazon Warns Russian GRU Hackers Target Western Firms via Edge Devices"
A critical security vulnerability affecting the JumpCloud Remote Assist for Windows agent has been identified, exposing managed endpoints to local privilege escalation and denial-of-service (DoS) attacks. The flaw, tracked as CVE-2025-34352, affects all versions of the agent released before 0.317.0… Read More "JumpCloud Windows Agent Flaw Enables Local Privilege Escalation"
A widely used browser extension marketed as a free VPN has reportedly been collecting and transmitting users’ conversations with major AI chat platforms. According to new research from security firm Koi, the activity could affect millions of users and involve content… Read More "Urban VPN Proxy Accused of Harvesting AI Chat Conversations"
