Threat actors now have the ability to exploit a new zero-day vulnerability in the Chrome browser, Google has advised IT administrators. The warning comes after Google released a patch for Chrome to plug a use after free memory vulnerability (CVE-2026-2441)… Read More "Exploit available for new Chrome zero-day vulnerability, says Google"
A prolific China-linked threat group is turning misconfigured servers in European government networks into relay nodes, in order to hide its cyber-espionage activity, according to Check Point. The security vendor claimed Ink Dragon had expanded similar operations in Asia and… Read More "Chinese Ink Dragon Group Hides in European Government Networks"
NatWest Bank and the UK’s National Crime Agency (NCA) have launched a joint awareness campaign to highlight the risk of invoice fraud, a cybercrime which costs businesses millions a year. It happens when fraudsters trick individuals or businesses into paying… Read More "National Crime Agency and NatWest Issue Warning Over Invoice Fraud"
A new malicious campaign is spreading malware against people in Iran, likely including non-governmental organizations and individuals involved in documenting recent human rights abuses during the protest wave in the country. The campaign, discovered by the cyber threat research team… Read More "New AI-Developed Malware Campaign Targets Iranian Protests"
Ravie LakshmananFeb 16, 2026Vulnerability / Encryption A new study has found that multiple cloud-based password managers, including Bitwarden, Dashlane, and LastPass, are susceptible to password recovery attacks under certain conditions. “The attacks range in severity from integrity violations to the… Read More "Study Uncovers 25 Password Recovery Attacks in Major Cloud Password Managers"
AI agents able to submit huge numbers of pull requests (PRs) to open-source project maintainers risk creating the conditions for future supply chain attacks targeting important software projects, developer security company Socket has argued. The warning comes after one of… Read More "Open source maintainers being targeted by AI agent as part of ‘reputation farming’"
A new phishing campaign targeting major financial and technology firms has been uncovered by cybersecurity researchers. SOCRadar dubbed the campaign Operation DoppelBrand and said it focused on Fortune 500 companies, including Wells Fargo and USAA, between December 2025 and January 2026, with… Read More "Operation DoppelBrand Weaponizes Trusted Brands For Credential Theft"
Ravie LakshmananFeb 16, 2026Artificial Intelligence / Threat Intelligence Cybersecurity researchers disclosed they have detected a case of an information stealer infection successfully exfiltrating a victim’s OpenClaw (formerly Clawdbot and Moltbot) configuration environment. “This finding marks a significant milestone in the… Read More "Infostealer Steals OpenClaw AI Agent Configuration Files and Gateway Tokens"
Darüber hinaus entdeckte Noma Security eine neue Sicherheitslücke im Zusammenhang mit OpenClaw: Unternehmensinterne Gruppen auf Discord, Telegram oder WhatsApp. Einer der Gründe, warum OpenClaw für Benutzer so attraktiv ist, ist die Möglichkeit, über mehrere Kanäle mit dem System zu interagieren.… Read More "Was CISOs über OpenClaw wissen sollten"
A multi-stage malware loader known as OysterLoader has continued to evolve into early 2026, refining its command-and-control (C2) infrastructure and obfuscation methods. The C++-based threat, also referred to as Broomstick and CleanUp, is primarily linked to campaigns associated with the… Read More "OysterLoader Evolves With New C2 Infrastructure and Obfuscation"
