NatWest Bank and the UK’s National Crime Agency (NCA) have launched a joint awareness campaign to highlight the risk of invoice fraud, a cybercrime which costs businesses millions a year. It happens when fraudsters trick individuals or businesses into paying… Read More "National Crime Agency and NatWest Issue Warning Over Invoice Fraud"
A new malicious campaign is spreading malware against people in Iran, likely including non-governmental organizations and individuals involved in documenting recent human rights abuses during the protest wave in the country. The campaign, discovered by the cyber threat research team… Read More "New AI-Developed Malware Campaign Targets Iranian Protests"
Ravie LakshmananFeb 16, 2026Vulnerability / Encryption A new study has found that multiple cloud-based password managers, including Bitwarden, Dashlane, and LastPass, are susceptible to password recovery attacks under certain conditions. “The attacks range in severity from integrity violations to the… Read More "Study Uncovers 25 Password Recovery Attacks in Major Cloud Password Managers"
AI agents able to submit huge numbers of pull requests (PRs) to open-source project maintainers risk creating the conditions for future supply chain attacks targeting important software projects, developer security company Socket has argued. The warning comes after one of… Read More "Open source maintainers being targeted by AI agent as part of ‘reputation farming’"
A new phishing campaign targeting major financial and technology firms has been uncovered by cybersecurity researchers. SOCRadar dubbed the campaign Operation DoppelBrand and said it focused on Fortune 500 companies, including Wells Fargo and USAA, between December 2025 and January 2026, with… Read More "Operation DoppelBrand Weaponizes Trusted Brands For Credential Theft"
Ravie LakshmananFeb 16, 2026Artificial Intelligence / Threat Intelligence Cybersecurity researchers disclosed they have detected a case of an information stealer infection successfully exfiltrating a victim’s OpenClaw (formerly Clawdbot and Moltbot) configuration environment. “This finding marks a significant milestone in the… Read More "Infostealer Steals OpenClaw AI Agent Configuration Files and Gateway Tokens"
Darüber hinaus entdeckte Noma Security eine neue Sicherheitslücke im Zusammenhang mit OpenClaw: Unternehmensinterne Gruppen auf Discord, Telegram oder WhatsApp. Einer der Gründe, warum OpenClaw für Benutzer so attraktiv ist, ist die Möglichkeit, über mehrere Kanäle mit dem System zu interagieren.… Read More "Was CISOs über OpenClaw wissen sollten"
A multi-stage malware loader known as OysterLoader has continued to evolve into early 2026, refining its command-and-control (C2) infrastructure and obfuscation methods. The C++-based threat, also referred to as Broomstick and CleanUp, is primarily linked to campaigns associated with the… Read More "OysterLoader Evolves With New C2 Infrastructure and Obfuscation"
A group of academic security researchers have detailed a set of vulnerabilities in four popular cloud-based password managers that could allow an attacker to view and change the passwords stored in a victim’s vaults. The researchers, from ETH Zurich and… Read More "Vulnerabilities in Password Managers Allow Hackers to Change Passwords"
You are counting on lots of security measures to keep your network safe. The truth is that these measures can still have secret passages that bad people can use to sneak around without being noticed. You can have things like… Read More "How does network behavior monitoring reveal hidden network activity?"
