Security researchers claim to have documented a major shift in the infostealer landscape after witnessing the first live attack targeting an OpenClaw configuration environment. Formerly known as Clawdbot and Moltbot, OpenClaw is a popular agentic AI assistant that runs locally… Read More "Infostealer Targets OpenClaw to Loot Victim’s Digital Life"
Internet users have been warned to stay alert to increasingly sophisticated online scams this festive season, after experts observed a torrent of AI-powered content. Check Point claimed to have detected 33,500 unique Christmas-themed phishing emails and over 10,000 seasonal social… Read More "Phishing Messages and Social Ads Flood Users Ahead of Christmas"
Ravie LakshmananFeb 17, 2026Encryption / Mobile Security Apple on Monday released a new developer beta of iOS and iPadOS with support for end-to-end encryption (E2EE) in Rich Communications Services (RCS) messages. The feature is currently available for testing in iOS… Read More "Apple Tests End-to-End Encrypted RCS Messaging in iOS 26.4 Developer Beta"
A US fintech firm with thousands of car dealership clients has revealed a data breach impacting 5.8 million end customers. Michigan-headquartered 700Credit provides credit reporting, identity verification and other services to over 20,000 dealers across the US. It revealed in a… Read More "Millions of Car Owners Hit By Credit700 Data Breach"
A Russian state-sponsored malicious campaign that has been targeting critical infrastructure organizations in Western countries for years has shifted its tactics from vulnerability exploitation to compromising misconfigured customer network edge devices. While the threat actor remains unidentified, Amazon has attributed… Read More "Amazon Warns Russian GRU Hackers Target Western Firms via Edge Devices"
A critical security vulnerability affecting the JumpCloud Remote Assist for Windows agent has been identified, exposing managed endpoints to local privilege escalation and denial-of-service (DoS) attacks. The flaw, tracked as CVE-2025-34352, affects all versions of the agent released before 0.317.0… Read More "JumpCloud Windows Agent Flaw Enables Local Privilege Escalation"
A widely used browser extension marketed as a free VPN has reportedly been collecting and transmitting users’ conversations with major AI chat platforms. According to new research from security firm Koi, the activity could affect millions of users and involve content… Read More "Urban VPN Proxy Accused of Harvesting AI Chat Conversations"
Threat actors now have the ability to exploit a new zero-day vulnerability in the Chrome browser, Google has advised IT administrators. The warning comes after Google released a patch for Chrome to plug a use after free memory vulnerability (CVE-2026-2441)… Read More "Exploit available for new Chrome zero-day vulnerability, says Google"
A prolific China-linked threat group is turning misconfigured servers in European government networks into relay nodes, in order to hide its cyber-espionage activity, according to Check Point. The security vendor claimed Ink Dragon had expanded similar operations in Asia and… Read More "Chinese Ink Dragon Group Hides in European Government Networks"
