Cyber Security News

Palo Alto Networks announced a definitive agreement to acquire Koi Security, a leading innovator in Agentic Endpoint Security, marking a major expansion of its AI‑driven defense portfolio. The move underscores Palo Alto’s commitment to securing the emerging landscape of AI-enabled endpoints. Autonomous tools and agents operate with deep system privileges and often bypass traditional security mechanisms. As […]

The post Paloalto to Acquire Koi Security for Establishing Agentic Endpoint security appeared first on Cyber Security News.

Anthropic has officially launched Claude Sonnet 4.6, its most capable mid-tier model to date, delivering a comprehensive upgrade across coding, computer use, long-context reasoning, agent planning, knowledge work, and design, all at the same price point as its predecessor. The model is now the default on Free and Pro plans at claude.ai and Claude Cowork, […]

The post Anthropic Releases Claude Sonnet 4.6 with Improved Coding, Computer Use, and 1M Token Context Window appeared first on Cyber Security News.

A long-dormant Microsoft Windows vulnerability, CVE-2008-0015, has been added to the Known Exploited Vulnerabilities (KEV) catalog following evidence of active exploitation in the wild. The flaw, first disclosed more than a decade ago, impacts the Windows Video ActiveX Control component and poses a serious Remote Code Execution (RCE) risk. According to CISA, attackers are exploiting the vulnerability by leveraging maliciously […]

The post CISA Adds Windows Video ActiveX Control RCE Flaw to KEV Catalog Following Active Exploitation appeared first on Cyber Security News.

A critical Remote Code Execution (RCE) vulnerability in Mozilla Firefox was caused by a single-character typo in the SpiderMonkey JavaScript engine’s WebAssembly garbage collection code, where a developer mistakenly typed “&” (bitwise AND) instead of “|” (bitwise OR). Security researcher Erge discovered the flaw while examining the Firefox 149 Nightly source code for inspiration for […]

The post Single-Character Typo of “&” Instead of “|” Leads to 0-Day RCE in Firefox appeared first on Cyber Security News.

A new Booking.com‑themed phishing campaign is abusing trust in travel brands to steal money and sensitive data from both hotels and guests. The scheme can start as a service message, but it can end with payment fraud and card exposure. Early lures are sent to hotel reservation or support mailboxes and push staff to click […]

The post New Phishing Campaign Targets Booking.com Partners and Customers in Multi-Stage Financial Fraud Scheme appeared first on Cyber Security News.

Cybersecurity researchers have uncovered a new iteration of the ‘ClickFix’ social engineering campaign, which now employs a sophisticated technique to evade detection by storing malware directly within a victim’s browser cache. This evolution represents a significant and dangerous shift in how threat actors bypass traditional endpoint security measures. By leveraging legitimate browser functionality, attackers can […]

The post Threat Actors Advertising New ‘ClickFix’ Payload That Stores Malware within Browser Cache appeared first on Cyber Security News.

Credit card fraud has persisted despite global mitigation efforts, evolving from scattered illegal trades into a highly organized Carding-as-a-Service (CaaS) economy. This underground structure now mirrors legitimate online marketplaces, providing criminals with streamlined access to stolen payment data, specialized tools, and customer support. The shift has effectively transformed financial crime into a resilient and accessible […]

The post Credit Card Fraud Emerges with a New Sophisticated Carding-as-a-Service Marketplaces appeared first on Cyber Security News.

DigitStealer, a sophisticated information-stealing malware targeting macOS systems, has recently surged in activity, drawing significant attention from the cybersecurity community. First emerging in late 2025, this malicious software specifically targets Apple M2 devices, distinguishing itself from generic threats. It operates primarily by harvesting sensitive user data, including information from 18 different cryptocurrency wallets, browser data, […]

The post DigitStealer Gains Attention as macOS-Targeting Infostealer Exposes Key Infrastructure Weaknesses appeared first on Cyber Security News.

A malicious fork of the legitimate macOS application Triton has surfaced on GitHub, exploiting open-source repositories to distribute malware. The fraudulent repository, created under the account “JaoAureliano,” appeared as a copy of the original Triton app developed by Otávio C. Instead of providing genuine software, the fork redirected users to download a ZIP file containing […]

The post Malware in the Wild as Malicious Fork of Legitimate Triton App Surfaces on GitHub appeared first on Cyber Security News.

At this very moment, a threat actor is probing the external attack surface of an organization that believes its defenses are sufficient. The company has deployed perimeter firewalls and endpoint detection and response (EDR) controls; however, these measures alone do not eliminate risk. Within hours or days, a single successful intrusion can escalate rapidly. An […]

The post How CISOs Can Prevent Incidents with the Right Threat Intelligence appeared first on Cyber Security News.

QR codes have become a normal way to open links, pay bills, and sign in, but that same speed lets attackers push victims from the physical world into a risky web page or app action in seconds. In recent campaigns, the QR image is not the threat by itself; it is a delivery wrapper that […]

The post QR Codes Used to Spread Phishing Attacks and Malicious Apps Across Mobile Devices appeared first on Cyber Security News.

SINGAPORE, Singapore, February 17th, 2026, CyberNewswire The OWASP Smart Contract Security Project has released the OWASP Smart Contract Top 10 2026, a risk prioritization framework developed from structured analysis of real world exploit data observed across blockchain ecosystems in 2025. Crypto protocols continued to experience significant smart contract failures in 2025, with exploit patterns increasingly […]

The post CredShields Contributes to OWASP’s 2026 Smart Contract Security Priorities appeared first on Cyber Security News.

A U.S. law firm has filed a proposed class action alleging that Lenovo’s website tracking and advertising infrastructure enabled “bulk” transfers of Americans’ sensitive identifiers and browsing context to entities tied to China, in violation of the Justice Department’s Data Security Program rules. The complaint, filed by Almeida Law Group on behalf of San Francisco […]

The post US Law Firm Accuses Lenovo of Bulk Data Transfers to China appeared first on Cyber Security News.

Washington DC, USA, February 17th, 2026, CyberNewswire The Cybersecurity Excellence Awards today published early nomination insights from the 2026 program, highlighting a shift in vendor emphasis from broad AI positioning toward governance frameworks, identity architecture, and measurable accountability. Produced by Cybersecurity Insiders, the analysis draws on more than 200 submissions received ahead of RSA Conference […]

The post Cybersecurity Excellence Awards Reveal Nomination Shift from AI Hype to Governance Execution appeared first on Cyber Security News.

A new ransomware operation called 0APT surfaced on the dark web in late January 2026, claiming over 200 breached organizations within its first week. The group established a professional data leak site on a vanity TOR domain and marketed itself as Ransomware-as-a-Service to recruit affiliates. However, security researchers quickly determined that nearly all claimed victims […]

The post 0APT Ransomware Group Claims 200 Victims but Fails to Deliver Any Real Data appeared first on Cyber Security News.

The hotel confirmed that several of its servers were compromised in a ransomware attack, disrupting parts of its internal network and triggering an ongoing investigation into possible data exposure. According to the Washington Hotel Corporation official statement, the incident was first detected around 10:00 PM on Friday, February 13, 2026, when unauthorized access was identified on […]

The post Washington Hotel Located in Japan Suffers Ransomware Attack appeared first on Cyber Security News.

A major vulnerability discovered on the platform of a division of Zota Healthcare exposed sensitive customer and internal system data due to insecure “super admin” APIs. The issue, uncovered by Eaton–Works, allowed anyone to create a privileged super admin account and take full control of the pharmacy’s backend systems. Dava India, which operates more than 2,100 outlets across […]

The post India’s Largest Pharmacy Exposes Customer Personal Details and Access to Internal Systems appeared first on Cyber Security News.

The European Parliament has disabled built‑in artificial intelligence (AI) features on corporate devices used by lawmakers and staff, citing unresolved cybersecurity and data protection risks. The decision targets AI tools embedded in tablets and phones, while leaving essential apps such as email, calendar, and document editors untouched. According to an internal email described in a […]

The post EU Parliament Blocks AI features on Corporate Devices Over Cybersecurity Concerns appeared first on Cyber Security News.

OpenClaw, a fast-rising open-source AI assistant designed to connect to messaging, cloud services, and local system tools, has patched a “log poisoning” weakness that could let remote attackers inject malicious, user-controlled content into logs that the agent may later ingest. The issue is documented in the OpenClaw Security Advisory and affects OpenClaw versions prior to […]

The post Critical “Log Poisoning” Vulnerability in OpenClaw AI Agent Allows Malicious Content Injection appeared first on Cyber Security News.

Cybercriminals have discovered a new attack surface in the world of personal AI assistants. Recent investigations show that infostealers now target OpenClaw configuration files to steal sensitive authentication credentials and personal data. This marks a dangerous evolution in malware behavior, shifting from traditional browser-based credential theft to harvesting complete AI agent identities and their associated […]

The post Threat Actors Attacking OpenClaw Configurations to Steal Login Credentials appeared first on Cyber Security News.