Collecting Cyber-News from over 60 sources

Tag: data

Operation MacroMaze: APT28 exploits webhooks for covert data exfiltration

Feb 24, 2026 11:02 AM

Tags: data, exploit, group, infrastructure, malware, russia, service, tool

Russia-linked APT28 targeted European entities with a webhook-based macro malware campaign called Operation MacroMaze. Russia-linked APT28 (aka UAC-0001, aka Fancy Bear, Pawn Storm, Sofacy Group, Sednit, BlueDelta, and STRONTIUM) launched Operation MacroMaze, targeting select entities in Western and Central Europe from September 2025 to January 2026. The campaign used webhook-based macro malware, leveraging simple tools and legitimate services for infrastructure and data…
Master Your Passwordless Future: Introducing Thales Authenticator Lifecycle Manager

Feb 24, 2026 10:01 AM

Tags: access, attack, authentication, automation, breach, compliance, container, control, data, fido, Hardware, identity, login, msp, phishing, service, software, tool, zero-trust

Master Your Passwordless Future: Introducing Thales Authenticator Lifecycle Manager madhav Tue, 02/24/2026 – 07:53 The move to passwordless authentication is no longer a distant goal; it’s a present-day necessity. Organizations are rapidly adopting FIDO2 authenticators to defend against phishing and strengthen their security posture. While this shift enhances security, it introduces a new challenge: managing…
ZeroDayRAT Targets Android and iOS Devices for Surveillance and Financial Data Theft

Feb 24, 2026 10:01 AM

Tags: access, android, crime, cyber, data, finance, mobile, rat, service, theft

ZeroDayRAT targets Android and iOS devices, combining real-time surveillance with direct financial theft within a single browser panel. The Malware-as-a-Service (MaaS) ecosystem is entering a new phase, blending mobile surveillance and financial crime into one seamless platform. Active promotions for this RAT (Remote Access Trojan) began on Telegram channels on February 2, 2026, highlighting its dual purpose: real-time spying and direct financial…
Deserialization Flaw in Ruby Workers That Could Enable Full Compromise

Feb 24, 2026 10:01 AM

Tags: cyber, data, flaw, jobs, remote-code-execution, vulnerability

A severe Remote Code Execution (RCE) vulnerability has been identified in RubitMQ job workers, stemming from unsafe JSON deserialization practices. The issue arises not from memory corruption or complex undefined behavior, but from design-level trust assumptions regarding how data is processed in Ruby background systems. Security researcher NullSecurityX has demonstrated that this flaw allows attackers…
Model Inversion Attacks: Growing AI Business Risk

Feb 24, 2026 9:02 AM

Tags: ai, attack, business, cyber, data, intelligence, risk, threat

In an era where artificial intelligence (AI) and machine learning (ML) are driving unprecedented innovation and efficiency, a new class of cyber threats has emerged that puts sensitive data and entire business operations at serious risk. Among these threats, model inversion attacks have become particularly concerning for organizations that rely on machine learning models trained……
It’s time to rethink CISO reporting lines

Feb 24, 2026 9:02 AM

Tags: ai, business, ceo, cio, ciso, control, cyber, data, governance, infrastructure, jobs, risk, threat, vulnerability

What’s in a reporting line?: Aaron Painter, CEO of security vendor Nametag, contends that reporting structures often mean less than the respect the CISO is granted.Painter is “less dogmatic about where the CISO reports and more focused on whether they actually have a seat at the table,” he says.”Org charts matter far less than influence,”…
The rise of the evasive adversary

Feb 24, 2026 8:01 AM

Tags: access, ai, attack, authentication, breach, china, cloud, credentials, crime, crowdstrike, crypto, data, defense, endpoint, exploit, finance, firewall, group, identity, infrastructure, intelligence, korea, lazarus, leak, mail, malicious, malware, microsoft, monitoring, network, north-korea, open-source, phishing, ransomware, remote-code-execution, russia, saas, service, software, strategy, supply-chain, tactics, theft, threat, tool, update, vpn, vulnerability, windows, zero-day

Big game hunters tighten their grip: CrowdStrike’s research highlights how big game hunting (BGH) ransomware actors have remained the dominant force in the eCrime landscape.Punk Spider, a group responsible for developing and maintaining Russian-language Akira ransomware, and its associated Akira dedicated leak site, conducted 198 intrusions in 2025, a 134% increase year over year. Victim-shaming operations…
Anthropic Facing Allegations from Musk Over Large”‘Scale Data Misuse

Feb 24, 2026 8:01 AM

Tags: ai, china, cyber, data, intelligence, theft, training

Tech billionaire Elon Musk has publicly condemned the artificial intelligence firm Anthropic, accusing the company of massive data theft and hypocrisy. This confrontation follows Anthropic’s recent claims that competing Chinese artificial intelligence models unlawfully extracted training data from its flagship Claude model. The Distillation Controversy Earlier this week, Anthropic published a report accusing Chinese AI…
Odido Faces Alleged Data Breach as ShinyHunters Claims 21M Records Exposed

Feb 24, 2026 8:01 AM

Tags: breach, cyber, cybercrime, data, data-breach, group

A notorious cybercriminal group, ShinyHunters, has claimed responsibility for a massive data breach involving Odido and BEN, exposing millions of customer records. The group asserts that Odido, a Dutch telecommunications provider, was not truthful in its initial disclosure of the incident. This development suggests the breach may be significantly larger and more severe than initially…
Data Breaches in 2026: What’s old, what’s new?

Feb 24, 2026 1:01 AM

Tags: ai, attack, breach, cyber, data, strategy, threat

Data breaches in 2026 explained, new cyber threats, AI driven attacks, common breach causes, and practical security strategies for individuals and businesses First seen on hackread.com Jump to article: hackread.com/data-breaches-2026-whats-old-whats-new/
NDSS 2025 Generating API Specifications For Bug Detection Via Specification Propagation Analysis

Feb 23, 2026 10:02 PM

Tags: api, china, conference, cve, cyber, data, detection, Internet, linux, network, software, threat

Session 13B: API Security Authors, Creators & Presenters: Miaoqian Lin (Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China; School of Cyber Security, University of Chinese Academy of Sciences, China), Kai Chen (Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China; School of Cyber Security, University of Chinese Academy of Sciences, China), Yi…
Randall Munroe’s XKCD ‘Early Arthropods’

Feb 23, 2026 9:02 PM

Tags: data

via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2026/02/randall-munroes-xkcd-early-arthropods/
PayPal Ties Small Data Breach and Fraud to App Coding Error

Feb 23, 2026 8:01 PM

Tags: breach, business, data, data-breach, finance, fintech, fraud, service

Fintech Giant Says Personal Data Exposed for About 100 Business Users of Loan App. Financial services firm PayPal said it discovered a data breach that lasted for six months, exposed some business customers’ personal information and led to fraudulent charges. The company said about 100 customers were affected, and that it has fully refunded them…
Ad tech firm Optimizely confirms data breach after vishing attack

Feb 23, 2026 8:01 PM

Tags: attack, breach, data, data-breach, phishing, threat

New York-based ad tech company Optimizely has notified an undisclosed number of customers of a data breach after threat actors compromised some of its systems in a voice phishing attack. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ad-tech-firm-optimizely-confirms-data-breach-after-vishing-attack/
Over 200K Australian Driver’s Licences Exposed in youX Cyber Breach

Feb 23, 2026 7:01 PM

Tags: breach, cyber, data, data-breach, fraud, phishing

A youX breach exposed sensitive borrower data in Australia, including over 200,000 driver’s licence numbers, raising fraud and phishing risks. The post Over 200K Australian Driver’s Licences Exposed in youX Cyber Breach appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-youx-data-breach-australia-drivers-licence-exposure/
Air CÃ´te d’Ivoire confirms cyberattack following ransomware claims

Feb 23, 2026 7:01 PM

Tags: cyberattack, data, hacker, ransomware

Air CÃ´te d’Ivoire did not respond to requests for comment but released a statement on Friday confirming reports that hackers had breached its systems on February 8. Last week, the INC ransomware gang claimed it stole 208 GB of data from the airline. First seen on therecord.media Jump to article: therecord.media/air-cote-divoire-confirms-cyberattack
Global data protection authorities warn generative AI companies against replicating real people

Feb 23, 2026 7:01 PM

Tags: ai, data

The joint statement comes on the heels of the Grok AI chatbot creating and sharing millions of images of “nudified” real people. First seen on therecord.media Jump to article: therecord.media/data-protection-authorities-warn-ai-companies-of-sharing-images
Global regulators say AI image tools don’t get a free pass on privacy rules

Feb 23, 2026 6:01 PM

Tags: ai, data, law, privacy, tool

Watchdogs warn models that can generate realistic images of people must comply with data protection laws First seen on theregister.com Jump to article: www.theregister.com/2026/02/23/privacy_watchdogs_ai_images/
PayPal Confirms Six-Month Data Exposure Linked to Loan System Error

Feb 23, 2026 5:02 PM

Tags: data, data-breach, finance, leak

PayPal has confirmed a data leak in its Working Capital loan system that exposed names, dates of birth, and Social Security numbers for six months. First seen on hackread.com Jump to article: hackread.com/paypal-confirms-loan-system-error-data-exposure/
Out of the Shadows: How to Safely Migrate Data for AI Deployments

Feb 23, 2026 5:02 PM

Tags: ai, data, governance

As genAI adoption accelerates, organizations must strengthen governance and visibility to prevent shadow AI and protect sensitive data. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/out-of-the-shadows-how-to-safely-migrate-data-for-ai-deployments/
Pure Storage rebrands to Everpure as storage maker’s business expands focus to data management

Feb 23, 2026 5:02 PM

Tags: business, data

Everpure rebrand aims to put the focus on managing data throughout its lifecycle for optimum use, storage, security and sovereignty, with new functionality planned this year First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366639189/Pure-Storage-rebrands-to-Everpure-as-storage-makers-business-expands-focus-to-data-management
Ransomware, Zero-Days, and Data Breaches Shape This Week’s Cybersecurity Landscape

Feb 23, 2026 4:00 PM

Tags: breach, cybersecurity, data, ransomware, zero-day

Weekly summary of Cybersecurity Insider newsletters First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/weekly-roundup/ransomware-zero-days-and-data-breaches-shape-this-weeks-cybersecurity-landscape/
1.2 Million Accounts Exposed in French Bank Registry Breach

Feb 23, 2026 4:00 PM

Tags: access, breach, credentials, data, data-breach, finance, government

Stolen government credentials were used to access France’s FICOBA registry, exposing data tied to roughly 1.2 million bank accounts. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/1-2-million-accounts-exposed-in-french-bank-registry-breach/
Why Your SOC is Blind to Your Biggest Attack Surface (And How to Fix It)

Feb 23, 2026 3:01 PM

Tags: ai, api, attack, business, crowdstrike, data, endpoint, insurance, intelligence, siem, soc, threat, unauthorized, waf

The “Engineering” Trap In many organizations, there is a dangerous unspoken rule: The SOC handles endpoints and networks; Engineering handles APIs. This silo creates a massive blind spot. We recently spoke with the Senior Manager of Security Engineering at a major insurance provider, who described this exact pain point. Before bringing in Salt Security, their…
New Arkanix stealer blends rapid Python harvesting with stealthier C++ payloads

Feb 23, 2026 2:00 PM

Tags: credentials, data, detection, exploit, theft, vpn

The stealer employs a broad data-theft toolkit: The researchers noted that the Python implementation acts as a wide-net data harvester. It collects system information, extracts browser-stored data, and pulls details from communication platforms, including Telegram and Discord. Additional modules target VPN configurations, retrieve selected files from the host, and can deliver other payloads, suggesting the…
Protecting AI Security: 2025 Hot Security Incident

Feb 23, 2026 1:01 PM

Tags: ai, cyber, data, github, leak, malicious, network, security-incident, vulnerability

GitHub MCP Cross-Repository Data Leak Vulnerability In May 2025, Invariant disclosed a critical vulnerability in GitHub’s Machine Collaboration Protocol (MCP), where attackers embedded malicious commands within public repository Issues to hijack developers’ locally running AI Agents. When an AI Agent was triggered to read and “assist” in processing the Issue, it indiscriminately executed the embedded…The…
23rd February Threat Intelligence Report

Feb 23, 2026 11:02 AM

Tags: access, breach, data, data-breach, finance, intelligence, threat, unauthorized

France’s Ministry of Economy has disclosed a data breach resulted from an unauthorized access to the national bank account registry FICOBA, impacting information tied to 1.2 million accounts. Exposed data includes names, […] First seen on research.checkpoint.com Jump to article: research.checkpoint.com/2026/23rd-february-threat-intelligence-report/
13 ways attackers use generative AI to exploit your systems

Feb 23, 2026 9:01 AM

Tags: access, ai, attack, authentication, awareness, breach, captcha, ceo, chatgpt, ciso, cloud, credentials, crypto, cyber, cyberattack, cybercrime, cybersecurity, dark-web, data, deep-fake, defense, detection, email, espionage, exploit, extortion, finance, flaw, framework, fraud, google, government, group, hacker, identity, infrastructure, intelligence, law, LLM, login, malicious, malware, marketplace, network, open-source, password, phishing, privacy, ransomware, resilience, risk, saas, scam, service, social-engineering, startup, supply-chain, tactics, technology, theft, threat, tool, vulnerability, zero-day

Facilitating malware development: AI can also be used to generate more sophisticated, or less labour-intensive, malware.For example, cybercriminals are using gen AI to create malicious HTML documents. The XWorm attack, initiated by HTML smuggling, which contains malicious code that downloads and runs the malware, bears the hallmarks of development via AI.”The loader’s detailed line-by-line description…
13 ways attackers use generative AI to exploit your systems

Feb 23, 2026 9:01 AM

Tags: access, ai, attack, authentication, awareness, breach, captcha, ceo, chatgpt, ciso, cloud, credentials, crypto, cyber, cyberattack, cybercrime, cybersecurity, dark-web, data, deep-fake, defense, detection, email, espionage, exploit, extortion, finance, flaw, framework, fraud, google, government, group, hacker, identity, infrastructure, intelligence, law, LLM, login, malicious, malware, marketplace, network, open-source, password, phishing, privacy, ransomware, resilience, risk, saas, scam, service, social-engineering, startup, supply-chain, tactics, technology, theft, threat, tool, vulnerability, zero-day

Facilitating malware development: AI can also be used to generate more sophisticated, or less labour-intensive, malware.For example, cybercriminals are using gen AI to create malicious HTML documents. The XWorm attack, initiated by HTML smuggling, which contains malicious code that downloads and runs the malware, bears the hallmarks of development via AI.”The loader’s detailed line-by-line description…
The hidden security cost of treating labs like data centers

Feb 23, 2026 8:00 AM

Tags: ciso, data

In this Help Net Security interview, Rich Kellen, VP, CISO at IFF, explains why security teams should not treat OT labs like IT environments. He discusses how compromise can … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/23/rich-kellen-iff-ot-lab-cybersecurity/