Collecting Cyber-News from over 60 sources

Tag: data

Ransomware, Zero-Days, and Data Breaches Shape This Week’s Cybersecurity Landscape

Feb 23, 2026 4:00 PM

Tags: breach, cybersecurity, data, ransomware, zero-day

Weekly summary of Cybersecurity Insider newsletters First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/weekly-roundup/ransomware-zero-days-and-data-breaches-shape-this-weeks-cybersecurity-landscape/
1.2 Million Accounts Exposed in French Bank Registry Breach

Feb 23, 2026 4:00 PM

Tags: access, breach, credentials, data, data-breach, finance, government

Stolen government credentials were used to access France’s FICOBA registry, exposing data tied to roughly 1.2 million bank accounts. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/1-2-million-accounts-exposed-in-french-bank-registry-breach/
Why Your SOC is Blind to Your Biggest Attack Surface (And How to Fix It)

Feb 23, 2026 3:01 PM

Tags: ai, api, attack, business, crowdstrike, data, endpoint, insurance, intelligence, siem, soc, threat, unauthorized, waf

The “Engineering” Trap In many organizations, there is a dangerous unspoken rule: The SOC handles endpoints and networks; Engineering handles APIs. This silo creates a massive blind spot. We recently spoke with the Senior Manager of Security Engineering at a major insurance provider, who described this exact pain point. Before bringing in Salt Security, their…
New Arkanix stealer blends rapid Python harvesting with stealthier C++ payloads

Feb 23, 2026 2:00 PM

Tags: credentials, data, detection, exploit, theft, vpn

The stealer employs a broad data-theft toolkit: The researchers noted that the Python implementation acts as a wide-net data harvester. It collects system information, extracts browser-stored data, and pulls details from communication platforms, including Telegram and Discord. Additional modules target VPN configurations, retrieve selected files from the host, and can deliver other payloads, suggesting the…
Protecting AI Security: 2025 Hot Security Incident

Feb 23, 2026 1:01 PM

Tags: ai, cyber, data, github, leak, malicious, network, security-incident, vulnerability

GitHub MCP Cross-Repository Data Leak Vulnerability In May 2025, Invariant disclosed a critical vulnerability in GitHub’s Machine Collaboration Protocol (MCP), where attackers embedded malicious commands within public repository Issues to hijack developers’ locally running AI Agents. When an AI Agent was triggered to read and “assist” in processing the Issue, it indiscriminately executed the embedded…The…
23rd February Threat Intelligence Report

Feb 23, 2026 11:02 AM

Tags: access, breach, data, data-breach, finance, intelligence, threat, unauthorized

France’s Ministry of Economy has disclosed a data breach resulted from an unauthorized access to the national bank account registry FICOBA, impacting information tied to 1.2 million accounts. Exposed data includes names, […] First seen on research.checkpoint.com Jump to article: research.checkpoint.com/2026/23rd-february-threat-intelligence-report/
13 ways attackers use generative AI to exploit your systems

Feb 23, 2026 9:01 AM

Tags: access, ai, attack, authentication, awareness, breach, captcha, ceo, chatgpt, ciso, cloud, credentials, crypto, cyber, cyberattack, cybercrime, cybersecurity, dark-web, data, deep-fake, defense, detection, email, espionage, exploit, extortion, finance, flaw, framework, fraud, google, government, group, hacker, identity, infrastructure, intelligence, law, LLM, login, malicious, malware, marketplace, network, open-source, password, phishing, privacy, ransomware, resilience, risk, saas, scam, service, social-engineering, startup, supply-chain, tactics, technology, theft, threat, tool, vulnerability, zero-day

Facilitating malware development: AI can also be used to generate more sophisticated, or less labour-intensive, malware.For example, cybercriminals are using gen AI to create malicious HTML documents. The XWorm attack, initiated by HTML smuggling, which contains malicious code that downloads and runs the malware, bears the hallmarks of development via AI.”The loader’s detailed line-by-line description…
13 ways attackers use generative AI to exploit your systems

Feb 23, 2026 9:01 AM

Tags: access, ai, attack, authentication, awareness, breach, captcha, ceo, chatgpt, ciso, cloud, credentials, crypto, cyber, cyberattack, cybercrime, cybersecurity, dark-web, data, deep-fake, defense, detection, email, espionage, exploit, extortion, finance, flaw, framework, fraud, google, government, group, hacker, identity, infrastructure, intelligence, law, LLM, login, malicious, malware, marketplace, network, open-source, password, phishing, privacy, ransomware, resilience, risk, saas, scam, service, social-engineering, startup, supply-chain, tactics, technology, theft, threat, tool, vulnerability, zero-day

Facilitating malware development: AI can also be used to generate more sophisticated, or less labour-intensive, malware.For example, cybercriminals are using gen AI to create malicious HTML documents. The XWorm attack, initiated by HTML smuggling, which contains malicious code that downloads and runs the malware, bears the hallmarks of development via AI.”The loader’s detailed line-by-line description…
The hidden security cost of treating labs like data centers

Feb 23, 2026 8:00 AM

Tags: ciso, data

In this Help Net Security interview, Rich Kellen, VP, CISO at IFF, explains why security teams should not treat OT labs like IT environments. He discusses how compromise can … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/23/rich-kellen-iff-ot-lab-cybersecurity/
TikTok’s New U.S. Deal and Privacy Policy: What Users Don’t Understand

Feb 23, 2026 7:02 AM

Tags: data, privacy, update

TikTok has shifted to a majority-American entity, TikTok USDS Joint Venture, LLC, to comply with U.S. national security requirements and avoid a ban. This week we discuss why a recent privacy policy update went viral”, especially language about sensitive data like immigration status and precise location”, and argue much of it reflects longstanding practices and…
128M Users Exposed as Popular VS Code Extensions Reveal Critical Flaws

Feb 23, 2026 5:01 AM

Tags: api, business, cve, cyber, data, data-breach, flaw, supply-chain, vulnerability

Serious vulnerabilities in four popular Visual Studio Code (VS Code) extensions, affecting over 128 million downloads. These flaws, including three assigned CVEs CVE-2025-65715, CVE-2025-65716, and CVE-2025-65717, highlight IDEs as the weakest link in organizational supply chain security. Developers often store sensitive data like API keys, business logic, database configs, and even customer info right in…
Cache Deception Flaw in SvelteKit And Vercel Stack Exposes User Data

Feb 23, 2026 5:01 AM

Tags: cyber, data, flaw, framework, vulnerability

A cache deception vulnerability in SvelteKit apps deployed on Vercel exposes sensitive user data to attackers. The flaw allows publicly cached responses to be authenticated. SvelteKit, a full-stack JavaScript framework, often pairs with Vercel for deployment. The issue stems from the Vercel adapter in SvelteKit, where the __pathname query parameter overrides the request path without any checks.…
Mississippi Healthcare System Shuts Down Clinics After Ransomware Attack

Feb 22, 2026 11:02 PM

Tags: attack, cybercrime, data, healthcare, intelligence, ransomware

The University of Mississippi Medical Center shut down operations at its 35 medical clinics around the state following a ransomware attack. Healthcare facilities are top targets for cybercriminals, who look to steal the sensitive data they hold for both money and intelligence gathering. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/mississippi-healthcare-system-shuts-down-clinics-after-ransomware-attack/
Security Affairs newsletter Round 564 by Pierluigi Paganini INTERNATIONAL EDITION

Feb 22, 2026 4:01 PM

Tags: cisa, data, email, exploit, finance, flaw, international, kev, vulnerability, WeeklyReview

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. U.S. CISA adds RoundCube Webmail flaws to its Known Exploited Vulnerabilities catalog PayPal discloses extended data…
UK council faces data breach claim after mishandling trans complaints

Feb 22, 2026 11:02 AM

Tags: breach, data, data-breach

Confidential complainant details passed to local politician following debate First seen on theregister.com Jump to article: www.theregister.com/2026/02/22/cornwall_council_complaints_breach/
Is your travel data safe with Agentic AI

Feb 22, 2026 5:02 AM

Tags: ai, data, intelligence, privacy

How Secure Is Your Travel Data with Agentic AI? Can we truly rely on Agentic AI to keep our travel data secure? The rise of artificial intelligence in managing personal and sensitive data has led to increased concerns about privacy and security. While we continue our journey through digital, it’s crucial to evaluate the effectiveness……
CISA Adds Two Actively Exploited Roundcube Flaws to KEV Catalog

Feb 21, 2026 10:01 AM

Tags: cisa, cve, cybersecurity, data, exploit, flaw, infrastructure, kev, software, vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Roundcube webmail software to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.The vulnerabilities in question are listed below -CVE-2025-49113 (CVSS score: 9.9) – A deserialization of untrusted data vulnerability that allows remote code First seen on thehackernews.com…
PayPal Flaw Exposed Email Addresses, Social Security Numbers for 6 Months

Feb 21, 2026 6:02 AM

Tags: data, data-breach, email, finance, flaw, software

PayPal disclosed a software error in its Working Capital platform that exposed sensitive customer data, including Social Security numbers, for months in 2025. The post PayPal Flaw Exposed Email Addresses, Social Security Numbers for 6 Months appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-paypal-working-capital-data-exposure-2025/
Why Legacy Software Modernization is Critical for Data Security

Feb 21, 2026 5:01 AM

Tags: data, email, software, tool

An in-depth Suped review covering features, pricing, pros and cons, and real-world use cases. Discover whether Suped is the right email deliverability tool for your business. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/why-legacy-software-modernization-is-critical-for-data-security/
How assured is your data with NHIs in place

Feb 21, 2026 12:02 AM

Tags: business, cybersecurity, data, strategy

Are You Adequately Protecting Your Organization with NHI Management? Where information is a cornerstone for business operations, safeguarding data has become paramount for organizations across various industries. How do Non-Human Identities (NHIs) play a role, and why should cybersecurity teams incorporate NHI management into their strategy? Understanding Non-Human Identities in Cybersecurity When we talk about……
How does NHI impact innovation in cloud-native security solutions

Feb 21, 2026 12:02 AM

Tags: cloud, data, finance, healthcare, infrastructure, service

Are Organizations Fully Realizing the Potential of Non-Human Identities in Cloud-Native Security Solutions? Where businesses continually strive for digital transformation, how do they ensure their security infrastructures evolve at the same swift pace when their innovative endeavors? For sectors like financial services, healthcare, and DevOps, where sensitive data is the currency of trust, the stakes……
PayPal discloses extended data leak linked to Loan App glitch

Feb 21, 2026 12:02 AM

Tags: breach, business, data, data-breach, email, finance, flaw, leak, phone, software

PayPal disclosed a six-month data breach that exposed sensitive user data, including Social Security numbers, due to a software error. PayPal has disclosed a data breach caused by a software bug in its PayPal Working Capital loan app. The flaw exposed sensitive customer information, including customers’ business contact details (name, email, phone number, address), along…
PayPal Flaw Exposed Sensitive Data in Lending App for Six Months

Feb 20, 2026 11:01 PM

Tags: data, data-breach, finance, flaw

A PayPal loan app error exposed sensitive customer data, including SSNs, for nearly six months in 2025. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/paypal-flaw-exposed-sensitive-data-in-lending-app-for-six-months/
TDL 016 – Speed, Risk, and Responsibility in the Age of AI – Rafael Ramirez

Feb 20, 2026 9:02 PM

Tags: access, ai, antivirus, automation, awareness, business, ciso, cloud, control, country, cyber, data, defense, detection, dns, firewall, governance, government, hacker, ibm, incident response, intelligence, Internet, law, linkedin, login, mfa, microsoft, network, risk, saas, service, skills, software, startup, strategy, technology, threat, tool, training, update, vulnerability, windows, zero-trust

Summary In a recent episode of The Defenders Log, host David Redekop sat down with cyber security expert Rafael Ramirez to navigate the rapidly shifting landscape of AI security. As we move deeper into 2026, the duo explored how artificial intelligence has evolved from simple chatbots into powerful, autonomous “agentic” systems. The Double-Edged Sword of…
Randall Munroe’s XKCD ‘Double-Pronged Extension Cord’

Feb 20, 2026 8:02 PM

Tags: data

via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2026/02/randall-munroes-xkcd-double-pronged-extension-cord/
ShinyHunters demands $1.5M not to leak Vegas casino and resort chain data

Feb 20, 2026 8:02 PM

Tags: data, leak

What happens in Vegas”¦ First seen on theregister.com Jump to article: www.theregister.com/2026/02/20/shinyhunters_wynn_resorts/
Metadata Exposes Authors of ICE’s ‘Mega’ Detention Center Plans

Feb 20, 2026 8:02 PM

Tags: data

Comments and other data left on a PDF detailing Homeland Security’s proposal to build “mega” detention and processing centers reveal the personnel involved in its creation. First seen on wired.com Jump to article: www.wired.com/story/metadata-exposes-authors-of-ices-mega-detention-center-plans/
BeyondTrust Flaw Used for Web Shells, Backdoors, and Data Exfiltration

Feb 20, 2026 7:01 PM

Tags: access, backdoor, cve, data, exploit, flaw, malicious, threat, vulnerability

Threat actors have been observed exploiting a recently disclosed critical security flaw impacting BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) products to conduct a wide range of malicious actions, including deploying VShell and The vulnerability, tracked as CVE-2026-1731 (CVSS score: 9.9), allows attackers to execute operating system commands in the context of the…
BeyondTrust Flaw Used for Web Shells, Backdoors, and Data Exfiltration

Feb 20, 2026 7:01 PM

Tags: access, backdoor, cve, data, exploit, flaw, malicious, threat, vulnerability

Threat actors have been observed exploiting a recently disclosed critical security flaw impacting BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) products to conduct a wide range of malicious actions, including deploying VShell and The vulnerability, tracked as CVE-2026-1731 (CVSS score: 9.9), allows attackers to execute operating system commands in the context of the…
Using threat modeling and prompt injection to audit Comet

Feb 20, 2026 7:01 PM

Tags: access, ai, attack, captcha, control, data, defense, detection, email, endpoint, exploit, framework, injection, Internet, law, least-privilege, LLM, malicious, ml, monitoring, privacy, RedTeam, risk, social-engineering, threat, tool, training, update, vulnerability

Before launching their Comet browser, Perplexity hired us to test the security of their AI-powered browsing features. Using adversarial testing guided by our TRAIL threat model, we demonstrated how four prompt injection techniques could extract users’ private information from Gmail by exploiting the browser’s AI assistant. The vulnerabilities we found reflect how AI agents behave…