Collecting Cyber-News from over 60 sources

Tag: service

Microsoft expands Sovereign Cloud security with governance, local productivity and AI

Feb 24, 2026 3:02 PM

Tags: ai, cloud, governance, infrastructure, microsoft, service

Microsoft expands Microsoft Sovereign Cloud with new disconnected and AI capabilities that help organizations run critical infrastructure, productivity services and large AI … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/24/microsoft-sovereign-cloud-updates-ai-capabilities/
Massive Conduent Data Breach Exfiltrates 8 TB Affects Over 25 Million Americans

Feb 24, 2026 1:02 PM

Tags: breach, business, cyber, cybersecurity, data, data-breach, ransomware, service

A massive data breach at business services giant Conduent has compromised the sensitive personal information of over 25 million Americans, making it one of the largest cybersecurity incidents in recent history. The breach, which went undetected for nearly three months, involves the exfiltration of approximately 8 terabytes of data by the SafePay ransomware group. While…
Operation MacroMaze: APT28 exploits webhooks for covert data exfiltration

Feb 24, 2026 11:02 AM

Tags: data, exploit, group, infrastructure, malware, russia, service, tool

Russia-linked APT28 targeted European entities with a webhook-based macro malware campaign called Operation MacroMaze. Russia-linked APT28 (aka UAC-0001, aka Fancy Bear, Pawn Storm, Sofacy Group, Sednit, BlueDelta, and STRONTIUM) launched Operation MacroMaze, targeting select entities in Western and Central Europe from September 2025 to January 2026. The campaign used webhook-based macro malware, leveraging simple tools and legitimate services for infrastructure and data…
Master Your Passwordless Future: Introducing Thales Authenticator Lifecycle Manager

Feb 24, 2026 10:01 AM

Tags: access, attack, authentication, automation, breach, compliance, container, control, data, fido, Hardware, identity, login, msp, phishing, service, software, tool, zero-trust

Master Your Passwordless Future: Introducing Thales Authenticator Lifecycle Manager madhav Tue, 02/24/2026 – 07:53 The move to passwordless authentication is no longer a distant goal; it’s a present-day necessity. Organizations are rapidly adopting FIDO2 authenticators to defend against phishing and strengthen their security posture. While this shift enhances security, it introduces a new challenge: managing…
ZeroDayRAT Targets Android and iOS Devices for Surveillance and Financial Data Theft

Feb 24, 2026 10:01 AM

Tags: access, android, crime, cyber, data, finance, mobile, rat, service, theft

ZeroDayRAT targets Android and iOS devices, combining real-time surveillance with direct financial theft within a single browser panel. The Malware-as-a-Service (MaaS) ecosystem is entering a new phase, blending mobile surveillance and financial crime into one seamless platform. Active promotions for this RAT (Remote Access Trojan) began on Telegram channels on February 2, 2026, highlighting its dual purpose: real-time spying and direct financial…
The rise of the evasive adversary

Feb 24, 2026 8:01 AM

Tags: access, ai, attack, authentication, breach, china, cloud, credentials, crime, crowdstrike, crypto, data, defense, endpoint, exploit, finance, firewall, group, identity, infrastructure, intelligence, korea, lazarus, leak, mail, malicious, malware, microsoft, monitoring, network, north-korea, open-source, phishing, ransomware, remote-code-execution, russia, saas, service, software, strategy, supply-chain, tactics, theft, threat, tool, update, vpn, vulnerability, windows, zero-day

Big game hunters tighten their grip: CrowdStrike’s research highlights how big game hunting (BGH) ransomware actors have remained the dominant force in the eCrime landscape.Punk Spider, a group responsible for developing and maintaining Russian-language Akira ransomware, and its associated Akira dedicated leak site, conducted 198 intrusions in 2025, a 134% increase year over year. Victim-shaming operations…
Anthropic’s Claude Code Security rollout is an industry wakeup call

Feb 24, 2026 8:01 AM

Tags: ai, attack, backdoor, ceo, ciso, cloud, control, cyber, cybersecurity, detection, exploit, group, LLM, open-source, risk, saas, service, soc, tool, update, vulnerability, zero-day, zero-trust

Anchors security posture to the model: However, those assurances didn’t make all concerns evaporate. “The moment those vibe coders plug a foundation model into their CI pipeline, their entire security posture is no longer anchored only to the company’s code,” I-Gentic AI CEO Zahra Timsah pointed out.”It is anchored to the current behavior of that model.…
What makes Agentic AI capable in secrets scanning

Feb 24, 2026 1:01 AM

Tags: ai, cloud, computing, cybersecurity, finance, framework, healthcare, service

How Can Organizations Securely Manage Non-Human Identities? Have you ever considered how important it is to manage machine identities within your organization’s cybersecurity framework? Non-Human Identities (NHIs) are becoming increasingly crucial with digital evolves, particularly in industries like financial services, healthcare, and cloud-based services. With the surge in cloud computing, the gap between security teams……
APT28 Targeted European Entities Using Webhook-Based Macro Malware

Feb 23, 2026 11:00 PM

Tags: exploit, intelligence, malware, russia, service, threat

The Russia-linked state-sponsored threat actor tracked as APT28 has been attributed to a new campaign targeting specific entities in Western and Central Europe.The activity, per S2 Grupo’s LAB52 threat intelligence team, was active between September 2025 and January 2026. It has been codenamed Operation MacroMaze. “The campaign relies on basic tooling and the exploitation of…
PayPal Ties Small Data Breach and Fraud to App Coding Error

Feb 23, 2026 8:01 PM

Tags: breach, business, data, data-breach, finance, fintech, fraud, service

Fintech Giant Says Personal Data Exposed for About 100 Business Users of Loan App. Financial services firm PayPal said it discovered a data breach that lasted for six months, exposed some business customers’ personal information and led to fraudulent charges. The company said about 100 customers were affected, and that it has fully refunded them…
Cloudflare setzt neuen Standard für SASE und Post-Quanten-Sicherheit

Feb 23, 2026 7:01 PM

Tags: access, service

Cloudflare stellt heute die erste vollständige Secure Access Service Edge (SASE) -Lösung weltweit vor, die moderne Post-Quanten (PQ)-Verschlüsselungsstandards unterstützt. Hintergrund ist: Die Entwicklung leistungsfähiger Quantencomputer schreitet voran und stellt bestehende Verschlüsselungsstandards perspektivisch infrage. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/cloudflare-setzt-neuen-standard-fuer-sase-und-post-quanten-sicherheit/a43798/
Cracks in the Bedrock: Bypassing SCP Enforcement with Long-Lived API Keys

Feb 23, 2026 6:01 PM

Tags: api, control, credentials, iam, service

Introduction Following the release of Amazon Bedrock Powered by AWS Mantle, I discovered a mechanism to bypass Service Control Policy (SCP) statements limiting the use of bedrock-mantle IAM permissions. By leveraging long-lived API keys backed by Service Specific Credentials, I was able to successfully leverage bedrock-mantle:CreateInference despite an SCP statement denying that action. SCPs are……
Deutschsprachiger Entwickler hinter Arkanix-Stealer?

Feb 23, 2026 3:01 PM

Tags: kaspersky, malware, service

Ein neuer Infostealer namens Arkanix wurde öffentlich über Discord beworben und im Malware-as-a-Service-Modell angeboten. Experten von Kaspersky haben die Spuren eines deutschsprachigen Entwicklers gefunden. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/infostealer-arkanix
ManagedDefense für ManagedProvider

Feb 23, 2026 3:01 PM

Tags: defense, endpoint, msp, service

Arctic Wolf gibt neue Endpoint-Sicherheitsfunktionen für seine Managed-Service-Provider-(MSP)-Partner bekannt. Mit der Einführung von Aurora-Managed-Endpoint-Defense, das Teil der Arctic-Wolf-Aurora-Plattform ist, können Partner ihre Kunden künftig noch umfassender schützen, die Servicebereitstellung effizient gestalten und ihr Angebot an Managed-Security-Services weiter ausbauen. Während MSPs ihre Kundenbasis erweitern, kann der Anspruch, jederzeit umfassenden Schutz zu ermöglichen, erhöhten Druck hinsichtlich Margen…
âš¡ Weekly Recap: Double-Tap Skimmers, PromptSpy AI, 30Tbps DDoS, Docker Malware & More

Feb 23, 2026 3:01 PM

Tags: ai, cloud, ddos, docker, malware, risk, service, tool

Security news rarely moves in a straight line. This week, it feels more like a series of sharp turns, some happening quietly in the background, others playing out in public view. The details are different, but the pressure points are familiar.Across devices, cloud services, research labs, and even everyday apps, the line between normal behavior…
How Exposed Endpoints Increase Risk Across LLM Infrastructure

Feb 23, 2026 2:00 PM

Tags: attack, data-breach, endpoint, infrastructure, LLM, programming, risk, service

As more organizations run their own Large Language Models (LLMs), they are also deploying more internal services and Application Programming Interfaces (APIs) to support those models. Modern security risks are being introduced less from the models themselves and more from the infrastructure that serves, connects and automates the model. Each new LLM endpoint expands the…
Attackers exploit Ivanti EPMM zero-days to seize control of MDM servers

Feb 23, 2026 1:01 PM

Tags: advisory, apt, backup, china, control, credentials, cve, exploit, flaw, government, group, ivanti, mobile, network, password, service, software, threat, update, vpn, vulnerability, zero-day

Patch, but verify first: Unit 42 directed organizations to Ivanti’s security advisory for remediation guidance, which recommends applying version-specific RPM patches for EPMM 12.x branches that require no appliance downtime. Ivanti cautioned, however, that the patch does not survive a version upgrade and must be reinstalled if the software is updated. “The permanent fix for…
AI-powered campaign compromises 600 FortiGate systems worldwide

Feb 23, 2026 1:01 PM

Tags: ai, cybercrime, intelligence, russia, service, threat, tool

A Russian-speaking cybercriminal used commercial generative AI tools to hack over 600 FortiGate devices across 55 countries. Amazon Threat Intelligence reports that a Russian-speaking, financially motivated threat actor used commercial generative AI services to compromise more than 600 FortiGate devices in 55 countries. The activity, observed between January 11 and February 18, 2026, highlights how…
HPE Telco Service Activator Vulnerability Allows Attackers to Bypass Access Controls

Feb 23, 2026 11:02 AM

Tags: access, control, cyber, service, vulnerability

Hewlett Packard Enterprise (HPE) has issued a security bulletin warning customers of a serious vulnerability in its Telco Service Activator product that could allow attackers to remotely bypass access restrictions. The vulnerability, identified as CVE-2025-12543, carries a CVSS base score of 9.6 (Critical) and affects versions prior to 10.5.0. This improper input validation could enable attackers to manipulate the server’s handling…
13 ways attackers use generative AI to exploit your systems

Feb 23, 2026 9:01 AM

Tags: access, ai, attack, authentication, awareness, breach, captcha, ceo, chatgpt, ciso, cloud, credentials, crypto, cyber, cyberattack, cybercrime, cybersecurity, dark-web, data, deep-fake, defense, detection, email, espionage, exploit, extortion, finance, flaw, framework, fraud, google, government, group, hacker, identity, infrastructure, intelligence, law, LLM, login, malicious, malware, marketplace, network, open-source, password, phishing, privacy, ransomware, resilience, risk, saas, scam, service, social-engineering, startup, supply-chain, tactics, technology, theft, threat, tool, vulnerability, zero-day

Facilitating malware development: AI can also be used to generate more sophisticated, or less labour-intensive, malware.For example, cybercriminals are using gen AI to create malicious HTML documents. The XWorm attack, initiated by HTML smuggling, which contains malicious code that downloads and runs the malware, bears the hallmarks of development via AI.”The loader’s detailed line-by-line description…
13 ways attackers use generative AI to exploit your systems

Feb 23, 2026 9:01 AM

Tags: access, ai, attack, authentication, awareness, breach, captcha, ceo, chatgpt, ciso, cloud, credentials, crypto, cyber, cyberattack, cybercrime, cybersecurity, dark-web, data, deep-fake, defense, detection, email, espionage, exploit, extortion, finance, flaw, framework, fraud, google, government, group, hacker, identity, infrastructure, intelligence, law, LLM, login, malicious, malware, marketplace, network, open-source, password, phishing, privacy, ransomware, resilience, risk, saas, scam, service, social-engineering, startup, supply-chain, tactics, technology, theft, threat, tool, vulnerability, zero-day

Facilitating malware development: AI can also be used to generate more sophisticated, or less labour-intensive, malware.For example, cybercriminals are using gen AI to create malicious HTML documents. The XWorm attack, initiated by HTML smuggling, which contains malicious code that downloads and runs the malware, bears the hallmarks of development via AI.”The loader’s detailed line-by-line description…
Anthropic unveils Claude Code Security to detect and fix code bugs

Feb 23, 2026 5:01 AM

Tags: ai, flaw, service, software, tool, vulnerability

Anthropic launches Claude Code Security, an AI tool that scans code for vulnerabilities and suggests how to address them. Anthropic has introduced Claude Code Security, a new AI-powered service designed to scan software codebases for vulnerabilities and recommend fixes. Built into Claude Code, the tool aims to help teams detect and remediate security flaws faster.…
NDSS 2025 The Midas Touch: Triggering The Capability Of LLMs For RM-API Misuse Detection

Feb 22, 2026 6:01 PM

Tags: api, china, conference, cyber, detection, framework, Internet, LLM, network, open-source, service, software, tool

Session 13B: API Security Authors, Creators & Presenters: Yi Yang (Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China; School of Cyber Security, University of Chinese Academy of Sciences, China), Jinghua Liu (Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China; School of Cyber Security, University of Chinese Academy of Sciences, China), Kai…
Wikipedia blacklists Archive.today after alleged DDoS attack

Feb 21, 2026 10:01 PM

Tags: attack, ddos, service

Wikipedia editors have decided to remove all links to Archive.today, a web archiving service that they said has been linked to more than 695,000 times across the online encyclopedia. First seen on techcrunch.com Jump to article: techcrunch.com/2026/02/21/wikipedia-blacklists-archive-today-after-alleged-ddos-attack/
Amazon: AI-assisted hacker breached 600 Fortinet firewalls in 5 weeks

Feb 21, 2026 6:02 PM

Tags: ai, firewall, fortinet, hacker, russia, service

Amazon is warning that a Russian-speaking hacker used multiple generative AI services as part of a campaign that breached more than 600 FortiGate firewalls across 55 countries in five weeks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/amazon-ai-assisted-hacker-breached-600-fortigate-firewalls-in-5-weeks/
AI-Assisted Threat Actor Compromises 600+ FortiGate Devices in 55 Countries

Feb 21, 2026 5:00 PM

Tags: ai, exploit, intelligence, russia, service, threat

A Russian-speaking, financially motivated threat actor has been observed taking advantage of commercial generative artificial intelligence (AI) services to compromise over 600 FortiGate devices located in 55 countries.That’s according to new findings from Amazon Threat Intelligence, which said it observed the activity between January 11 and February 18, 2026.”No exploitation of FortiGate First seen on…
Amazon: AI-assisted hacker breached 600 FortiGate firewalls in 5 weeks

Feb 21, 2026 4:00 PM

Tags: ai, firewall, hacker, russia, service

Amazon is warning that a Russian-speaking hacker used multiple generative AI services as part of a campaign that breached more than 600 FortiGate firewalls across 55 countries in five weeks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/amazon-ai-assisted-hacker-breached-600-fortigate-firewalls-in-5-weeks/
‘Starkiller’ Phishing Service Proxies Real Login Pages, MFA

Feb 21, 2026 1:02 PM

Tags: authentication, login, mfa, password, phishing, service

Most phishing websites are little more than static copies of login pages for popular online destinations, and they are often quickly taken down by anti-abuse activists and security firms. But a stealthy new phishing-as-a-service offering lets customers sidestep both of these pitfalls: It uses cleverly disguised links to load the target brand’s real website, and…
How does NHI impact innovation in cloud-native security solutions

Feb 21, 2026 12:02 AM

Tags: cloud, data, finance, healthcare, infrastructure, service

Are Organizations Fully Realizing the Potential of Non-Human Identities in Cloud-Native Security Solutions? Where businesses continually strive for digital transformation, how do they ensure their security infrastructures evolve at the same swift pace when their innovative endeavors? For sectors like financial services, healthcare, and DevOps, where sensitive data is the currency of trust, the stakes……
TDL 016 – Speed, Risk, and Responsibility in the Age of AI – Rafael Ramirez

Feb 20, 2026 9:02 PM

Tags: access, ai, antivirus, automation, awareness, business, ciso, cloud, control, country, cyber, data, defense, detection, dns, firewall, governance, government, hacker, ibm, incident response, intelligence, Internet, law, linkedin, login, mfa, microsoft, network, risk, saas, service, skills, software, startup, strategy, technology, threat, tool, training, update, vulnerability, windows, zero-trust

Summary In a recent episode of The Defenders Log, host David Redekop sat down with cyber security expert Rafael Ramirez to navigate the rapidly shifting landscape of AI security. As we move deeper into 2026, the duo explored how artificial intelligence has evolved from simple chatbots into powerful, autonomous “agentic” systems. The Double-Edged Sword of…