Fake CAPTCHA Scam Tricks Windows Users Into Installing Malware
Image: edhardie/Unsplash A new social engineering campaign is abusing fake CAPTCHA verification pages to trick Windows users into launching StealC...
Month: February 2026
GUEST ESSAY: The hidden risks lurking beneath legal AI — permission sprawl, governance drift
By Ariel Perez In many law firms today, leadership believes their data is secure. Policies are documented, annual reviews...
ShinyHunters leaked 600K+ Canada Goose customer records, but the firm denies it was breached
ShinyHunters leaked 600K+ Canada Goose customer records, but the firm denies it was breached Pierluigi Paganini February 16, 2026 ShinyHunters...
Microsoft alerts on DNS-based ClickFix variant delivering malware via nslookup
Microsoft alerts on DNS-based ClickFix variant delivering malware via nslookup Pierluigi Paganini February 16, 2026 Microsoft warns of a new...
Randall Munroe’s XKCD ‘Aurora Coolness’
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink *** This is a Security...
AI Is Making Security More Agile: Highlights from ChiBrrCon 2026
In 1900, Chicago completed one of the most ambitious engineering projects ever. Engineers reversed the flow of the Chicago...
Infostealer Steals OpenClaw AI Agent Configuration Files and Gateway Tokens
Ravie LakshmananFeb 16, 2026Artificial Intelligence / Threat Intelligence Cybersecurity researchers disclosed they have detected a case of an information stealer...
Study Uncovers 25 Password Recovery Attacks in Major Cloud Password Managers
Ravie LakshmananFeb 16, 2026Vulnerability / Encryption A new study has found that multiple cloud-based password managers, including Bitwarden, Dashlane, and...
Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI Malware
Ravie LakshmananFeb 16, 2026 This week’s recap shows how small gaps are turning into big entry points. Not always through...
Fake ‘Antivirus’ App Spreads Android Malware, Steals Banking Credentials
Image: Nicholas Sutrich/Android Central If you think an app called “Antivirus” means your phone’s safe, think again. Cybercrooks just found...
ClawBands GitHub Project Looks to Put Human Controls on OpenClaw AI Agents
A software engineer has created a lightweight plugin on GitHub aimed at ensuring greater human control of the actions...
ClickFix added nslookup commands to its arsenal for downloading RATs
ClickFix malware campaigns are all about tricking the victim into infecting their own machine. Apparently, the criminals behind these...
2026: When Every AI Agent Becomes a SOX Risk
Boards have spent years asking if people have too much access. In 2026, the harder question is whether your...
Google fixes first actively exploited Chrome zero-day of 2026
Google fixes first actively exploited Chrome zero-day of 2026 Pierluigi Paganini February 16, 2026 Google patched Chrome zero-day CVE-2026-2441, a...
Japanese sex toys maker Tenga discloses data breach
Japanese sex toys maker Tenga discloses data breach Pierluigi Paganini February 16, 2026 Sex toy maker Tenga says a hacker...
