APT28 Targeted European Entities Using Webhook-Based Macro Malware
Ravie LakshmananFeb 23, 2026Malware / Threat Intelligence The Russia-linked state-sponsored threat actor tracked as APT28 has been attributed to a...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Microsoft Copilot Ignored Sensitivity Labels, Processed Confidential Emails
Image: Rawpixel/Envato For weeks, Microsoft 365 Copilot quietly read, summarized, and surfaced emails that organizations had explicitly marked as confidential....
Conduent Breach Surges to Over 25M, Could Be Largest in US History
Image: Adobe Stock The data breach that rocked government IT contractor Conduent back in January 2025 just keeps growing, and...
Why Anthropic’s Claude Code Security matters and what it means for Mend.io customers
TL;DR:Anthropic’s launch of Claude Code Security signals a major shift: AI is moving directly into the developer workflow as...
NDSS 2025 – Generating API Specifications For Bug Detection Via Specification Propagation Analysis
Session 13B: API Security Authors, Creators & Presenters: Miaoqian Lin (Institute of Information Engineering, Chinese Academy of Sciences, Beijing,...
Romanian hacker pleads guilty to selling access to Oregon state networks
Romanian hacker pleads guilty to selling access to Oregon state networks Pierluigi Paganini February 23, 2026 A Romanian man pleaded...
Randall Munroe’s XKCD ‘Early Arthropods’
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink *** This is a Security...
The Apple-Google AI Deal: What $1 Billion Says About Who’s Really Winning the AI Race
On January 12, 2026, Apple made a decision that shocked Silicon Valley: they chose Google's Gemini to power the...
Beyond Remediation: How Mitigation Controls Close the Gap in Segregation of Duties Compliance
Managing Segregation of Duties risk doesn’t always mean removing access. Sometimes, the smarter path is monitoring the risk you’ve...
Apple, the storage company
Happy customers don’t mind too much There’s nothing particularly wrong with that. Critics moaning about Apple’s famed low storage levels...
Wormable XMRig Campaign Uses BYOVD Exploit and Time-Based Logic Bomb
Cybersecurity researchers have disclosed details of a new cryptojacking campaign that uses pirated software bundles as lures to deploy a...
⚡ Weekly Recap: Double-Tap Skimmers, PromptSpy AI, 30Tbps DDoS, Docker Malware & More
Ravie LakshmananFeb 23, 2026Cybersecurity / Hacking Security news rarely moves in a straight line. This week, it feels more like...
Over 200K Australian Driver’s Licences Exposed in youX Cyber Breach
image: envato by Image-Source Sydney-based fintech platform youX has confirmed that unauthorized access to its systems led to the exposure...
Confronting Vault Sprawl And The Risks It Brings
Modern enterprises do not set out to create a maze of credentials, keys, and secrets stores. However, this is...
How SmugMug Strengthened Email Authentication and Deliverability with EasyDMARC
Originally published at How SmugMug Strengthened Email Authentication and Deliverability with EasyDMARC by Sona Mirzoyan. About the Customer Company:...