Microsoft: Critical Windows Admin Center Flaw Allows Privilege Escalation
Image: LightFieldStudios/Envato The dashboard designed to command your servers could double as a control panel for attackers. A newly disclosed...
Security
French Ministry confirms data access to 1.2 Million bank accounts
French Ministry confirms data access to 1.2 Million bank accounts Pierluigi Paganini February 18, 2026 A hacker accessed data from...
Notepad++ patches flaw used to hijack update system
Notepad++ patches flaw used to hijack update system Pierluigi Paganini February 18, 2026 Notepad++ patched a vulnerability that attackers used...
Microsoft Patches Security Flaw That Exposed Confidential Emails to AI
Microsoft Corp. confirmed it is addressing a significant security lapse that allowed its Copilot AI to bypass privacy protections...
Microsoft Patches Security Flaw That Exposed Confidential Emails to AI
Microsoft Corp. confirmed it is addressing a significant security lapse that allowed its Copilot AI to bypass privacy protections...
VS Code extensions with 125M+ installs expose users to cyberattacks
VS Code extensions with 125M+ installs expose users to cyberattacks Pierluigi Paganini February 18, 2026 Four popular VS Code extensions...
Randall Munroe’s XKCD ‘Cost Savings’
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink *** This is a Security...
Engineering for the Inevitable: Managing Downstream Failures in Security Data Pipelines
The post Engineering for the Inevitable: Managing Downstream Failures in Security Data Pipelines appeared first on Realm.Security. *** This...
Citizen Lab Finds Cellebrite Tool Used on Kenyan Activist’s Phone in Police Custody
Ravie LakshmananFeb 18, 2026Mobile Security / Spyware New research from the Citizen Lab has found signs that Kenyan authorities used...
Grandstream GXP1600 VoIP Phones Exposed to Unauthenticated Remote Code Execution
Cybersecurity researchers have disclosed a critical security flaw in the Grandstream GXP1600 series of VoIP phones that could allow an...
Critical Flaws Found in Four VS Code Extensions with Over 125 Million Installs
Ravie LakshmananFeb 18, 2026Vulnerability / Software Security Cybersecurity researchers have disclosed multiple security vulnerabilities in four popular Microsoft Visual Studio...
Substack Breach May Have Leaked Nearly 700,000 User Details Online
Image: Freepik A popular home for independent writers is dealing with a security scare. Substack has confirmed that hackers accessed...
China-linked APT weaponized Dell RecoverPoint zero-day since 2024
China-linked APT weaponized Dell RecoverPoint zero-day since 2024 Pierluigi Paganini February 18, 2026 A suspected Chinese state-linked group exploited a...
Keenadu backdoor found preinstalled on Android devices, powers Ad fraud campaign
Keenadu backdoor found preinstalled on Android devices, powers Ad fraud campaign Pierluigi Paganini February 18, 2026 Kaspersky uncovered Keenadu, an...
Dell RecoverPoint for VMs Zero-Day CVE-2026-22769 Exploited Since Mid-2024
Ravie LakshmananFeb 18, 2026Zero-Day / Vulnerability A maximum severity security vulnerability in Dell RecoverPoint for Virtual Machines has been exploited...
