Randall Munroe’s XKCD ‘Cost Savings’
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink *** This is a Security...
Security
Engineering for the Inevitable: Managing Downstream Failures in Security Data Pipelines
The post Engineering for the Inevitable: Managing Downstream Failures in Security Data Pipelines appeared first on Realm.Security. *** This...
Citizen Lab Finds Cellebrite Tool Used on Kenyan Activist’s Phone in Police Custody
Ravie LakshmananFeb 18, 2026Mobile Security / Spyware New research from the Citizen Lab has found signs that Kenyan authorities used...
Grandstream GXP1600 VoIP Phones Exposed to Unauthenticated Remote Code Execution
Cybersecurity researchers have disclosed a critical security flaw in the Grandstream GXP1600 series of VoIP phones that could allow an...
Critical Flaws Found in Four VS Code Extensions with Over 125 Million Installs
Ravie LakshmananFeb 18, 2026Vulnerability / Software Security Cybersecurity researchers have disclosed multiple security vulnerabilities in four popular Microsoft Visual Studio...
Substack Breach May Have Leaked Nearly 700,000 User Details Online
Image: Freepik A popular home for independent writers is dealing with a security scare. Substack has confirmed that hackers accessed...
China-linked APT weaponized Dell RecoverPoint zero-day since 2024
China-linked APT weaponized Dell RecoverPoint zero-day since 2024 Pierluigi Paganini February 18, 2026 A suspected Chinese state-linked group exploited a...
Keenadu backdoor found preinstalled on Android devices, powers Ad fraud campaign
Keenadu backdoor found preinstalled on Android devices, powers Ad fraud campaign Pierluigi Paganini February 18, 2026 Kaspersky uncovered Keenadu, an...
Dell RecoverPoint for VMs Zero-Day CVE-2026-22769 Exploited Since Mid-2024
Ravie LakshmananFeb 18, 2026Zero-Day / Vulnerability A maximum severity security vulnerability in Dell RecoverPoint for Virtual Machines has been exploited...
3 Ways to Start Your Intelligent Workflow Program
Security, IT, and engineering teams today are under relentless pressure to accelerate outcomes, cut operational drag, and unlock the full...
Notepad++ Fixes Hijacked Update Mechanism Used to Deliver Targeted Malware
Ravie LakshmananFeb 18, 2026Vulnerability / Application Security Notepad++ has released a security fix to plug gaps that were exploited by...
CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update
Ravie LakshmananFeb 18, 2026Threat Intelligence / Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security...
SmartLoader hackers clone Oura MCP project to spread StealC malware
SmartLoader hackers clone Oura MCP project to spread StealC malware Pierluigi Paganini February 17, 2026 Hackers used a fake Oura...
The AI Exchange: Innovators in Payment Security Featuring Bank of America
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature...
Poorly crafted phishing campaign leverages bogus security incident report
Poorly crafted phishing campaign leverages bogus security incident report Pierluigi Paganini February 17, 2026 Attackers used a fake PDF incident...
