[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> AI Overviews Rife With Scam Phone Numbers
In a new take on an old scam, AI Overviews are inadvertently coughing up fraudulent phone numbers for companies that appear in search queries leading callers to miscreants who elicit sensitive data and payment information.  The post AI Overviews Rife With Scam Phone Numbers appeared first on Securi...
> HackerBot Claw : le bot IA autonome qui a fait disparaître Trivy de GitHub
Découvrez comment HackerBot Claw, un bot IA autonome, a semé la panique sur GitHub. Une menace inédite pour la supply chain logicielle. Le post HackerBot Claw : le bot IA autonome qui a fait disparaître Trivy de GitHub a été publié sur IT-Connect.
> ClawJacked flaw exposed OpenClaw users to data theft
“ClawJacked” flaw let malicious sites hijack OpenClaw AI agents to steal data; patch released in version 2026.2.26. A high-severity vulnerability called ClawJacked in OpenClaw allowed malicious websites to brute-force and take control of local AI agent instances. Oasis Security discovered the flaw,...
> Purpose-built AI Security Agent Detected 92% of DeFi Contracts Vulnerabilities 
Baseline coding agents didn’t fare too well against purpose-built AI security agents in detecting flaws in DeFi contracts underscoring that organizations must not rely on audits and must press AI into use for detecting vulnerabilities.  The post Purpose-built AI Security Agent Detected 92% of DeFi C...
> GEEKOM A5 : le bon plan mini-PC Ă  ne pas rater pour le printemps 2026
Si vous désirez acheter le mini-PC Geekom A5, c'est le moment : une réduction immédiate de 100 euros est proposée pour célébrer l'arrivée du printemps 2026. Le post GEEKOM A5 : le bon plan mini-PC à ne pas rater pour le printemps 2026 a été publié sur IT-Connect.
> Purchase order attachment isn’t a PDF. It’s phishing for your password
A fake purchase order attachment turned out to be a phishing page designed to harvest your login details.
> Digital Outposts: Evaluating the Role of DDoS Attacks in US-Iran Conflict
Background According to the monitoring data from NSFOCUS Fuying Lab, since the outbreak of domestic conflict in Iran in January 2026 and the subsequent escalation of tensions over the nuclear issue between the U.S. and Iran, Iran has been continuously subjected to DDoS attacks. The attack methods ha...
> North Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for Cross-Platform RAT
Cybersecurity researchers have disclosed a new iteration of the ongoing Contagious Interview campaign, where the North Korean threat actors have published a set of 26 malicious packages to the npm registry. The packages masquerade as developer tools, but contain functionality to extract the actual c...
> Ukrainian hacker pleads guilty to running OnlyFake AI ID scam site
Ukrainian citizen Yurii Nazarenko admitted running OnlyFake, an AI-driven site that sold over 10,000 fake IDs worldwide. Ukrainian man Yurii Nazarenko pleaded guilty to operating OnlyFake, an AI-powered site that generated and sold more than 10,000 counterfeit IDs globally. “United States Attorney f...
> Hacker erpressen weniger Lösegeld
immer mehr betroffene Unternehmen und Organisationen folgen dem Rat, kein Lösegeld zu zahlen.fadfebrian – shutterstock.com Laut einem neuen Bericht des Analyseunternehmens Chainalysis konnten Hacker im Jahr 2025 im Zusammenhang mit Ransomware-Angriffen insgesamt 820 Millione...
> Fin de règne pour NTFS ? Windows Server supporte enfin le boot sur ReFS
Pour la première fois, le système de fichiers ReFS peut être utilisé sur la partition de démarrage de Windows Server, à la place de l'habituel NTFS. Le post Fin de règne pour NTFS ? Windows Server supporte enfin le boot sur ReFS a été publié sur IT-Connect.
> A week in security (February 23 – March 1)
A list of topics we covered in the week of February 23 to March 1 of 2026
> Weekly Update 493
Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSiteThe Odido breach leaks were towards the beginning during this week's update. I recorded it the day after the second dump of data had hit, with a third d...
> Lovora - 495,556 breached accounts
In February 2026, the couples and relationship app Lovora allegedly suffered a data breach that exposed 496k unique email addresses. The data also included users’ display names and profile photos, along with other personal information collected through use of the app. The app’s maker, Plantake, did...
> How CISOs can build a resilient workforce
With ongoing skills gaps, AI reshaping roles and workforce stress as standing concerns for many CISOs, ensuring the resilience of the workforce has become top of mind. But due to budget constraints, return to office mandates and teams struggling to keep up with the threat land...
> Your dependencies are 278 days out of date and your pipelines aren’t protected
Applications continue to ship with known weaknesses even as development workflows speed up. A new Datadog State of DevSecOps 2026 report examines how dependency management and pipeline practices are influencing exposure across cloud native environments. Across the environments studied, 87% of organi...
> Security debt is becoming a governance issue for CISOs
Application security backlogs keep expanding across large development portfolios. Veracode’s 2026 State of Software Security Report puts numbers behind a familiar operational pattern, fixes lag discovery, and older weaknesses stay open across release cycles. 2026 findings against the 2025 baseline (...
> Im Fokus: RZ-Modernisierung
> The truly programmable SASE platform
As the only SASE platform with a native developer stack, we’re giving you the tools to build custom, real-time security logic and integrations directly at the edge.
> CrowdStrike Achieves NCSC CIR Assurance for Incident Response