⚠️ VULNERABILITY DISCLOSURE 8[−]
23 FebAmazon Kiro Prod Disruption, Claude Code Security, Salt Typhoon Warning, and Youth RadicalizationAI-Accelerated FortiGate Breaches, Amazon Kiro Prod Disruption, Claude Code Security, Salt Typhoon Warning, and Youth Radicalization Risks Episode of Cybersecurity Today (hosted by David Shipley) covering: a Russian-speaking hacker using AI-written automation tools to breach 600+…CYBERSECURITYTODAY.LIBSYN.COM
23 FebWormable XMRig Campaign Uses BYOVD Exploit and Time-Based Logic BombCybersecurity researchers have disclosed details of a new cryptojacking campaign that uses pirated software bundles as lures to deploy a bespoke XMRig miner program on compromised hosts. "Analysis of the recovered dropper, persistence triggers, and mining payload reveals a sophis…THEHACKERNEWS.COM
23 FebMalicious npm Packages Harvest Crypto Keys, CI Secrets, and API TokensCybersecurity researchers have disclosed what they say is an active "Shai-Hulud-like" supply chain worm campaign that has leveraged a cluster of at least 19 malicious npm packages to enable credential harvesting and cryptocurrency key theft. The campaign has been codenamed SANDWO…THEHACKERNEWS.COM
23 FebVPN flaws allowed Chinese hackers to compromise dozens of Ivanti customers, says reportChinese hackers allegedly broke into the network of an Ivanti subsidiary in 2021. The hackers exploited a backdoor in its VPN product, which allowed the hackers to gain access to 119 other unnamed organizations.TECHCRUNCH.COM
23 FebUnseen Devices in Your NetworkSome devices in a network may be untracked, and even monitored devices aren’t always fully covered. Asset inventories aren’t just a formality—they require structured processes and dedicated oversight to ensure accuracy. Gaps in device tracking create hidden risks. Unmonitored dev…YOUTUBE.COM
23 FebBringing intelligence to assets, new White House cybersecurity strategy, and the news - ESW #447Segment 1 - Interview with Tim Morris Bringing intelligence to assets You’ve been through 6 CMDB projects in the last decade. None of them came close to the original goals, the CMDB was already out-of-date long before the project had any hopes of completing. Is building an asset …YOUTUBE.COM
23 FebAI-augmented threat actor accesses FortiGate devices at scalesubmitted by cm0002 to cybersecurity 7 points | 0 comments https://aws.amazon.com/de/blogs/security/ai-augmented-threat-actor-accesses-fortigate-devices-at-scale/ A Russian-speaking cybercrime group compromised over 600 FortiGate devices across 55 countries between January 11-Feb…INFOSEC.PUB
23 FebZDI-26-123: Docker Desktop MCP Server Cleartext Storage of Sensitive Information VulnerabilityThis vulnerability allows local attackers to disclose sensitive information on affected installations of Docker Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CV…ZERODAYINITIATIVE.COM
📢 SECURITY ADVISORIES 1[−]
23 FebOn the Security of Password ManagersGood article on password managers that secretly have a backdoor. New research shows that these claims aren’t true in all cases, particularly when account recovery is in place or password managers are set to share vaults or organize users into groups. The researchers reverse-engin…SCHNEIER.COM
🕵️ THREAT INTELLIGENCE 5[−]
23 FebAnother day, another malicious JPEG, (Mon, Feb 23rd)In his last two diaries, Xavier discussed recent malware campaigns that download JPEG files with embedded malicious payload[ 1 , 2 ]. At that point in time, I've not come across the malicious “MSI image†myself, but while I was…ISC.SANS.EDU
23 FebISC Stormcast For Monday, February 23rd, 2026 https://isc.sans.edu/podcastdetail/9820, (Mon, Feb 23rd)(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.ISC.SANS.EDU
23 FebAI Is Only as Good as Your DataTim Morris explains that AI and automation depend entirely on the quality of underlying data. If your CMDB (Configuration Management Database) or ITSM workflows contain stale or inaccurate asset information, AI systems will still generate decisions — they just won’t be reliable o…YOUTUBE.COM
23 FebMentorship Monday - Discussions for career and learning!submitted by shellsharks to cybersecurity 8 points | 0 comments Weekly thread for any and all career, learning and general guidance questions. Thinking of taking a training or going for a cert? Wondering how to level up your career? Wondering what NOT to do? Got other questions? …INFOSEC.PUB
23 FebWe hid backdoors in ~40MB binaries and asked AI + Ghidra to find themsubmitted by cm0002 to cybersecurity 18 points | 0 comments https://quesma.com/blog/introducing-binaryaudit/INFOSEC.PUB
🌐 CYBER THREAT LANDSCAPE 2[−]
23 Feb⚡ Weekly Recap: Double-Tap Skimmers, PromptSpy AI, 30Tbps DDoS, Docker Malware & MoreSecurity news rarely moves in a straight line. This week, it feels more like a series of sharp turns, some happening quietly in the background, others playing out in public view. The details are different, but the pressure points are familiar. Across devices, cloud services, rese…THEHACKERNEWS.COM
23 FebMuddyWater Targets MENA Organizations with GhostFetch, CHAR, and HTTP_VIPThe Iranian hacking group known as MuddyWater (aka Earth Vetala, Mango Sandstorm, and MUDDYCOAST) has targeted several organizations and individuals mainly located across the Middle East and North Africa (MENA) region as part of a new campaign codenamed Operation Olalampo. The ac…THEHACKERNEWS.COM
📡 INFOSEC NEWS 5[−]
23 FebHow Exposed Endpoints Increase Risk Across LLM InfrastructureAs more organizations run their own Large Language Models (LLMs), they are also deploying more internal services and Application Programming Interfaces (APIs) to support those models. Modern security risks are being introduced less from the models themselves and more from the inf…THEHACKERNEWS.COM
23 FebAmericans are destroying Flock surveillance camerasWhile some cities are moving to end their contracts with Flock over its links to ICE, others are taking matters into their own hands.TECHCRUNCH.COM
23 Feb5 days left to lock in the lowest TechCrunch Disrupt 2026 ticket ratesFive days to save up to $680 on your TechCrunch Disrupt 2026 ticket. These lowest rates of the year disappear on February 27 at 11:59 p.m. PT.TECHCRUNCH.COM
23 FebMalicious OpenClaw Skills Used to Distribute Atomic MacOS StealerMalicious OpenClaw skills trick AI agents and users into installing a new AMOS variant that steals extensive data at scale.TRENDMICRO.COM
23 FebFaking it on the phone: How to tell if a voice call is AI or notCan you believe your ears? Increasingly, the answer is no. Here’s what’s at stake for your business, and how to beat the deepfakers.WELIVESECURITY.COM