Multiple Zero-Day Flaws in PDF Platforms Enable XSS and One-Click Attacks
We often think of a PDF file (Portable Document Format file) as a simple digital version of a printed document. However, new research shared with…
Month: February 2026
Gap between upskilling intent and execution in business, says Pluralsight
Organisations understand the importance of giving their employees the opportunity to learn new skills, but many are falling short, according to research. A study from…
Hackers target vulnerabilities in Roundcube Webmail
Threat actors are targeting a critical and high severity vulnerability in Roundcube Webmail, which is widely used in government and higher education, according to security…
Microsoft MFA Down – 504 Gateway Timeout Errors Disrupting MFA Access for U.S. Users
Microsoft is currently investigating a significant service degradation affecting Multi-Factor Authentication (MFA) across its Microsoft 365 suite, with users in the North America region reporting…
AI helps novice threat actor compromise FortiGate devices in dozens of countries
Listen to the article 5 min This audio is auto-generated. Please let us know if you have feedback. A Russian-speaking threat actor used AI to…
New Phishing Framework Starkiller Proxies Real Login Pages to Bypass MFA
A highly sophisticated phishing framework named Starkiller has recently emerged, offering attackers an advanced method to steal credentials and bypass multi-factor authentication. Developed by a…
Spanish police arrest suspected Anonymous members over DDoS attacks on government sites
Spanish police (Guardia Civil) arrested four members of the hacktivist group Anonymous Fénix over DDoS attacks targeting ministries, political parties and public institutions. Police raid…
Romanian hacker pleads guilty to selling access to Oregon state networks
Romanian hacker pleads guilty to selling access to Oregon state networks Pierluigi Paganini February 23, 2026 A Romanian man pleaded guilty to selling admin access…
North Korean Threat Actors Leverage Fake IT Worker Campaigns and Contagious Interview Tactics
North Korean nation-state threat actors have been running a two-part operation — posing as job recruiters while embedding fake workers inside real companies. Since at…
PayPal Confirms Six-Month Data Exposure Linked to Loan System Error
PayPal has officially confirmed a security incident that left the private information of some users exposed for nearly half a year. For your information, this…
Fake troubleshooting tip on ClawHub leads to infostealer infection
A new malware delivery campaign has hit ClawHub, the official online repository for “skills” that augment the capabilities of the popular OpenClaw AI agent. Unlike…
When identity isn’t the weak link, access still is
For years, identity has been treated as the foundation of workforce security. If an organization could reliably confirm who a user was, the assumption followed…