New ClickFix attack abuses nslookup to retrieve PowerShell payload via DNS
Threat actors are now abusing DNS queries as part of ClickFix social engineering attacks to deliver malware, making this the first known use of DNS…
Author: Cybernoz
Nobody is Talking About Generalized Hill-Climbing (at Runtime)
All the labs are using a combination of pre-training and RL to create better “general” models. Which means they’re not just good at one thing…
New phishing campaign weaponises fake video conference invites
Netskope Threat Labs has identified a new phishing campaign using fake video conference invitations to deliver remote access tools into corporate environments. According to research,…
BeyondTrust appoints new Partner Manager for Australia and New Zealand
BeyondTrust has appointed Frank Cesarini as Partner Manager for Australia and New Zealand, expanding its regional channel leadership as demand for identity security services continues…
Windows 11 KB5077181 fixes boot failures linked to failed updates
Microsoft says it has resolved a Windows 11 bug that caused some commercial systems to fail to boot with an “UNMOUNTABLE_BOOT_VOLUME” error after installing recent…
Pentagon, Anthropic in battle over AI usage restrictions
The Pentagon is considering ending its relationship with artificial intelligence company Anthropic over its insistence on keeping some restrictions on how the U.S. military uses…
Woolworths splits infosec and physical security again
Woolworths has called time on having a single executive run both physical and information security, following the departure of Pieter van der Merwe at the…
Malicious npm and PyPI packages Llinked to Lazarus APT fake recruiter campaign
Malicious npm and PyPI packages Llinked to Lazarus APT fake recruiter campaign Pierluigi Paganini February 15, 2026 Researchers found malicious npm and PyPI packages tied…
Lumma Stealer and Ninja Browser malware campaign abusing Google Groups
CTM360 reports that more than 4,000 malicious Google Groups and 3,500 Google-hosted URLs are being used in an active malware campaign targeting global organizations. The…
Pastebin comments push ClickFix JavaScript attack to hijack crypto swaps
Threat actors are abusing Pastebin comments to distribute a new ClickFix-style attack that tricks cryptocurrency users into executing malicious JavaScript in their browser, allowing attackers…
Microsoft Discloses DNS-Based ClickFix Attack Using Nslookup for Malware Staging
Microsoft has disclosed details of a new version of the ClickFix social engineering tactic in which the attackers trick unsuspecting users into running commands that…
Security Affairs newsletter Round 563 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 563 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini February 15, 2026 A new round of the weekly Security Affairs newsletter…