Woolworths splits infosec and physical security again
Woolworths has called time on having a single executive run both physical and information security, following the departure of Pieter van der Merwe at the…
Latest Cybersecurity News — Page 764
View all →
Malicious npm and PyPI packages Llinked to Lazarus APT fake recruiter campaign
Malicious npm and PyPI packages Llinked to Lazarus APT fake recruiter campaign Pierluigi Paganini February 15, 2026 Researchers found malicious npm and PyPI packages tied…
Lumma Stealer and Ninja Browser malware campaign abusing Google Groups
CTM360 reports that more than 4,000 malicious Google Groups and 3,500 Google-hosted URLs are being used in an active malware campaign targeting global organizations. The…
Pastebin comments push ClickFix JavaScript attack to hijack crypto swaps
Threat actors are abusing Pastebin comments to distribute a new ClickFix-style attack that tricks cryptocurrency users into executing malicious JavaScript in their browser, allowing attackers…
Microsoft Discloses DNS-Based ClickFix Attack Using Nslookup for Malware Staging
Microsoft has disclosed details of a new version of the ClickFix social engineering tactic in which the attackers trick unsuspecting users into running commands that…
Security Affairs newsletter Round 563 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 563 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini February 15, 2026 A new round of the weekly Security Affairs newsletter…
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 84
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Stan Ghouls targeting Russia…
Windows 11 KB5077181 Securiuty Update Causing Some Devices to Restart in an Infinite Loop
Windows 11 KB5077181 Security Update Microsoft’s February 10, 2026, security update KB5077181 for Windows 11 versions 24H2 (build 26200.7840) and 25H2 (build 26100.7840) has triggered…
AI Penetration Testing Tool With Prebuilt Attack Playbooks and HexStrike Integration
PentestAgent PentestAgent, an open-source AI agent framework from developer Masic (GH05TCREW), has introduced enhanced capabilities, including prebuilt attack playbooks and seamless HexStrike integration. Released on…
287 Chrome Extensions Caught Harvesting Browsing Data from 37M Users
If you use Google Chrome, there is a one-in-a-hundred chance that a small tool you installed to make life easier is actually a stalker. A…
U.S. CISA adds a flaw in BeyondTrust RS and PRA to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a flaw in BeyondTrust RS and PRA to its Known Exploited Vulnerabilities catalog Pierluigi Paganini February 14, 2026 The U.S. Cybersecurity and…
Fintech firm Figure disclosed data breach after employee phishing attack
Fintech firm Figure disclosed data breach after employee phishing attack Pierluigi Paganini February 14, 2026 Fintech firm Figure confirmed a data breach after hackers used…