#news


PayPal Glitch Exposed Social Security Numbers and Personal Data for Six Months

Feb 23, 2026 // 10:44

PayPal disclosed a significant data exposure incident involving its PayPal Working Capital (PPWC) loan application, where sensitive customer information was accessible for nearly six months. Key Details of […]

Arkanix Stealer: A Short-Lived Infostealer with AI-Assisted Development

Feb 22, 2026 // 18:40

Arkanix Stealer is an emerging Malware-as-a-Service (MaaS) information stealer that surfaced in late 2025. Described by researchers as a “short-lived” operation, it is notable for its rapid […]

AI-Powered Campaign Hijacks 600+ FortiGate Devices Nationwide

Feb 22, 2026 // 14:38

Amazon Threat Intelligence reported that a Russian-speaking, financially motivated threat actor used multiple commercial generative AI services to compromise over 600 FortiGate devices across 55 countries.  Campaign Overview Attack […]

CISA Orders Agencies to Patch Two Critical Roundcube Vulnerabilities

Feb 22, 2026 // 14:31

On February 11, 2026, CISA added two critical vulnerabilities affecting the Roundcube Webmail platform to its Known Exploited Vulnerabilities (KEV) Catalog. These flaws are being leveraged by threat actors to […]

BeyondTrust RCE Flaw (CVE-2026-1731) Actively Exploited for Data Theft and Backdoors

Feb 22, 2026 // 14:27

Threat actors began exploiting a critical vulnerability in BeyondTrust Privileged Remote Access (PRA) and Remote Support solutions to deploy persistent web shells and backdoors. The flaw, tracked as CVE-2025-5231, is […]

Cline CLI 2.3.0 Compromised to Silently Install OpenClaw AI Agent

Feb 22, 2026 // 14:23

On February 17, 2026, the popular AI coding assistant Cline CLI (formerly Claude Dev) was the target of a supply chain attack where an unauthorized version, [email protected], was […]

New “ClickFix” Attack: Don’t Be Fooled by These Compromised Sites

Feb 22, 2026 // 14:20

In February 2026, Elastic Security Labs uncovered a sophisticated ClickFix campaign that hijacks legitimate websites to deploy a previously undocumented remote access trojan (RAT) dubbed MIMICRAT (also known as […]

Malware in Disguise: Hackers Launch Fake RMM Brand to Distribute Stealthy RAT

Feb 21, 2026 // 12:49

In a clever bit of “corporate” rebranding, cybercriminals have launched a professional-looking business website to sell a Remote Access Trojan (RAT) by disguising it as a legitimate Remote […]

AI Espionage: Former Google Engineer Indicted for Heist of Cutting-Edge Secrets

Feb 21, 2026 // 12:46

In a major corporate espionage case, federal prosecutors have charged former Google software engineer Linwei (Leon) Ding with stealing sensitive Artificial Intelligence (AI) trade secrets while secretly working for […]

Google Purges 80,000 Malicious Developer Accounts in Massive Play Store Cleanup

Feb 21, 2026 // 12:36

In a massive security sweep, Google purged approximately 80,000 developer accounts from the Play Store during the fourth quarter of 2025 to combat rising malware […]