📢 Former Google engineer convicted of economic espionage after stealing thousands of secret AI, supercomputing documents 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
Linwei Ding told Chinese investors he could build a worldclass supercomputer.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
Former Google engineer convicted of economic espionage after stealing thousands of secret AI, supercomputing documents
Linwei Ding told Chinese investors he could build a world-class supercomputer
🖋️ China-Linked UAT-8099 Targets IIS Servers in Asia with BadIIS SEO Malware 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have discovered a new campaign attributed to a Chinalinked threat actor known as UAT8099 that took place between late 2025 and early 2026. The activity, discovered by Cisco Talos, has targeted vulnerable Internet Information Services IIS servers located across Asia, but with a specific focus on targets in Thailand and Vietnam. The scale of the campaign is currently.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Researchers Uncover Chrome Extensions Abusing Affiliate Links and Stealing ChatGPT Access 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have discovered malicious Google Chrome extensions that come with capabilities to hijack affiliate links, steal data, and collect OpenAI ChatGPT authentication tokens. One of the extensions in question is Amazon Ads Blocker ID pnpchphmplpdimbllknjoiopmfphellj, which claims to be a tool to browse Amazon without any sponsored content. It was uploaded to the Chrome.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📢 CISA’s interim chief uploaded sensitive documents to a public version of ChatGPT – security experts explain why you should never do that 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
The incident at CISA raises yet more concerns about the rise of shadow AI and data protection risks.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
CISA’s interim chief uploaded sensitive documents to a public version of ChatGPT – security experts explain why you should never…
The incident at CISA raises yet more concerns about the rise of ‘shadow AI’ and data protection risks
❤1
📢 CISA’s interim chief uploaded sensitive documents to a public version of ChatGPT – security experts explain why you should never do that 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
The incident at CISA raises yet more concerns about the rise of shadow AI and data protection risks.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
CISA’s interim chief uploaded sensitive documents to a public version of ChatGPT – security experts explain why you should never…
The incident at CISA raises yet more concerns about the rise of ‘shadow AI’ and data protection risks
📢 CISA’s interim chief uploaded sensitive documents to a public version of ChatGPT – security experts explain why you should never do that 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
The incident at CISA raises yet more concerns about the rise of shadow AI and data protection risks.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
CISA’s interim chief uploaded sensitive documents to a public version of ChatGPT – security experts explain why you should never…
The incident at CISA raises yet more concerns about the rise of ‘shadow AI’ and data protection risks
📔 NSA Publishes New Zero Trust Implementation Guidelines 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
NSA released new guidelines to help organizations achieve targetlevel Zero Trust maturity.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
📔 Notepad++ Update Hijacking Linked to Hosting Provider Compromise 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
A supply chain attack on Notepad update process was linked to compromised hosting infrastructure.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
🖋️ Notepad++ Hosting Breach Attributed to China-Linked Lotus Blossom Hacking Group 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
A Chinalinked threat actor known as Lotus Blossom has been attributed with medium confidence to the recently discovered compromise of the infrastructure hosting Notepad. The attack enabled the statesponsored hacking group to deliver a previously undocumented backdoor codenamed Chrysalis to users of the opensource editor, according to new findings from Rapid7. The development comes shortly.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
❤1
🖋️ Notepad++ Hosting Breach Attributed to China-Linked Lotus Blossom Hacking Group 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
A Chinalinked threat actor known as Lotus Blossom has been attributed with medium confidence to the recently discovered compromise of the infrastructure hosting Notepad. The attack enabled the statesponsored hacking group to deliver a previously undocumented backdoor codenamed Chrysalis to users of the opensource editor, according to new findings from Rapid7. The development comes shortly.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🦿 Hugging Face Repositories Abused in New Android Malware Campaign 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
Attackers exploited Hugging Faces trusted infrastructure to spread an Android RAT, using fake security apps and thousands of malware variants. The post Hugging Face Repositories Abused in New Android Malware Campaign appeared first on TechRepublic.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
Hugging Face Repositories Abused in New Android Malware Campaign
Attackers exploited Hugging Face’s trusted infrastructure to spread an Android RAT, using fake security apps and thousands of malware variants.
📢 Phantom firms: The rise of fraudulent cybersecurity vendors 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
Channel partners need systematic vendor vetting to combat rising phantom firm scams.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
ChannelPro
Phantom firms: The rise of fraudulent cybersecurity vendors
Channel partners need systematic vendor vetting to combat rising phantom firm scams
📢 What security teams need to know about the NSA's new zero trust guidelines 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
The new guidelines aim to move an organization from discovery to targetlevel implementation of zero trust practices.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
What security teams need to know about the NSA's new zero trust guidelines
The new guidelines aim to move an organization from discovery to target-level implementation of zero trust practices
📢 Notepad++ hackers remained undetected and pushed malicious updates for six months – here’s who’s responsible, how they did it, and how to check if you’ve been affected 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
Hackers remained undetected for months and distributed malicious updates to Notepad users after breaching the text editor software here's how to check if you've been affected.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
Notepad++ hackers remained undetected and pushed malicious updates for six months – here’s who’s responsible, how they did it,…
Notepad++ users should ensure they’re running the latest version of the open source software
🖋️ When Cloud Outages Ripple Across the Internet 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Recent major cloud service outages have been hard to miss. Highprofile incidents affecting providers such as AWS, Azure, and Cloudflare have disrupted large parts of the internet, taking down websites and services that many other systems depend on. The resulting ripple effects have halted applications and workflows that many organizations rely on every day. For consumers, these outages are.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ APT28 Uses Microsoft Office CVE-2026-21509 in Espionage-Focused Malware Attacks 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
The Russialinked statesponsored threat actor known as APT28 aka UAC0001 has been attributed to attacks exploiting a newly disclosed security flaw in Microsoft Office as part of a campaign codenamed Operation Neusploit. Zscaler ThreatLabz said it observed the hacking group weaponizing the shortcoming on January 29, 2026, in attacks targeting users in Ukraine, Slovakia, and Romania, three.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Mozilla Adds One-Click Option to Disable Generative AI Features in Firefox 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Mozilla on Monday announced a new controls section in its Firefox desktop browser settings that allows users to completely turn off generative artificial intelligence GenAI features. "It provides a single place to block current and future generative AI features in Firefox," Ajit Varma, head of Firefox, said. "You can also review and manage individual AI features if you choose to use them. This.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Notepad++ Hosting Breach Attributed to China-Linked Lotus Blossom Hacking Group 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
A Chinalinked threat actor known as Lotus Blossom has been attributed with medium confidence to the recently discovered compromise of the infrastructure hosting Notepad. The attack enabled the statesponsored hacking group to deliver a previously undocumented backdoor codenamed Chrysalis to users of the opensource editor, according to new findings from Rapid7. The development comes shortly.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Researchers Find 341 Malicious ClawHub Skills Stealing Data from OpenClaw Users 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
A security audit of 2,857 skills on ClawHub has found 341 malicious skills across multiple campaigns, according to new findings from Koi Security, exposing users to new supply chain risks. ClawHub is a marketplace designed to make it easy for OpenClaw users to find and install thirdparty skills. It's an extension to the OpenClaw project, a selfhosted artificial intelligence AI assistant.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ OpenClaw Bug Enables One-Click Remote Code Execution via Malicious Link 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
A highseverity security flaw has been disclosed in OpenClaw formerly referred to as Clawdbot and Moltbot that could allow remote code execution RCE through a crafted malicious link. The issue, which is tracked as CVE202625253 CVSS score 8.8, has been addressed in version 2026.1.29 released on January 30, 2026. It has been described as a token exfiltration vulnerability that leads to.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Microsoft Begins NTLM Phase-Out With Three-Stage Plan to Move Windows to Kerberos 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Microsoft has announced a threephase approach to phase out New Technology LAN Manager NTLM as part of its efforts to shift Windows environments toward stronger, Kerberosbased options. The development comes more than two years after the tech giant revealed its plans to deprecate the legacy technology, citing its susceptibility to weaknesses that could facilitate relay attacks and allow bad.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity