Dutch telecom Odido reported a cyberattack impacting 6.2 million customers. Stolen data includes names, bank accounts, addresses, mobile numbers, and IDs; notifications are underway.
A critical RCE vulnerability in WPvivid Backup & Migration plugin affects over 900,000 WordPress sites. Unauthenticated attackers can achieve remote code execution by uploading arbitrary files.
The AMOS infostealer targets macOS users via popular AI apps and extension marketplaces to harvest credentials. This campaign uses AI lures, fueling the stealer-log cybercrime economy.
Researchers found "CL Suite," a malicious Chrome extension stealing data from Meta Business Suite and Facebook Business Manager. Posing as a utility, it targets sensitive business information.
Threat actors actively exploit a critical pre-authentication RCE flaw in BeyondTrust Remote Support and Privileged Remote Access. WatchTowr confirmed in-the-wild exploitation of the CVSS 9.9 vulnerability.
Microsoft uncovered "AI recommendation poisoning" affecting 31 companies. This new AI abuse manipulates AI-generated summaries, a deceptive tactic easily deployed.
At the Munich Security Conference, G7 countries ranked cyber-attacks as their top security risk; disinformation was third, highlighting escalating digital concerns.
Google reports state-backed actors (UNC2970, APT42) exploit Gemini AI for reconnaissance and attack support, including OSINT and social engineering. HONESTCUE malware generates C# code via Gemini API; AI-built COINBAIT phishing is tracked. Google disabled associated accounts.
CISA added four exploited vulnerabilities to its KEV catalog: Microsoft Configuration Manager SQL Injection (CVE-2024-43468), Notepad++ integrity bypass (CVE-2025-15556), SolarWinds Web Help Desk control bypass (CVE-2025-40536), and an Apple Multiple Buffer Overflow (CVE-2026-20700) zero-day. Federal agencies must patch by early March 2026.
Healthcare firm ApolloMD disclosed a data breach affecting 626,540 patients from a May 2025 cyberattack. Accessed files contained names, birth dates, addresses, diagnoses, treatment info, insurance, and some SSNs. Qilin ransomware claimed responsibility.