View CSAF Summary Successful exploitation of this vulnerability could result in an over- or under-odorization event. The following versions of Welker OdorEyes EcoSystem Pulse Bypass System with XL4 Controller are affected: OdorEyes EcoSystem Pulse Bypass System with XL4 Controller vers:all/*…
EnOcean SmartServer IoT
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to remotely execute arbitrary code and bypass ASLR. The following versions of EnOcean SmartServer IoT are affected: SmartServer IoT <=4.60.009 (CVE-2026-20761, CVE-2026-22885) CVSS Vendor Equipment Vulnerabilities v3 8.1…
OpenClaw’s Top Skill is a Malware that Stole SSH Keys, and Opened Reverse Shells in 1,184 Packages
The most downloaded AI agent skill on OpenClaw’s ClawHub marketplace was functional malware, not a productivity tool. OpenClaw, an open-source AI agent platform, operates a public skill marketplace called ClawHub, where third-party developers can publish plugins, or “skills,” that extend…
Flickr Discloses Third-Party Breach Exposing User Names, Emails
Photo-sharing platform Flickr has disclosed a potential data breach involving a third-party email service provider that may have exposed sensitive user information. The incident, reported on February 6, 2026, stems from a vulnerability in a system operated by this…
Spain Ministry of Science Cyberattack Triggers IT Shutdown, Hacker Claims Data Breach
A cyberattack targeting the Ministry of Science, Innovation and Universities has led to a partial shutdown of government IT infrastructure, interrupting essential digital services relied upon by researchers, universities, students, and businesses nationwide. Authorities initially referred to the disruption…
China Raises Security Concerns Over Rapidly Growing OpenClaw AI Tool
A fresh alert from China’s tech regulators highlights concerns around OpenClaw, an open-source AI tool gaining traction fast. Though built with collaboration in mind, its setup flaws might expose systems to intrusion. Missteps during installation may lead to unintended…
Running OpenClaw safely: identity, isolation, and runtime risk
Self-hosted agents execute code with durable credentials and process untrusted input. This creates dual supply chain risk, where skills and external instructions converge in the same runtime. As OpenClaw-like systems enter enterprises, governance and runtime isolation become critical. The post…
New e-book: Establishing a proactive defense with Microsoft Security Exposure Management
Read the new maturity-based guide that helps organizations move from fragmented, reactive security practices to a unified exposure management approach that enables proactive defense. The post New e-book: Establishing a proactive defense with Microsoft Security Exposure Management appeared first on Microsoft Security Blog.…
Huntress, Microsoft Detail the Continued Popularity, Evolution of ClickFix Attacks
ClickFix, an attack technique used to trick victims into pasting or clicking on malicious commands, has rapidly become a favorite method of threat groups. Recent reports by Huntress, Microsoft, and Intego detail how quickly the ClickFix tactic is evolving. The…
The Chicken Littles of Silicon Valley: Why AI Doomsayers Are Repeating History’s Greatest Mistake
The sky has never been falling. Yet here we are again, watching a new generation of prognosticators prophecy civilizational collapse while evidence of human adaptability and economic dynamism surrounds them. Salon’s recent piece about “swarms of AI bots threatening democracy”…
The AI world’s ‘connective tissue’ is woefully insecure, Cisco warns
In a new report, the company also said businesses should beware of the “SolarWinds of AI.” This article has been indexed from Cybersecurity Dive – Latest News Read the original article: The AI world’s ‘connective tissue’ is woefully insecure, Cisco…
Palo Alto Networks CEO sees AI as demand driver, not a threat
During a quarterly investor call, Nikesh Arora addressed growing concerns in the investment community that AI could hurt demand for software and, more specifically, cybersecurity. This article has been indexed from Cybersecurity Dive – Latest News Read the original article:…
IT Security News Hourly Summary 2026-02-19 18h : 8 posts
8 posts were published in the last hour 16:34 : Figure Data Breach Exposes Nearly 1 Million Customers Online 16:34 : INTERPOL Operation Red Card 2.0: Turning Collaboration into Real-World Cybercrime Disruption 16:34 : Beyond CVE China’s Dual Vulnerability Databases…
Figure Data Breach Exposes Nearly 1 Million Customers Online
Fintech lender Figure suffered a social-engineering breach that led to a data dump online. Have I Been Pwned found 967,200 exposed email records. The post Figure Data Breach Exposes Nearly 1 Million Customers Online appeared first on TechRepublic. This article…
INTERPOL Operation Red Card 2.0: Turning Collaboration into Real-World Cybercrime Disruption
INTERPOL’s Operation Red Card 2.0 has led to 651 arrests, major fraud infrastructure takedowns, and millions of dollars in losses recovered. Learn how Fortinet and partners helped turn threat intelligence into real-world cybercrime disruption. This article has been indexed…
Beyond CVE China’s Dual Vulnerability Databases Reveal a Different Disclosure Timeline
The emergence of a distinct vulnerability disclosure ecosystem within China has introduced a complex layer to the global threat landscape. Unlike the centralized CVE system used internationally, China maintains two separate databases—the CNVD and CNNVD—which operate with different disclosure timelines…
Android malware taps Gemini to navigate infected devices
The real deal or another research project overblown? Cybersecurity researchers say they’ve spotted the first Android malware strain that uses generative AI to improve performance once installed. But it may be only a proof of concept.… This article has been…
NDSS 2025 – Defending Against Backdoor Attacks On Graph Neural Networks Via Discrepancy Learning
Session 12D: ML Backdoors Authors, Creators & Presenters: Hao Yu (National University of Defense Technology), Chuan Ma (Chongqing University), Xinhang Wan (National University of Defense Technology), Jun Wang (National University of Defense Technology), Tao Xiang (Chongqing University), Meng Shen (Beijing…
Microsoft reveals critical Windows Admin Center vulnerability (CVE-2026-26119)
Microsoft has disclosed a privilege-escalation vulnerability in Windows Admin Center (WAC), a browser-based platform widely used by IT administrators and infrastructure teams to manage Windows clients, servers, clusters, Hyper-V hosts and virtual machines, as well as Active Directory-joined systems. Although…
Remcos RAT Expands Real-Time Surveillance Capabilities
New Remcos RAT variant enhances real-time surveillance and evasion techniques to compromise Windows This article has been indexed from www.infosecurity-magazine.com Read the original article: Remcos RAT Expands Real-Time Surveillance Capabilities
Sex toys maker Tenga says hacker stole customer information
The Japanese sex toy maker said a hacker broke into an employee’s inbox and stole customer names, email addresses, and correspondence, including order details and customer service inquiries. This article has been indexed from Security News | TechCrunch Read the…
Adapt, Protect, and Extend: How Partners Can Help Orgs Unlock ROI from AI
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from Blog Read the original article: Adapt, Protect, and Extend: How Partners Can Help Orgs Unlock ROI from…
Ivanti EPMM Vulnerabilities Actively Exploited in the Wild
Ivanti EPMM flaws are being exploited to enable unauthenticated remote code execution on exposed MDM systems. The post Ivanti EPMM Vulnerabilities Actively Exploited in the Wild appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read…
Bug in student admissions website exposed children’s personal information
Ravenna Hub, which lets parents apply and track the status of their kids’ applications across thousands of schools, allowed any logged-in user to access the personally identifiable data associated with any other user, including their children. This article has been…