Cybersecurity News - Page 25

The man allegedly downloaded the files and refused to delete the documents after police told him to do so.

The extensions were capable of automatically subscribing victims to attacker-controlled groups, resetting personal settings, and exploiting weaknesses in VK’s security protections.

Researchers detected a live infection in which an infostealer successfully exfiltrated a victim’s OpenClaw configuration environment.

Microsoft has observed a novel variation that replaces traditional HTTP-based payload delivery with DNS lookups.

The flaw, tracked as CVE-2026-2441, is the first Chrome zero-day patched since the beginning of the year.

The campaign uses basic tooling and legitimate web services to blend malicious activity with normal traffic.

GTIG says that the group is less sophisticated and less resourced than other Russian threat actors.

In brief: Microsoft, Apple, and Fortinet fix zero-days, SolarWinds and Ivanti flaws exploited by hackers, and more.

GreyNoise said it recorded 417 exploitation sessions from eight unique source IP addresses between February 1 and 9, 2026.

The company also noted that two previously disclosed flaws, CVE-2025-14174 and CVE-2025-43529, were exploited in the same incidents.