Cybersecurity News - Page 6

News•Feb 25, 2026

Arctic Wolf Snaps up Sevco Security to Bolster Exposure Management

Arctic Wolf announced the acquisition of Texas‑based Sevco Security, a cloud‑native exposure assessment specialist, for an undisclosed amount. Sevco’s platform, recognized as a Gartner Visionary in 2025, will be folded into Arctic Wolf’s Aurora platform to unify asset intelligence, vulnerability context, and control coverage. The integration aims to give managed‑service providers and enterprise customers real‑time visibility and prioritized remediation across hybrid environments. This deal follows Arctic Wolf’s 2025 purchases of Cylance and UpSight, reinforcing its broader consolidation strategy.

By ITPro (UK)

News•Feb 25, 2026

Chinese Group’s ChatGPT Use Reveals Worldwide Harassment Campaign Against Critics

OpenAI’s latest threat report reveals a Chinese law‑enforcement unit using ChatGPT to edit internal briefings and draft a propaganda push against Japan’s prime minister. The single account uploaded dozens of operation reports, exposing a coordinated effort involving mass posting, bogus...

By CyberScoop

News•Feb 25, 2026

EnforceAuth Free Version Gives Enterprises AI-Native Auth for AI Agents, Machine Identities & Non-Human Workloads

EnforceAuth announced a free tier of its AI Security Fabric, giving enterprises a vendor‑neutral platform to govern AI agents, automated workflows, and machine identities. The solution shifts from traditional access control to decision‑centric authorization, evaluating each action with full context...

By MarTech Series

News•Feb 25, 2026

The Missing Link Moves Into Infosys’ North Sydney Office

Cyber‑security specialist The Missing Link, acquired by Infosys in May 2025, has moved from Artarmon to Infosys’ North Sydney office. The relocation creates an upgraded Global Security Operations Centre offering 24/7 monitoring and services aligned with the Australian Signals Directorate’s Essential Eight....

By ARN (Australia)

News•Feb 25, 2026

Boards Don’t Need Cyber Metrics — They Need Risk Signals

Security teams flood boards with counts of attacks, patches, and alerts, but executives need signals that translate those numbers into business risk. Experts argue that time‑based metrics like detection and containment speed, and financial exposure indicators, better reveal whether risk...

By CSO Online

News•Feb 25, 2026

U.S. Sanctions Russian Broker Over Zero-Day Exploits Theft

The United States has sanctioned Russian cyber‑exploit broker Operation Zero, its director Sergey Zelenyuk, and a UAE‑based front company for stealing eight zero‑day vulnerabilities from a U.S. defense contractor. Australian insider Peter Williams allegedly sold the exploits for roughly $1.3 million...

By The Cyber Express

News•Feb 25, 2026

Threat Actors Exploit Apache ActiveMQ Vulnerability to Gain RDP Access, Deploy LockBit Ransomware

Threat actors leveraged the critical Apache ActiveMQ flaw CVE‑2023‑46604 to achieve remote code execution, download a Metasploit stager via CertUtil, and gain SYSTEM privileges on a Windows host. After dumping LSASS credentials, they moved laterally using a harvested domain‑admin account,...

By GBHackers On Security

News•Feb 25, 2026

OAuth Vulnerabilities in Entra ID Could Exploit ChatGPT to Breach User Email Accounts

Security researchers have identified a new OAuth consent attack vector in Microsoft Entra ID where a legitimate service principal such as ChatGPT is granted high‑risk Graph permissions like Mail.Read. By tricking users into approving a consent screen, attackers obtain persistent...

By GBHackers On Security

News•Feb 25, 2026

Secfix Raises $12M Series A to Build End-to-End Security Compliance Platform

Munich‑based Secfix closed an oversubscribed $12 million Series A round led by Alstin Capital, with Bayern Kapital and existing backer neosfer participating. The funding will accelerate Secfix’s European expansion and the development of its AI‑native automation and CISO‑as‑a‑Service capabilities. Secfix’s platform automates...

By Tech.eu

News•Feb 25, 2026

Microsoft Alerts Developers of Malicious Next.js Repositories Used in Ongoing Hacker Attacks

Microsoft Defender has identified a coordinated campaign that weaponizes seemingly legitimate Next.js repositories to compromise developers. The malicious projects, often presented as interview assessments, exploit Visual Studio Code workspace automation, build‑time scripts, and server startup routines to fetch and execute...

By GBHackers On Security

News•Feb 25, 2026

From the Outside In: A Smarter Approach to Vendor Access

Security teams increasingly view vendors and contractors as the most vulnerable entry points, exposing gaps in traditional employee‑centric access controls. Boon Edam advocates an “outside‑in” strategy that places layered verification at the perimeter, limiting tailgating and ad‑hoc credential use. By shifting...

By Security Magazine – Building Security

News•Feb 25, 2026

Fake Zoom Meeting Silently Installs Surveillance Software, Says Malwarebytes

Malwarebytes uncovered a new fake‑Zoom meeting scam that silently installs a covert build of the Teramind employee‑monitoring tool on Windows workstations. Victims are lured by a realistic Zoom waiting room, then an automatic “Update Available” countdown triggers a silent download...

By CSO Online

News•Feb 25, 2026

Ransomware Is the Invoice for Compounding Technical Debt

Ransomware attacks are increasingly being framed as the overdue invoice for years of accumulated technical debt. Experts highlight that identity sprawl, inconsistent patching, and legacy backup systems create fertile ground for ransomware to cripple organisations. A Rubrik survey found 95%...

By ARN (Australia)

News•Feb 25, 2026

Beyond the Queue: Smarter Security Will Ultimately Shape the Future of Global Air Travel

Airports in 2026 face a rapidly evolving threat matrix that blends physical, digital and human risks, from sophisticated stowaways and drone incursions to a 600% surge in cyber‑attacks. Balancing passenger convenience with robust security is no longer optional—it defines the...

By CAPA – Centre for Aviation

News•Feb 25, 2026

Sektor Signs up Concentric AI to A/NZ Distie Portfolio

Sektor has entered a distribution agreement with AI and data‑security‑governance vendor Concentric AI to serve the Australian and New Zealand market. As an authorised distributor, Sektor will equip its channel partners with enablement, go‑to‑market support and local expertise, positioning Concentric AI’s platform for...

Cybersecurity News and Headlines

Cybersecurity Pulse

Arctic Wolf Snaps up Sevco Security to Bolster Exposure Management

Chinese Group’s ChatGPT Use Reveals Worldwide Harassment Campaign Against Critics

EnforceAuth Free Version Gives Enterprises AI-Native Auth for AI Agents, Machine Identities & Non-Human Workloads

The Missing Link Moves Into Infosys’ North Sydney Office

Boards Don’t Need Cyber Metrics — They Need Risk Signals

U.S. Sanctions Russian Broker Over Zero-Day Exploits Theft

Threat Actors Exploit Apache ActiveMQ Vulnerability to Gain RDP Access, Deploy LockBit Ransomware

OAuth Vulnerabilities in Entra ID Could Exploit ChatGPT to Breach User Email Accounts

Secfix Raises $12M Series A to Build End-to-End Security Compliance Platform

Microsoft Alerts Developers of Malicious Next.js Repositories Used in Ongoing Hacker Attacks

From the Outside In: A Smarter Approach to Vendor Access

Fake Zoom Meeting Silently Installs Surveillance Software, Says Malwarebytes

Ransomware Is the Invoice for Compounding Technical Debt

Beyond the Queue: Smarter Security Will Ultimately Shape the Future of Global Air Travel

Sektor Signs up Concentric AI to A/NZ Distie Portfolio

Phishing Campaign Targets Freight and Logistics Orgs in the US, Europe

What Does Business Email Compromise Look Like?

What Are the Types of Ransomware Attacks?

Q&A: Palo Alto’s Eric Trexler Urges Identity-First, AI-Secure, Platformized Cyberdefenses

US Imposes Cyber-Related Sanctions on Russian, UAE Individuals and Entities

1Password’s Annual Subscription Plans Are Getting a Price Hike Next Month

Lift Cybersecurity, Warns Report

Discord Is Delaying Its Controversial Age Verification Methods Due to Backlash: ‘We’ve Made Mistakes’

DISA's $201M Browser Contract Shows Resellers Still Have a Role to Play

ADVP Expects Digital Identity Consultation to Play by Rules of Data Act, DIATF

Blumira Lands in Pax8 Marketplace, MSPs Get a Scalable Path to Managed SIEM

‘It’s Not over’: Cyber Info-Sharing Center Begins ‘Next Chapters’ After Losing Federal Funding

Accelerating Federal Cloud Modernization

Cost of Insider Incidents Surges 20% to Nearly $20m

Google Patches Three High-Severity Chrome Flaws

Marquis Sues Firewall Provider SonicWall, Alleges Security Failings with Its Firewall Backup Led to Ransomware Attack

Greater Pittsburgh Orthopaedic Associates Disclosed a 2025 Breach, but Was There Also One in 2024?

Multifaceted Phishing Scheme Deceives Bitpanda Customers

Mobile Credentials Provide Safer, More Seamless Security: HID

SMEs Urged by Government to “Lock the Door” Against Cybercriminals

How to Use Cyber-Deception in Your Security Strategy

Enterprises Still Can't Get a Handle on Software Security Debt – and It’s only Going to Get Worse

Sendmarc Releases DMARCbis Fireside Chat Featuring Co-Editor Todd Herr

How to Maximize DDoS Readiness with Proactive Protection Strategies

How to Use Intune App Protection without MDM Enrollment

How Camunda’s Skyflow Connector Helps Regulated Organizations Orchestrate Sensitive Data Safely

Hackers Threaten to Leak 8 Million People’s Stolen Data if Dutch Telecom Odido Won’t Pay Ransom

Ukraine Pushes Tighter Telegram Regulation, Citing Russian Recruitment of Locals

Slotegrator Introduces an AI-Powered Anti-Fraud Assistant

Some Patients Listed as “Charlie Kirk” Or Dead After Major NZ Health App MediMap Hacked

GitHub Issues Abused in Copilot Attack Leading to Repository Takeover

Windows 11: A Guide to the Updates

Taiwan Security Firm Confirms Flaw Flagged by CISA Likely Exploited by Chinese APTs

Enterprise Risk Management and Cybersecurity: Closing the Gap in Risk Governance

Identity Prioritization Isn't a Backlog Problem - It's a Risk Math Problem

Cybersecurity Pulse

Arctic Wolf Snaps up Sevco Security to Bolster Exposure Management

Chinese Group’s ChatGPT Use Reveals Worldwide Harassment Campaign Against Critics

EnforceAuth Free Version Gives Enterprises AI-Native Auth for AI Agents, Machine Identities & Non-Human Workloads

The Missing Link Moves Into Infosys’ North Sydney Office

Boards Don’t Need Cyber Metrics — They Need Risk Signals

U.S. Sanctions Russian Broker Over Zero-Day Exploits Theft

Threat Actors Exploit Apache ActiveMQ Vulnerability to Gain RDP Access, Deploy LockBit Ransomware

OAuth Vulnerabilities in Entra ID Could Exploit ChatGPT to Breach User Email Accounts

Secfix Raises $12M Series A to Build End-to-End Security Compliance Platform

Microsoft Alerts Developers of Malicious Next.js Repositories Used in Ongoing Hacker Attacks

From the Outside In: A Smarter Approach to Vendor Access

Fake Zoom Meeting Silently Installs Surveillance Software, Says Malwarebytes

Ransomware Is the Invoice for Compounding Technical Debt

Beyond the Queue: Smarter Security Will Ultimately Shape the Future of Global Air Travel

Sektor Signs up Concentric AI to A/NZ Distie Portfolio

Phishing Campaign Targets Freight and Logistics Orgs in the US, Europe

What Does Business Email Compromise Look Like?

What Are the Types of Ransomware Attacks?

Q&A: Palo Alto’s Eric Trexler Urges Identity-First, AI-Secure, Platformized Cyberdefenses

US Imposes Cyber-Related Sanctions on Russian, UAE Individuals and Entities

1Password’s Annual Subscription Plans Are Getting a Price Hike Next Month

Lift Cybersecurity, Warns Report

Discord Is Delaying Its Controversial Age Verification Methods Due to Backlash: ‘We’ve Made Mistakes’

DISA's $201M Browser Contract Shows Resellers Still Have a Role to Play

ADVP Expects Digital Identity Consultation to Play by Rules of Data Act, DIATF

Blumira Lands in Pax8 Marketplace, MSPs Get a Scalable Path to Managed SIEM

‘It’s Not over’: Cyber Info-Sharing Center Begins ‘Next Chapters’ After Losing Federal Funding