Microsoft Exchange Online quarantines have disrupted business communications after the platform mistakenly flagged legitimate emails as phishing. The issue, tracked as incident EX1227432, began on Feb. 5, 2026, and remains unresolved. Microsoft identified a flawed URL policy as the root cause, which incorrectly classifies safe links as malicious, sending authentic messages to quarantine. Affected users […]
A critical Roundcube flaw lets hackers bypass user privacy settings and track when emails are opened, even after users disable remote image loading. The issue, uncovered by security researchers at NULL CATHEDRAL, affects Roundcube Webmail versions before 1.5.13 and all 1.6.x releases prior to 1.6.13. Attackers exploited a loophole in the HTML sanitizer “rcube_washtml,” which […]
Romania’s state-controlled oil pipeline operator confirmed that Conpet reports a cyberattack that disrupted its business IT systems and temporarily took down its website. The incident, discovered on February 3, 2026, did not affect operational technologies including SCADA and telecommunications systems, according to a company statement. Oil and fuel transport services remain fully functional, with no […]
The European Commission swiftly contained a cyberattack on January 30 after detecting unauthorized access to staff mobile data, marking a limited but targeted European Commission mobile breach. Telemetry tools flagged suspicious activity within the infrastructure managing mobile devices, prompting immediate response from security teams. Forensics confirmed no mobile endpoints were compromised, with the breach restricted […]