A state-sponsored threat group known as UNC3886 breached Singapore telecoms in a stealthy cyber campaign targeting edge devices and internal infrastructure. The Cyber Security Agency of Singapore and the Infocomm Media Development Authority led a multi-agency response, Operation CYBER GUARDIAN, which ran for more than 11 months. The attackers exploited a zero-day vulnerability and successfully […]
Microsoft Exchange Online quarantines have disrupted business communications after the platform mistakenly flagged legitimate emails as phishing. The issue, tracked as incident EX1227432, began on Feb. 5, 2026, and remains unresolved. Microsoft identified a flawed URL policy as the root cause, which incorrectly classifies safe links as malicious, sending authentic messages to quarantine. Affected users […]
A critical Roundcube flaw lets hackers bypass user privacy settings and track when emails are opened, even after users disable remote image loading. The issue, uncovered by security researchers at NULL CATHEDRAL, affects Roundcube Webmail versions before 1.5.13 and all 1.6.x releases prior to 1.6.13. Attackers exploited a loophole in the HTML sanitizer “rcube_washtml,” which […]
Romania’s state-controlled oil pipeline operator confirmed that Conpet reports a cyberattack that disrupted its business IT systems and temporarily took down its website. The incident, discovered on February 3, 2026, did not affect operational technologies including SCADA and telecommunications systems, according to a company statement. Oil and fuel transport services remain fully functional, with no […]
The European Commission swiftly contained a cyberattack on January 30 after detecting unauthorized access to staff mobile data, marking a limited but targeted European Commission mobile breach. Telemetry tools flagged suspicious activity within the infrastructure managing mobile devices, prompting immediate response from security teams. Forensics confirmed no mobile endpoints were compromised, with the breach restricted […]
A pro-Russian threat group, Noname057(16), targeted Italy’s Foreign Ministry and sites linked to the 2026 Winter Olympics in a wave of cyberattacks, as authorities confirmed. The cyber campaign, which included denial-of-service attacks on hotels in Cortina d’Ampezzo and Olympic-related websites, highlights growing concerns as Noname057(16) targets Cortina Olympics infrastructure. Italian Foreign Minister Antonio Tajani disclosed […]
The Spain Science Ministry has shut down portions of its IT systems following claims of a security breach, disrupting access to digital services used by both citizens and businesses. The move comes as authorities investigate the scope and origin of the alleged intrusion, which reportedly affected several platforms under the ministry’s control. Officials did not […]
Italy’s largest university, La Sapienza in Rome, has temporarily shut down several IT services after suffering a cyberattack that forced the institution offline. As La Sapienza goes offline, campus operations have seen widespread disruptions, affecting students, faculty, and administrative functions. The university reported the breach on February 5, acknowledging interruptions across its digital infrastructure. Following […]
Anthropic’s Claude finds flaws in more than 500 high-severity vulnerabilities across widely used open-source libraries, the company said Thursday. The artificial intelligence firm unveiled Claude Opus 4.6, its latest large language model, which includes enhanced capabilities for code review and debugging. The newly identified flaws span libraries such as Ghostscript, OpenSC, and CGIF — all […]
Zscaler buys browser security startup SquareX in a move aimed at enhancing web protection without adding software bloat. The acquisition allows users to embed lightweight security extensions directly into any browser, removing the dependence on standalone secure browsers or third-party tools. Zscaler positions this as a streamlined alternative that improves both endpoint security and user […]
F5 patches DoS flaws across its BIG-IP, NGINX, and container platforms in its latest February 2026 security notification. The company addressed several medium to low-severity vulnerabilities, mainly tied to denial-of-service risks and configuration weaknesses. These flaws threaten services such as web application firewalls and Kubernetes ingress controllers, especially in high-traffic environments. While F5 reported no […]
A security researcher has demonstrated how a threat actor breached an AWS admin account in under 10 minutes using generative AI, accelerating each step of the intrusion. By leveraging large language models (LLMs), the attacker automated reconnaissance, exploit development, privilege escalation, and lateral movement, leaving minimal traces behind. The finding underscores growing concerns over the […]