Eurail says that stolen traveler data from a previous breach is now for sale on the dark web, raising significant concerns about privacy and security. Eurail B.V., which provides access to over 250,000 kilometers of European rail networks, confirmed this unsettling development. The breach, which occurred earlier this year, has exposed sensitive information of countless […]
The CL Suite Chrome extension poses a significant threat to Facebook Business Manager users as it secretly siphons off two-factor authentication (2FA) codes and analytics data. This malicious extension, identified as “CL Suite by @CLMasters,” remains accessible on the Chrome Web Store and targets Meta Business Suite environments. Despite claims that data remains local, analysis […]
Apache NiFi, an essential tool utilized widely for automating cybersecurity, observability, event streams, and generative AI data pipelines, has identified a critical vulnerability. The newly disclosed Apache NiFi flaw, labeled CVE-2026-25903, allows users to bypass existing restrictions, raising substantial security concerns. This vulnerability may affect thousands of companies that rely on NiFi’s capabilities to streamline […]
Palo Alto Networks has solidified its position in the cybersecurity market by acquiring identity security specialist CyberArk. This $25 billion deal, finalized on February 11, 2026, is strategically aligned with the rising need to secure identities amid escalating AI-driven threats. By integrating CyberArk’s technology, Palo Alto Networks aims to bolster its capacity to manage privileged […]
In a significant move against data breaches, South Korea has levied a $25 million fine on luxury brands Dior, Louis Vuitton, and Tiffany. This penalty, stemming from incidents involving unauthorized access to Salesforce instances, highlights the country’s stern stance on cybersecurity breaches. Authorities linked the breaches to a campaign by the Scattered LAPSUS$ Hunters, a […]
A critical remote code execution flaw, tracked as CVE-2026-1281, is affecting Ivanti Endpoint Manager Mobile (EPMM) and being heavily exploited, according to security data. GreyNoise reports that 83% of these attacks originate from one IP address, 193.24.123.42, registered to PROSPERO OOO, known for “bulletproof” hosting. This IP was notably absent from initial indicators of compromise […]
Critical security vulnerabilities have been discovered in the Joomla framework, specifically in the Novarain/Tassos Framework, exposing websites to significant threats like SQL injection and unauthorized file access. These flaws, located within multiple popular extensions such as Convert Forms and EngageBox, can lead to remote code execution if left unpatched. Security researchers identified three core weaknesses […]
A covert campaign involving 287 Chrome extensions has compromised the browsing history of approximately 37.4 million users globally, according to new research. The scale of the breach represents nearly one percent of the Chrome user base, raising privacy concerns across the internet ecosystem. Researchers used a custom system of Docker containers and a man-in-the-middle proxy […]
Supply-chain attacks fuel cybercrime by creating a ripple effect that links identity theft, SaaS platform compromise, and ransomware deployment, according to recent research. Analysts warn that these interconnected tactics allow threat actors to move laterally across digital ecosystems, amplifying overall damage. Once attackers gain a foothold in a software vendor or third-party provider, they can […]
Romania’s national oil pipeline operator, Conpet S.A., confirmed a data breach after the Qilin ransomware group launched a cyberattack on its systems last week. The confirmation comes amid growing concerns over ransomware targeting energy infrastructure across Europe, as Conpet confirms Qilin accessed and stole sensitive company information during the breach. While the company has not […]
A cyberattack on Odido Telecom exposed the personal data of 6.2 million customer accounts, the Dutch provider confirmed on Feb. 12. The Odido Telecom breach, discovered between Feb. 7 and 8, involved unauthorized access to the company’s customer relationship management system. Hackers downloaded sensitive information, including names, addresses, mobile numbers, email addresses, IBANs, and ID […]
The 2026 Munich Report, released by the Munich Security Conference, warns of a growing global shift toward destructive political strategies over measured reform. Rather than fostering cooperation and gradual change, governments are adopting a wrecking-ball approach that tears down institutions without offering stable alternatives. The report identifies the current U.S. administration as a leading force […]