A nascent ransomware operation known as 0APT has emerged on the dark web, creating a significant stir by claiming over 200 victimized organizations within its initial week of operation in late January 2026. The group established a professional-looking data leak site and marketed itself as a Ransomware-as-a-Service (RaaS) provider, aiming…

In a concerning development for cybersecurity, threat actors have begun targeting personal AI assistant configurations, specifically OpenClaw, to steal sensitive login credentials and personal data. Recent investigations reveal that infostealer malware is now evolving to harvest complete AI agent identities and their associated digital contexts, expanding the attack surface beyond…

Forensic evidence suggests Kenyan authorities may have used Cellebrite’s phone-cracking technology on the device of a prominent human rights activist, Boniface Mwangi, following his arrest in July. The findings, detailed in a report by the University of Toronto’s Citizen Lab, point to a potential misuse of data extraction tools. Mwangi’s…

Identity remains the primary entry point for cyberattacks, according to Palo Alto Networks’ threat intelligence firm Unit 42. In its annual incident response report released Tuesday, Unit 42 found that identity-based techniques accounted for nearly two-thirds of all initial network intrusions last year, impacting businesses globally. Social engineering led the…

Cybersecurity researchers have identified a significant development in the threat landscape: an information stealer has successfully exfiltrated sensitive configuration data from an OpenClaw, an open-source agentic platform. This marks a critical shift from traditional credential theft to the compromise of personal artificial intelligence (AI) agents, raising new concerns for digital…

A new security threat known as AI recommendation poisoning is targeting users of artificial intelligence assistants, subtly manipulating their interactions and influencing critical decisions. This sophisticated attack technique, recently highlighted by Microsoft security researchers, embeds hidden instructions within seemingly innocuous links, compromising the integrity of AI-generated advice. The exploitation mechanism…

Cybercriminals are actively targeting fans of the upcoming Milano Cortina 2026 Winter Olympics through a sophisticated network of fake online merchandise stores. These fraudulent websites are designed to exploit the high demand for official Olympic merchandise, particularly the popular mascot plush toys, Tina and Milo, which are currently sold out…

A recent study has raised concerns regarding the security of popular cloud-based password managers, with researchers identifying vulnerabilities that could allow for password recovery attacks. Bitwarden, Dashlane, and LastPass, which collectively serve millions of users and businesses, have been found to be susceptible under specific conditions, potentially compromising the integrity…

The Noodlophile information stealer has significantly evolved its tactics, shifting from deceptive social media ads to employing fake job postings as its primary phishing lure. Originally identified in May 2025, this malware, linked to the Vietnamese threat group UNC6229, now targets job seekers, students, and digital marketers by disguising malicious…

A potent new iteration of the LockBit ransomware, dubbed LockBit 5.0, has surfaced, posing a significant threat to businesses globally. Released in September 2025, this advanced version expands its reach to Windows, Linux, and ESXi systems, marking a substantial upgrade for one of the most persistent ransomware families. Operating under…

A new and sophisticated social engineering campaign, dubbed “Matryoshka,” is targeting macOS users by deploying a dangerous stealer malware. This evolved version of the ClickFix attack technique uses intricate, nested obfuscation layers to evade security scanners and automated analysis systems. The campaign’s primary goal is to trick unsuspecting users into…

The current threat landscape is characterized by attackers exploiting seemingly minor vulnerabilities and trusted tools to gain significant footholds. This week’s cybersecurity recap highlights how attackers are blending legacy tactics with modern advancements, utilizing everything from familiar add-ins to cloud infrastructure and AI-assisted operations to achieve their objectives. The overarching…