Latest Internet & Cybersecurity News
Unit 42 2026 Report: Attackers Exfiltrate Data in 72 Minutes
Palo Alto Networks' Unit 42 analyzed over 750 incidents, finding attackers can exfiltrate data in as little as 72 minutes, 4x faster than prior years, driven by AI and identity weaknesses in nearly 90% of cases. Identity issues span multiple attack surfaces in 87% of breaches, urging faster IR playbooks and better logging.
AI accelerates vulnerability scanning and ransomware deployment.
Figure Technology Solutions Breach by ShinyHunters
Figure confirmed a breach with ShinyHunters leaking ~967,000 user records including financial and personal data. The incident highlights social engineering bypassing perimeters via weak identity workflows.
It increases fraud and account-takeover risks.
Conduent Data Breach Exposes Tens of Millions
Safeway ransomware stole over 8TB, affecting millions including 4M Texans, 10.5M Oregonians, and 7.6M in Maine. Triggers multi-state investigations, lawsuits, and $25M+ costs; Texas AG calls it potentially largest U.S. breach.
Involves health data for Medicaid recipients.
Microsoft Windows Admin Center Privilege Escalation CVE-2026-26119
Critical vuln (CVSS 8.8) allows low-priv attackers to escalate to full domain compromise; patched in Dec 2025 version 2511. No confirmed exploitation yet but rated 'most likely'.
Update immediately and audit admin accounts.
Google Patches First Chrome 0-Day of 2026
Urgent update for Chrome versions 145.0.7632.75/.76 (Win/macOS) and 144.0.7559.75 (Linux) addresses critical 0-day. Part of ongoing rapid patching efforts.
Users should update stable channel immediately.
UNC6201 Exploits Dell RecoverPoint Zero-Day CVE-2026-22769
Mandiant confirms Grimbolt malware exploiting CVSS 10.0 zero-day in RecoverPoint for data centers. UNC6201 deploys payloads like SLAYSTYLE, BRICKSTORM.
Dell patched; monitor IOCs and update urgently.
AI Chat App Leaks 300M Messages from 25M Users
Massive consumer data leak exposes AI chat logs tied to 25 million users. Adds to billion-record global breaches trend.
Heightens privacy and security risks for AI platforms.
WormGPT.AI User Database Compromised
Hacking platform WormGPT.AI breached, leaking records of over 19,000 users posted on cybercrime forums. Includes full database download for February 2026 users.
Underscores irony of cybersecurity tool insecurity.
Space Bears Ransomware Hits Texcomp
Ransomware group published SQL database with client PII like names, emails, addresses from IT firm Texcomp. Targets businesses for digital transformation services.
Exposes partner contact details publicly.
North Korean UNC1069 Targets Crypto with AI Social Engineering
Uses fake Zoom, compromised Telegram, ClickFix, and AI-generated video to deploy seven malware families against crypto/DeFi. Part of persistent APT campaigns by nation-states.
Enhance phishing defenses.
Phobos Ransomware Arrest and Sentencings
Law enforcement actions include Phobos arrest and sentencing for network intrusions. Ongoing probes into exploit sales and laptop-farm schemes.
Strengthens global cyber investigations.
UK CSR Bill Advances, ONCD Pushes AI for Defense
UK Cyber Security Resilience Bill progresses; US ONCD promotes AI in defense without added risks. Policy shifts address AI threats and standards like ICO rulings.
Impacts compliance globally.