Google Reports Hackers Using Gemini to Develop Malware and Conduct End-to-End Cyberattacks

90/69 Friday, February 13, 2026 The Google Threat Intelligence Group (GTIG) has revealed that several state-backed hacker groups and advanced persistent threat (APT) actors have begun leveraging the Google Gemini model to support multi-stage cyberattacks. Observed activities include reconnaissance, generating phishing and social engineering content, writing and refining code, and testing target vulnerabilities. Attackers were […]

sittisak mintaboon

February 13, 2026

Ivanti Releases Patches for Multiple Endpoint Manager Vulnerabilities, Including Remote Authentication Bypass

89/69 Friday, February 13, 2026 Ivanti has released security updates to address more than ten vulnerabilities in its Endpoint Manager (EPM) product, including a critical flaw that could allow threat actors to access sensitive data without authentication. The vulnerability, tracked as CVE-2026-1603 with a CVSS score of 8.6, is an authentication bypass issue affecting Ivanti […]

sittisak mintaboon

February 13, 2026

Malware Discovered on Microsoft Store Impersonating an Add-in, Stealing Data from Over 4,000 Outlook Users

88/69 Friday, February 13, 2026 A cybersecurity monitoring center has identified a new attack vector involving a malicious add-in distributed through the Microsoft Office Store-the first incident of its kind. An application named AgreeTo, originally a legitimate meeting scheduling tool, was compromised after threat actors took control of an unused developer domain (an orphaned URL) […]

sittisak mintaboon

February 13, 2026

“ZeroDayRAT” Spyware Targets Android and iOS, Enables Remote Control, Camera and Microphone Access, and OTP Interception

87/69 Thursday, February 12, 2026 Researchers from mobile security firm iVerify have discovered a new commercial spyware called “ZeroDayRAT,” which is being advertised for sale on Telegram. The tool is promoted as a platform capable of providing full remote control over victims’ devices. It reportedly supports Android versions 5 through 16 and iOS up to […]

sittisak mintaboon

February 12, 2026

Senegal Temporarily Closes National ID Office Following Ransomware Attack

86/69 Thursday, February 12, 2026 The Government of Senegal has confirmed a cyberattack affecting the Directorate of File Automation (DAF), the government agency responsible for issuing national identity cards, passports, and managing the country’s biometric data systems. Following reports of a ransomware attack, authorities ordered the temporary closure of the agency to contain the situation […]

sittisak mintaboon

February 12, 2026

Warning: Fake 7-Zip Website Distributing Malware

85/69 Thursday, February 12, 2026 Cybersecurity experts have identified an attack campaign involving a fraudulent website impersonating the popular file archiver 7-Zip. The attackers are using the domain 7zip[.]com (the legitimate site is 7-zip[.]org) and have designed the webpage to closely resemble the official version, making it difficult for users to distinguish between the two. […]

sittisak mintaboon

February 12, 2026

Hackers Use QR Code Scams on Signal and Impersonate Support Teams to Hijack Accounts

84/69 Wednesday, February 11, 2026 Germany’s cybersecurity authorities, including the Federal Office for Information Security (BSI) and the Federal Office for the Protection of the Constitution (BfV), have issued a warning and heightened surveillance after detecting targeted attack attempts against senior military officials, diplomats, and investigative journalists across Europe. Attackers have shifted from malware-based methods […]

sittisak mintaboon

February 11, 2026

BeyondTrust Fixes Pre-Authentication Vulnerability Allowing Remote Code Execution

83/69 Wednesday, February 11, 2026 BeyondTrust has released a security update to address a critical pre-authentication vulnerability, tracked as CVE-2026-1731, which carries a CVSS score of 9.9. The flaw affects certain versions of the company’s Remote Support and Privileged Remote Access (PRA) products, allowing unauthenticated attackers to send specially crafted requests that can execute operating […]

sittisak mintaboon

February 11, 2026

Hacker Group UNC3886 Breaches Four Major Mobile Carriers in Singapore

82/69 Wednesday, February 11, 2026 The hacker group known as UNC3886 has breached the networks of Singapore’s four largest telecommunications providers—Singtel, StarHub, M1, and Simba-at least once over the past year. The Cyber Security Agency of Singapore (CSA) described the incident as a well-planned and highly targeted operation. Threat actors reportedly exploited zero-day vulnerabilities to […]

sittisak mintaboon

February 11, 2026

Prometei Botnet Malware Exploits RDP to Deploy Cryptocurrency Miner and Steal Credentials

81/69 Tuesday, February 10, 2026 Researchers from eSentire have reported the discovery of Prometei botnet malware embedded within a construction company’s Windows Server in the United Kingdom in January 2026. Threat actors gained access through Remote Desktop Protocol (RDP) services that were protected by weak or easily guessable passwords, including default credentials. While Prometei primarily […]

sittisak mintaboon

February 10, 2026
1 9 10 11 82