أخبار الأمن السيبراني

2026-02-16 03:29 BleepingComputer

خبر سيبراني: New ClickFix attack abuses nslookup to retrieve PowerShell payload via DNS

New ClickFix attack abuses nslookup to retrieve PowerShell payload via DNS

Threat actors are now abusing DNS queries as part of ClickFix social engineering attacks to deliver malware, making this the first known use of DNS as a channel

Malware Patch Network

قراءة

2026-02-16 01:08 BleepingComputer

خبر سيبراني: Windows 11 KB5077181 fixes boot failures linked to failed updates

Windows 11 KB5077181 fixes boot failures linked to failed updates

Microsoft says it has resolved a Windows 11 bug that caused some commercial systems to fail to boot with an "UNMOUNTABLE_BOOT_VOLUME" error after installing rec

Patch

قراءة

2026-02-15 19:30 BleepingComputer

خبر سيبراني: CTM360: Lumma Stealer and Ninja Browser malware campaign abusing Google Groups

CTM360: Lumma Stealer and Ninja Browser malware campaign abusing Google Groups

CTM360 reports 4,000+ malicious Google Groups and 3,500+ Google-hosted URLs used to spread the Lumma Stealer infostealing malware and a trojanized "Ninja Browse

Malware Identity

قراءة

2026-02-15 18:17 BleepingComputer

خبر سيبراني: Pastebin comments push ClickFix JavaScript attack to hijack crypto swaps

Pastebin comments push ClickFix JavaScript attack to hijack crypto swaps

Threat actors are abusing Pastebin comments to distribute a new ClickFix-style attack that tricks cryptocurrency users into executing malicious JavaScript in th

Patch

قراءة

2026-02-15 17:10 The Hacker News

خبر سيبراني: Microsoft Discloses DNS-Based ClickFix Attack Using Nslookup for Malware Staging

Microsoft Discloses DNS-Based ClickFix Attack Using Nslookup for Malware Staging

Microsoft has disclosed details of a new version of the ClickFix social engineering tactic in which the attackers trick unsuspecting users into running commands

Malware Patch Network

قراءة

2026-02-14 19:02 BleepingComputer

خبر سيبراني: One threat actor responsible for 83% of recent Ivanti RCE attacks

One threat actor responsible for 83% of recent Ivanti RCE attacks

Threat intelligence observations show that a single threat actor is responsible for most of the active exploitation of two critical vulnerabilities in Ivanti En

Vulnerability CVE

قراءة

2026-02-14 18:15 BleepingComputer

خبر سيبراني: Snail mail letters target Trezor and Ledger users in crypto-theft attacks

Snail mail letters target Trezor and Ledger users in crypto-theft attacks

Threat actors are sending physical letters pretending to be from Trezor and Ledger, makers of cryptocurrency hardware wallets, to trick users into submitting re

Advisory

قراءة

2026-02-14 15:00 SecurityWeek

خبر سيبراني: Over 300 Malicious Chrome Extensions Caught Leaking or Stealing User Data

Over 300 Malicious Chrome Extensions Caught Leaking or Stealing User Data

With more than 37 million combined downloads, the extensions expose users to tracking and personal information theft. The post Over 300 Malicious Chrome Extensi

DataLeak

قراءة

2026-02-14 01:35 BleepingComputer

خبر سيبراني: Fake job recruiters hide malware in developer coding challenges

Fake job recruiters hide malware in developer coding challenges

A new variation of the fake recruiter campaign from North Korean threat actors is targeting JavaScript and Python developers with cryptocurrency-related tasks.

Malware

قراءة

2026-02-14 00:58 DarkReading

خبر سيبراني: Zscaler-SquareX Deal Boosts Zero Trust, Secure Browsing Capabilities

Zscaler-SquareX Deal Boosts Zero Trust, Secure Browsing Capabilities

Zscaler's acquisition of SquareX comes as competitors like CrowdStrike and Palo Alto Networks are also investing in secure browser technologies.

Network

قراءة

2026-02-13 23:21 BleepingComputer

خبر سيبراني: Claude LLM artifacts abused to push Mac infostealers in ClickFix attack

Claude LLM artifacts abused to push Mac infostealers in ClickFix attack

Threat actors are abusing Claude artifacts and Google Ads in ClickFix campaigns that deliver infostealer malware to macOS users searching for specific queries.

Malware Patch

قراءة

2026-02-13 21:35 BleepingComputer

خبر سيبراني: Louis Vuitton, Dior, and Tiffany fined $25 million over data breaches

Louis Vuitton, Dior, and Tiffany fined $25 million over data breaches

South Korea has fined luxury fashion brands Louis Vuitton, Christian Dior Couture, and Tiffany $25 million for failing to implement adequate security measures,

Breach

قراءة

2026-02-13 20:27 The Hacker News

خبر سيبراني: Google Ties Suspected Russian Actor to CANFAIL Malware Attacks on Ukrainian Orgs

Google Ties Suspected Russian Actor to CANFAIL Malware Attacks on Ukrainian Orgs

A previously undocumented threat actor has been attributed to attacks targeting Ukrainian organizations with malware known as CANFAIL. Google Threat Intelligenc

Malware

قراءة

2026-02-13 20:08 DarkReading

خبر سيبراني: Microsoft Under Pressure to Bolster Defenses for BYOVD Attacks

Microsoft Under Pressure to Bolster Defenses for BYOVD Attacks

Threat actors are exploiting security gaps to weaponize Windows drivers and terminate security processes in targeted networks, and there may be no easy fixes in

Vulnerability Patch Network

قراءة

2026-02-13 20:07 DarkReading

خبر سيبراني: Nation-State Hackers Put Defense Industrial Base Under Siege

Nation-State Hackers Put Defense Industrial Base Under Siege

Espionage groups from China, Russia and other nations burned at least two dozen zero-days in edge devices in attempts to infiltrate defense contractors' network

Vulnerability Network

قراءة

2026-02-13 19:49 DarkReading

خبر سيبراني: AI Agents 'Swarm,' Security Complexity Follows Suit

AI Agents 'Swarm,' Security Complexity Follows Suit

As AI deployments scale and start to include packs of agents autonomously working in concert, organizations face a naturally amplified attack surface.

Advisory

قراءة

2026-02-13 19:23 The Hacker News

خبر سيبراني: Google Links China, Iran, Russia, North Korea to Coordinated Defense Sector Cyber Operations

Google Links China, Iran, Russia, North Korea to Coordinated Defense Sector Cyber Operations

Several state-sponsored actors, hacktivist entities, and criminal groups from China, Iran, North Korea, and Russia have trained their sights on the defense indu

Advisory

قراءة

2026-02-13 18:23 The Hacker News

خبر سيبراني: UAT-9921 Deploys VoidLink Malware to Target Technology and Financial Sectors

UAT-9921 Deploys VoidLink Malware to Target Technology and Financial Sectors

A previously unknown threat actor tracked as UAT-9921 has been observed leveraging a new modular framework called VoidLink in its campaigns targeting the techno

Malware

قراءة

2026-02-13 18:05 BleepingComputer

خبر سيبراني: Turning IBM QRadar Alerts into Action with Criminal IP

Turning IBM QRadar Alerts into Action with Criminal IP

Criminal IP now integrates with IBM QRadar SIEM and SOAR to bring external IP-based threat intelligence directly into detection and response workflows. See how

Advisory

قراءة

2026-02-13 18:01 SecurityWeek

خبر سيبراني: In Other News: Google Looks at AI Abuse, Trump Pauses China Bans, Disney’s $2.7M Fine

In Other News: Google Looks at AI Abuse, Trump Pauses China Bans, Disney’s $2.7M Fine

Other noteworthy stories that might have slipped under the radar: vulnerabilities at 277 water systems, DoD employee acting as money mule, 200 airports exposed

Advisory

قراءة