News

Sat 21 Feb· 11 articles

1. 14:49

   Generative AI powers attack on 600+ Fortinet FortiGate firewalls

   According to Amazon Threat Intelligence, a Russian-speaking, financially motivated threat actor has been observed using commercial generative AI services to compromise over 600 FortiGate devices across 55 countries. The activity occurred between 11 January…

   The Hacker News
2. 13:18

   Ukrainian hacktivists reveal Belarus aided Russian drone strikes

   Ukrainian hackers have uncovered how Russian drone operators rely on Belarus to extend their reach, following sanctions imposed by Ukraine against Alyaksandr Lukashenka on 18 February 2026 for his role in Russia’s war. According to InformNapalm, the…

   DataBreaches
3. 13:18

   Grange Dental owner halts invoice fraud after spoofed emails

   Dentist Dr. Joe McEnhill, owner of Grange Dental Care, said the breach occurred on Thursday morning and resulted in fraudulent emails being sent from the practice’s system, with emails requesting invoices to be paid at 9.50am. He explained that the issue was…

   DataBreaches
4. 13:17

   Discord age verification frontend exposed Persona identity firm

   Discord’s age verification rollout has encountered a frontend leak, with security researchers finding that frontend components tied to identity vendor Persona were accessible on the open web. According to Interesting Engineering, the disclosure has added…

   DataBreaches
5. 13:17

   Google issues Chrome patch after exploited zero day CVE-2026-2441

   According to Pieter Arntz, Google has issued a patch for a high-severity Chrome zero-day tracked as CVE-2026-2441, a memory bug in how the browser handles certain font features that attackers are already exploiting. CVE-2026-2441 has the questionable honour…

   DataBreachesCVE-2026-2441CVE-2026-2441Exploited
6. 12:00

   CVE-2026-2329 lets attackers hijack Grandstream GXP1600 calls

   A critical vulnerability in Grandstream’s GXP1600 series phones, tracked as CVE-2026-2329, can be exploited by an unauthenticated attacker to remotely execute code with root privileges. According to Rapid7, the flaw is a stack-based buffer overflow that…

   SecurityWeekCVE-2026-2329CVE-2026-2329
7. 11:19

   Roundcube Webmail2 articles this day · The Hacker News first

   CISA warns: RoundCube webmail RCE CVE-2025-49113 hits millions · CISA adds Roundcube webmail RCE CVE-2025-49113 to KEV after sale

   Show 2 articles2 outletsCVE-2025-49113CVE-2025-49113Exploited
8. 07:58

   Anthropic unveils Claude Code Security to spot and fix code flaws

   Anthropic has begun rolling out Claude Code Security, a new AI-powered feature for Claude Code that can scan a user’s codebase for vulnerabilities and suggest patches. The capability is currently available in a limited research preview to Enterprise and Team…

   The Hacker News
9. 04:30

   Cert body EC Council launches AI suite to address $5.5tn risk

   EC-Council has expanded its AI certification portfolio with four new role-based AI credentials alongside an updated Certified CISO v4 programme, marking the largest single expansion in its 25-year history. The new certifications include Artificial…

   The Hacker News
10. 00:00

    Cloudflare withdraws 1,100 customer IP routes via BGP in 6 hours

    On 20 February 2026 at 17:48 UTC, Cloudflare experienced a service outage affecting BYOIP customers when their routes were withdrawn via BGP. The incident was not due to a cyberattack; it stemmed from a change in how Cloudflare manages IP addresses onboarded…

    Cloudflare