$20 million lost in 'jackpotting' ATM malware attacks in 2025, FBI reports — scheme forces machines to spit out cash, targets banks and ATM operators

tomshardware - The FBI released a public warning, saying that ATM "jackpotting" incidents have exponentially increased in 2025.

#cybersecurity #infosec #banking #government #cybercrime #us #payments #hack #police

How hackers are stealing millions from ATMs, FBI warns

14 days / mashable

14 days / tomshardware

FBI says ATM 'jackpotting' attacks are on the rise, and netting hackers millions in stolen cash

14 days / reddit / /u/DonkeyFuel

FBI: Over $20 million stolen in surge of ATM malware attacks in 2025

14 days / bleepingcomputer / Sergiu Gatlan

LLM-Generated Passwords Look Strong but Crack in Hours, Researchers Find

msmash / slashdot - AI security firm Irregular has found that passwords generated by major large language models -- Claude, ChatGPT and Gemini -- appear complex but follow predictable patterns that make them crackable in hours, even on decades-old hardware. When researchers …

#ai #cybersecurity #ml #dataprivacy #infosec #genai #chatgpt #cybercrime #hack #encryption

AI vibe-generates the same ‘random’ passwords over and over

15 days / pivot-to-ai / David Gerard

LLM-Generated Passwords Look Strong but Crack in Hours, Researchers Find

15 days / slashdot / msmash

AI-generated passwords are surprisingly easy to crack, researchers find

15 days / techspot

AI-Generated Passwords Are Apparently Quite Easy to Crack

15 days / gizmodo / AJ Dellinger

Texas sues TP-Link over China links and security vulnerabilities

Dan Robinson / theregister - State disputes the company's claim that its routers are made in Vietnam TP-Link is facing legal action from the state of Texas for allegedly misleading consumers with "Made in Vietnam" claims despite China-dominated manufacturing and supply chains, and fo…

#cybersecurity #iot #hardware #networking #dataprivacy #infosec #china #government #law #litigation

Texas Sues TP-Link Over China Links and Security Vulnerabilities

16 days / slashdot / msmash

Texas sues TP-Link over China links and security vulnerabilities

16 days / theregister / Dan Robinson

Texas sues TP-Link, alleging it allows China to hack into routers

16 days / therecord

TP-Link sued by Texas over alleged China-linked hacking access

16 days / techspot

Palo Alto Networks acquires file security startup Koi for reported $400M

Maria Deutscher / siliconangle - Palo Alto Networks Inc. is acquiring Koi Security Ltd., a startup that helps enterprises prevent their employees from downloading risky files. The companies announced the deal today without disclosing the financial terms. According to Calcalist, the trans…

#ai #startups #enterprise #infosec #cloudsec #stockmarket #earnings #business #acquisitions

Palo Alto Networks (PANW) Stock: Why Shares Dropped 6% Despite a Strong Quarter

16 days / parameter / Trader Edge

Palo Alto shares sink 8%, CEO defends cybersecurity's position as AI hits software stocks

16 days / cnbc

Palo Alto lowers profit forecast after CyberArk deal

16 days / techzine / Erik van Klinken

Palo Alto CEO says AI isn’t great for business, yet

16 days / reddit / /u/Logical_Welder3467

Palo Alto CEO says AI isn’t great for business, yet

17 days / theregister / Simon Sharwood

The AI Scare Trade — the all-purpose excuse for number go down

17 days / pivot-to-ai / David Gerard

Palo Alto Networks shares fall after outlook disappoints despite second quarter beat

17 days / siliconangle / Duncan Riley

Palo Alto Networks slumps 6% as third quarter profit guidance falls short

17 days / cnbc

Palo Alto Networks acquires file security startup Koi for reported $400M

17 days / siliconangle / Maria Deutscher

Google patches Chrome zero-day as in-the-wild exploits surface

Carly Page / theregister - High-severity CSS flaw let malicious webpages run code inside the sandbox Google has quietly pushed out an emergency Chrome fix after attackers were caught exploiting the browser's first reported zero-day of 2026.…

#cybersecurity #infosec #google #browsers #cybercrime #hack #patching #updates #bugs

Fraudulent AI Assistants Target User Information

18 days / pymnts / PYMNTS

Over 500,000 VKontakte accounts hijacked through malicious Chrome extensions

18 days / therecord

Chrome rushes emergency patch for actively exploited zero-day bug

18 days / techspot

Google patches first Chrome zero-day of 2026

18 days / techzine / Berry Zwets

Google patches Chrome zero-day as in-the-wild exploits surface

18 days / theregister / Carly Page

Google patches first Chrome zero-day exploited in attacks this year

18 days / bleepingcomputer / Sergiu Gatlan

Microsoft Refreshes Secure Boot Certificates via Windows Update

Markus Kasanmascheff / winbuzzer - Microsoft has announced it will deliver new Secure Boot certificates via Windows Update starting March 2026 before 2011 certificates expire in June.The post Microsoft Refreshes Secure Boot Certificates via Windows Update appeared first on WinBuzzer.

#cybersecurity #infosec #windows #microsoft #techsupport #patching #updates #operatingsystems

Windows 11 KB5077181 fixes boot failures linked to failed updates

19 days / bleepingcomputer / Lawrence Abrams

Acer Swift Go 14 (SFG14-73) fails to wake from S5 after shutdown – EC reset required

20 days / reddit / /u/IronCircu1t

Microsoft Blocks Credential Autofill to Fix Windows Hello Flaw

20 days / winbuzzer / Markus Kasanmascheff

Windows 11 Update KB5077181 Traps Users in Boot Loops

20 days / winbuzzer / Markus Kasanmascheff

Windows Secure Boot Certificates From 2011 Will Be Expiring Soon. What You Need to Know

20 days / cnet / Lori Grunin

Microsoft Refreshes Secure Boot Certificates via Windows Update

20 days / winbuzzer / Markus Kasanmascheff

Google reports that state hackers from China, Russia and Iran are using Gemini in 'all stages' of attacks — phishing lures, coding and vulnerability testing get AI underpinnings from hostile actors

tomshardware - Hackers from Russian, China, India, North Korea, and elsewhere are using Google's Gemini AI to augment their attacks, Google says. From generating phishing lures, to translating text, coding, and vulnerability testing, Gemini is a core component of their …

#ai #cybersecurity #techpolicy #infosec #google #aiethics #genai #government #cybercrime #gemini

How AI could eat itself: Competitors can probe models to steal their secrets and clone them

20 days / theregister / Jessica Lyons

Fake AI Chrome Extensions Exposed 260,000 Users, Targeting Gmail

21 days / eweek / Ken Underhill

Google AI Shows A Site Is Offline Due To JS Content Delivery via @sejournal, @martinibuster

21 days / searchenginejournal / Roger Montti

New Cyber Threats Every iPhone Owner Should Watch Out For in 2026

21 days / idropnews / IDrop News Staff

Google opens Gemini 3 Deep Think API in Early Access

21 days / testingcatalog / Erin

Hackers Try to Clone Google’s Gemini With 100,000+ AI Probes

21 days / eweek / Esther Shein

State-Sponsored Hackers Using Popular AI Tools Including Gemini, Google Warns

21 days / decrypt / Alex Hughes

Google: Nation-State Hackers are Weaponizing Gemini AI for Cyberattacks

21 days / winbuzzer / Markus Kasanmascheff

Google reports that state hackers from China, Russia and Iran are using Gemini in 'all stages' of attacks — phishing lures, coding and vulnerability testing get AI underpinnings from hostile actors

21 days / tomshardware

Hackers are using Gemini to target you, Google says

21 days / digitaltrends

Dutch phone giant Odido says millions of customers affected by data breach

Zack Whittaker / techcrunch - The Dutch phone giant Odido is the latest phone and internet company to be hacked in recent months, as governments and financially motivated hackers continue to steal highly confidential information about phone customers.

#cybersecurity #dataprivacy #infosec #business #cybercrime #gdpr #scam #europe #telecommunications #regulation

The Dutch phone giant Odido is the latest phone and internet company to be hacked in recent months, as governments and financially motivated hackers continue to steal highly confidential information about phone customers.

21 days / bsky / @techcrunch.com / techcrunch.com

Major hack of Dutch telco Odido was a classic case of social engineering

21 days / techzine / Erik van Klinken

Dutch phone giant Odido says millions of customers affected by data breach

21 days / techcrunch / Zack Whittaker

Top Dutch telco Odido admits 6.2M customers caught in contact system caper

21 days / theregister / Connor Jones

Update Windows 11 Now: Major Notepad Flaw Fixed

Nehal Malik / iphoneincanada - If you’re running Windows 11, it’s time to hit that update button. Microsoft has patched a high-severity remote code execution (RCE) vulnerability in the Windows 11 Notepad app that could allow attackers to silently execute malicious files through special…

#ai #cybersecurity #software #infosec #windows #microsoft #genai #patching #updates #bugs

Windows 11 Notepad Flaw Let Files Execute Silently via Markdown Links https://tech.slashdot.org/story/26/02/12/2111243/windows-11-notepad-flaw-let-files-execute-silently-via-markdown-links?utm_source=rss1.0mainlinkanon&utm_medium=feed

21 days / bsky / @slashdot.org / slashdot.org

Windows 11 Notepad Flaw Let Files Execute Silently via Markdown Links

22 days / slashdot / msmash

Update Windows 11 Now: Major Notepad Flaw Fixed

22 days / iphoneincanada / Nehal Malik

Check for Windows 11 updates. Microsoft just patched a major Notepad vulnerability.

22 days / mashable

Unwanted AI upgrade to Windows Notepad created a serious security flaw

22 days / reddit / /u/AdSpecialist6598

Microsoft's Notepad Got Pwned (They Added AI To It, So...)

22 days / reddit / /u/gdelacalle

Microsoft is Refreshing Secure Boot Certificates on Millions of Windows PCs

techpowerup - On your Windows PC, the Unified Extensible Firmware Interface (UEFI) firmware has a Secure Boot Certificate that mandates only verified software starts the boot-up sequence. Microsoft is preparing to refresh these certificates, and the company announced t…

#cybersecurity #hardware #infosec #windows #microsoft #technology #patching #updates #operatingsystems

Image post - please click to view at origin

24 days / bsky / @arstechnica.com / arstechnica.com

this win 11 is just a fucking nightmare a fucking nightmare now al of us with this hardware will be garbage this is too expensive fuck you over to non windows we shall all go arstechnica.com/gadgets/2026...

24 days / bsky / @chronosschiron.bsky.social / chronosschiron.bsky.social

Microsoft releases Windows 10 KB5075912 extended security update

24 days / bleepingcomputer / Lawrence Abrams

Windows' original Secure Boot certificates expire in June—here's what you need to do

24 days / arstechnica / Andrew Cunningham

Microsoft Begins the First-Ever Secure Boot Certificate Swap Across Windows Ecosystem

24 days / slashdot / msmash

Microsoft is Refreshing Secure Boot Certificates on Millions of Windows PCs

24 days / techpowerup

Microsoft to Roll Out New Secure Boot Certificates to Keep Old Windows PCs Secure

24 days / thurrott / Laurent Giret

Microsoft will start refreshing Secure Boot certificates in March for Windows 11 and Windows 10 ESU users

24 days / engadget / Devindra Hardawar

Microsoft rolls out new Secure Boot certificates before June expiration

24 days / bleepingcomputer / Sergiu Gatlan

Microsoft is refreshing Secure Boot certificates to plug security holes before they happen — if you bought a PC last year, you should be set

24 days / tomshardware

Microsoft is keeping Secure Boot alive with Windows updates

24 days / theverge / Jess Weatherbed

A New Era for Security? Anthropic's Claude Opus 4.6 Found 500 High-Severity Vulnerabilities

EditorDavid / slashdot - Axios reports:Anthropic's latest AI model has found more than 500 previously unknown high-severity security flaws in open-source libraries with little to no prompting, the company shared first with Axios. Why it matters: The advancement signals an inflect…

#ai #cybersecurity #ml #opensource #infosec #anthropic #aiethics #genai #patching #bugs

NanoClaw now supports Claude's Agent Swarms

26 days / ycombinator

Anthropic’s Claude Fast Mode Delivers 2.5x Speed at 6x Price

26 days / winbuzzer / Markus Kasanmascheff

Anthropic’s Claude Opus 4.6 Leads AI Intelligence Index

26 days / winbuzzer / Markus Kasanmascheff

Exploiting signed bootloaders to circumvent UEFI Secure Boot

26 days / ycombinator

Claude Opus 4.6 takes the top spot on Artificial Analysis Intelligence Index, but OpenAI's Codex 5.3 looms

26 days / the-decoder / Matthias Bastian

Anthropic's new Claude Fast Mode trades your wallet for speed at a steep 6x markup

26 days / the-decoder / Matthias Bastian

A New Era for Security? Anthropic's Claude Opus 4.6 Found 500 High-Severity Vulnerabilities

27 days / slashdot / EditorDavid

Quoting Thomas Ptacek

27 days / simonwillison / Simon Willison

AMD Won’t Fix Critical RCE Vulnerability in its AutoUpdate Software

Markus Kasanmascheff / winbuzzer - Security researcher has disclosed a severe RCE vulnerability in AMD's AutoUpdate software after the company declined to address the critical flaw.The post AMD Won’t Fix Critical RCE Vulnerability in its AutoUpdate Software appeared first on WinBuzzer.

#cybersecurity #software #infosec #amd #hack #technology #patching #updates #bugs

AMD Just Made Another Radeon Mistake

26 days / techspot

AMD Won’t Fix Critical RCE Vulnerability in its AutoUpdate Software

27 days / winbuzzer / Markus Kasanmascheff

I'm Annoyed At AMD's Latest Radeon Blunder

27 days / reddit / /u/Comprehensive_Lap

Security researcher says AMD auto-updater downloads software insecurely, enabling remote code execution — company rep reportedly said man-in-the-middle attacks are "out of scope," ignored bug

27 days / tomshardware

ExpressVPN launches new free tools for users: VPN for email, secure AI, privacy tools

mashable - ExpressVPN is rolling out a suite of new and reworked digital security tools: ExpressAI, ExpressMailGuard, ExpressKeys, and Identity Defender.

#ai #cybersecurity #dataprivacy #infosec #genai #apps #technology #encryption #digitalprivacy

ExpressVPN launches new free tools for users: VPN for email, secure AI, privacy tools

29 days / mashable

ExpressVPN launches four new standalone apps

29 days / engadget / Sam Chapman

ExpressVPN’s New Privacy-Focused AI and Email Protection Features Could Be Game-Changers

29 days / cnet / Attila Tomaschek

Substack confirms data breach affects users’ email addresses and phone numbers

Ivan Mehta / techcrunch - Substack said that customer data was accessed in October 2025, but wasn't discovered until early February.

#cybersecurity #saas #dataprivacy #infosec #business #internet #cybercrime #media #technology #digitalprivacy

Substack reveals details of historic security breach that exposed user data

28 days / betanews / Sofia Elizabella Wyciślik-Wilson

Substack Suffers Data Breach, Users’ Emails And Phone Numbers Compromised

28 days / medianama / Chaitanya Kohli

Substack Confirms Breach Exposed 700K User Emails and Phone Numbers

29 days / winbuzzer / Markus Kasanmascheff

Substack says intruder lifted emails, phone numbers in months-old breach

29 days / theregister / Carly Page

Newsletter platform Substack is notifying users of a data breach after attackers stole their email addresses and phone numbers in October 2025.

29 days / bsky / @bleepingcomputer.com / bleepingcomputer.com

Substack CEO informs users of a data breach

29 days / engadget / Matt Tate

Substack confirms data breach affects users’ email addresses and phone numbers

29 days / techcrunch / Ivan Mehta

Newsletter platform Substack notifies users of data breach

29 days / bleepingcomputer / Sergiu Gatlan

Substack data breach exposed users’ emails and phone numbers

29 days / theverge / Jess Weatherbed

Windows 11 gets built-in Sysmon for security detection

Berry Zwets / techzine - Microsoft is bringing Sysmon functionality to Windows 11 and Windows Server 2025 as standard. The security tool, formerly part of Sysinternals, will be integrated into the operating system itself. Microsoft announced in November 2025 that Sysmon functiona…

#cybersecurity #devops #enterprise #infosec #windows #microsoft #patching #updates #operatingsystems

Microsoft Adds Sysmon To Windows https://tech.slashdot.org/story/26/02/05/0023249/microsoft-adds-sysmon-to-windows?utm_source=rss1.0mainlinkanon&utm_medium=feed

4 wks / bsky / @slashdot.org / slashdot.org

Microsoft Adds Sysmon To Windows

4 wks / slashdot / msmash

Windows 11 gets built-in Sysmon for security detection

4 wks / techzine / Berry Zwets

Microsoft actually does something useful, adds Sysmon to Windows

4 wks / theregister / Richard Speed

Microsoft rolls out native Sysmon monitoring in Windows 11

4 wks / bleepingcomputer / Sergiu Gatlan

Moltbook, the viral social network for AI agents, has a major security problem

Chris Stokel-Walker / fastcompany - The rise of OpenClaw, a proactive agentic AI controlled through interfaces more familiar to the average user than tools like Anthropic’s Claude Code, which enthralled early adopters over the holiday period, has been one of the most seismic shifts in the A…

#ai #cybersecurity #dataprivacy #infosec #social #aiethics #genai #security #hack #api #openclaw

AI governance and identity (2)
Emerging AI agent communities (3)
Moltbook security failures (4)
OpenClaw: risks and buzz (5)
All Other Stories

Notepad++ update server hijacked in targeted attacks — outfit claims Chinese state-sponsored hackers may be to blame

tomshardware - The Notepad++ project yesterday disclosed that its update server was covertly hijacked in a targeted supply chain attack that began in June 2025,

#cybersecurity #software #opensource #infosec #china #cybercrime #supplychain #hack #updates

Notepad++ supply chain attack breakdown

4 wks / ycombinator

Notepad++ says it was hijacked by Chinese state-sponsored hackers

4 wks / engadget / Mariella Moon

Notepad++ update server hijacked in targeted attacks — outfit claims Chinese state-sponsored hackers may be to blame

4 wks / tomshardware

Notepad++ update chain hijacked by Chinese Lotus Blossom group

4 wks / dataconomy / Emre Çıtak

OpenClaw: all the news about the trending AI agent

Emma Roth / theverge - An open-source AI agent called OpenClaw (formerly known as both Clawdbot and Moltbot) that runs on your own computer and “actually does things” is taking off inside tech circles. Users interact with OpenClaw via messaging apps like WhatsApp, Telegram, Sig…

#ai #cybersecurity #infosec #aiethics #genai #security #assistant #patching #updates #safety #openclaw

OpenClaw's AI agent does everything, even social media

4 wks / techxplore

DIY AI bot farm OpenClaw is a security 'dumpster fire'

4 wks / theregister / Thomas Claburn

Scheming, joking, complaining: Moltbook’s AI agents are just like us

4 wks / ft

OpenClaw Opens the Gates for AI Agents—Here’s What’s Real and What’s Not

4 wks / decrypt / Jose Antonio Lanz

‘Value for money’: AI agent OpenClaw adopts Chinese models for cost edge over US rivals

4 wks / scmp

Malicious MoltBot skills used to push password-stealing malware

4 wks / bleepingcomputer / Bill Toulas

A Social Network for A.I. Bots Only. No Humans Allowed.

4 wks / simonwillison / Simon Willison

OpenClaw: all the news about the trending AI agent

4 wks / theverge / Emma Roth

OpenClaw patches one-click RCE as security Whac-A-Mole continues

4 wks / theregister / Connor Jones

Notepad++ update feature hijacked by Chinese state hackers for months

Bill Toulas / bleepingcomputer - Chinese state-sponsored threat actors were likely behind the hijacking of Notepad++ update traffic last year that lasted for almost half a year, the developer states in an official announcement today. [...]

#cybersecurity #software #opensource #infosec #supplychain #hack #patching #updates #developertools

Chinese state hackers seize update channels (5)
Widespread state-sponsored attack compromises update infrastructure (5)
All Other Stories

Chinese state hackers seize update channels

Notepad++ hijacking blamed on Chinese Lotus Blossom crew behind Chrysalis backdoor

4 wks / theregister / Jessica Lyons

Notepad++ updates got hijacked for months and could have spied for China

4 wks / theverge / Stevie Bonifield

Notepad++ users take note: It's time to check if you're hacked

4 wks / arstechnica / Dan Goodin

Notepad++ says Chinese government hackers hijacked its software updates for months

4 wks / techcrunch / Zack Whittaker

Notepad++ update feature hijacked by Chinese state hackers for months

4 wks / bleepingcomputer / Bill Toulas

Widespread state-sponsored attack compromises update infrastructure

PSA: Update Notepad++ to version 8.9.1 after security incident

4 wks / techspot

Notepad++ Compromised By State Actor

4 wks / slashdot / msmash

Notepad++ hijacked by suspected state-sponsored hackers

4 wks / therecord

Notepad++ update service hijacked in targeted state-linked attack

4 wks / theregister / Richard Speed

Notepad++ Hijacked by State-Sponsored Hackers

4 wks / reddit / /u/pheexio

All Other Stories

The developer of the popular text editor Notepad++ said hackers associated with the Chinese government hijacked its software update mechanism to deliver tainted software to users for months.

4 wks / bsky / @techcrunch.com / techcrunch.com

Chinese state-sponsored threat actors were likely behind the hijacking of Notepad++ update traffic last year that lasted for almost half a year, the developer states in an official announcement today.

4 wks / bsky / @bleepingcomputer.com / bleepingcomputer.com

Notepad++ update feature hijacked by Chinese state hackers for months

4 wks / bsky / @infosec.skyfleet.blue / infosec.skyfleet.blue

Exploring Clawdbot, the AI agent taking the internet by storm — AI agent can automate tasks for you, but there are significant risks involved

tomshardware - Clawdbot is a new pseudo-locally-hosted gateway for agentic AI that offers a sneak peek at both good and bad futures for the technology.