Ionut Arghire

SAP has released 26 new and one updated security notes on February 2026 security patch day.

The company will use the investment to expand its R&D team and operations, deepen platform capabilities, and scale go-to-market presence.

Estimated to have infected 7,000 systems, the botnet uses a mass-compromise pipeline, deploying various scanners and malware.

Affecting both RS and PRA, the bug can be exploited remotely via crafted requests without authentication.

China-linked UNC3886 targeted all four major telecom providers, but did not disrupt services or access customer information.

As only data exfiltration for extortion no longer delivers ROI, ransomware gangs may increasingly encrypting data for additional leverage.

Vulnerable SolarWinds Web Help Desk instances were exploited in December 2025 for initial access.

SmarterTools says customers were impacted after hackers compromised a data center used for quality control testing.

The signs of a cyberattack were identified on systems EU's main executive body uses for mobile device management.

Edge devices that are no longer supported have been targeted in attacks by state-sponsored hackers, the US says.

The startup aims to unify SOC, GRC, IAM, vulnerability management, IT, and business operations through its Agentic OS platform.

Used since at least 2019, DKnife has been targeting the desktop, mobile, and IoT devices of Chinese users.

The security defect allows unauthenticated attackers to execute arbitrary code remotely via malicious HTTP requests.

VS Code-integrated configuration files are automatically executed in Codespaces when the user opens a repository or pull request.

The malware is known for dropping ransomware and other payloads, and for abusing infected machines to proxy traffic.

The vulnerability could allow attackers to execute arbitrary commands and steal credentials and other secrets.

The security defects can lead to DoS conditions, arbitrary command execution, and privilege escalation.

The startup will use the funding to accelerate product development and go-to-market operations.

The critical vulnerability exists in the contextual trust in MCP Gateway architecture, as instructions are passed without validation.

Two IP addresses accounted for the majority of the 1.4 million exploitation attempts observed over the past week.