February 28, 2026
Denizens of DEF CON are ‘fed up with government’
This month in security with Tony Anscombe – February 2026 edition
In this roundup, Tony looks at how opportunistic threat actors are taking advantage of weak authentication, unmanaged exposure, and popular AI tools
February 28, 2026
https://security-tracker.debian.org/tracker/DSA-6152-1
February 28, 2026
Ransomware payments cratered in 2025, but attacks surged to record highs
February 27, 2026
French DIY etailer ManoMano admits customer data stolen
February 27, 2026
Cops back Dutch telco Odido after second wave of ShinyHunters leaks
February 27, 2026
Mobile app permissions (still) matter more than you may think
Start using a new app and you’ll often be asked to grant it permissions. But blindly accepting them could expose you to serious privacy and security risks.
February 27, 2026
Your staff are your biggest security risk: AI is making it worse
February 26, 2026
Rapid AI-driven development makes security unattainable, warns Veracode
February 26, 2026
Notorious ransomware gang allegedly blackmailed by fake FSB officer
February 26, 2026
Five Eyes warn: Patch your Cisco SD-WAN or risk root takeover
February 26, 2026
Smashing Security podcast #456: How to lose friends and DDoS people
February 26, 2026
https://security-tracker.debian.org/tracker/DSA-6151-1
February 26, 2026
https://security-tracker.debian.org/tracker/DSA-6150-1
February 26, 2026
https://security-tracker.debian.org/tracker/DSA-6149-1
February 26, 2026
Ex-L3Harris exec jailed 7 years for selling exploits to Russia
February 25, 2026
Threat intelligence supply chain is full of weak links, researchers find
February 25, 2026
What Is Fail2ban?
February 25, 2026
https://security-tracker.debian.org/tracker/DSA-6148-1
February 25, 2026
MCP security: The current situation
February 25, 2026
AI has gotten good at finding bugs, not so good at swatting them
February 24, 2026
Patch these 4 critical, make-me-root SolarWinds bugs ASAP
February 24, 2026
Go library maintainer brands GitHub’s Dependabot a ‘noise machine’
February 24, 2026
Faking it on the phone: How to tell if a voice call is AI or not
Can you believe your ears? Increasingly, the answer is no. Here’s what’s at stake for your business, and how to beat the deepfakers.
February 23, 2026
PromptSpy ushers in the era of Android threats using GenAI
ESET researchers discover PromptSpy, the first known Android malware to abuse generative AI in its execution flow
February 19, 2026
Is Poshmark safe? How to buy and sell without getting scammed
Like any other marketplace, the social commerce platform has its share of red flags. It pays to know what to look for so you can shop or sell without headaches.
February 19, 2026
Is it OK to let your children post selfies online?
When it comes to our children’s digital lives, prohibition rarely works. It’s our responsibility to help them build a healthy relationship with tech.
February 17, 2026
Zero CVEs: The symptom of a larger problem
February 13, 2026
Naming and shaming: How ransomware groups tighten the screws on victims
When corporate data is exposed on a dedicated leak site, the consequences linger long after the attack fades from the news cycle
February 12, 2026
Polish hacker charged seven years after massive Morele.net data breach
February 12, 2026
Taxing times: Top IRS scams to look out for in 2026
It’s time to file your tax return. And cybercriminals are lurking to make an already stressful period even more edgy.
February 10, 2026
https://security-tracker.debian.org/tracker/DSA-6124-1
February 9, 2026
Taiwan tells Uncle Sam its chip ecosystem ain’t going anywhere
February 9, 2026
Salesforce may be prepping to phase out Heroku
February 9, 2026
How the GNU C Compiler became the Clippy of cryptography
February 9, 2026
AI-augmented data quality engineering
February 9, 2026
Several security issues were fixed in pip.
February 9, 2026
An update that solves 76 vulnerabilities and contains one feature can now be installed.
February 9, 2026
An update that solves 76 vulnerabilities and contains one feature can now be installed.
February 9, 2026
An update that solves one vulnerability can now be installed.
February 9, 2026
Indian police commissioner wants ID cards for AI agents
February 9, 2026
Update to version 1.2026.1
February 9, 2026
Update to 1.10.2 Update was blocked by a ppc64 issue, but a workaround has been found.
February 9, 2026
https://security-tracker.debian.org/tracker/DSA-6127-1
February 9, 2026
https://security-tracker.debian.org/tracker/DSA-6126-1
February 9, 2026
https://security-tracker.debian.org/tracker/DSA-6125-1
February 9, 2026
Update to 144.0.7559.132 * CVE-2026-1861: Heap buffer overflow in libvpx * CVE-2026-1862: Type Confusion in V8
February 8, 2026
Update to version 0.50.18
February 8, 2026
Backport fixes for CVE-2026-1484, CVE-2026-1485, CVE-2026-1489.
February 8, 2026
Update to version 1.9.2. Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.2
February 8, 2026
Release notes for xrdp v0.10.5 (2026/01/27) Security fixes CVE-2025-68670: Improper bounds checking of domain string length leads to Stack- based Buffer Overflow New features
February 8, 2026
Release notes for xrdp v0.10.5 (2026/01/27) Security fixes CVE-2025-68670: Improper bounds checking of domain string length leads to Stack- based Buffer Overflow New features
February 8, 2026
Study confirms experience beats youthful enthusiasm
February 7, 2026
Denis Skvortsov discovered that xrdp, a Remote Desktop Protocol (RDP) server, was susceptible to an unauthenticated stack-based buffer overflow vulnerability, which may result in remote execution of arbitrary code. For the oldstable distribution (bookworm), this problem has been fixed
February 7, 2026
What Is TLS (Transport Layer Security) in Linux Security?
February 7, 2026
Update to 9.18.44 (rhbz#2431609) Security Fixes: Fix incorrect length checks for BRID and HHIT records. (CVE-2025-13878) Bug Fixes: Allow glue in delegations with QTYPE=ANY.
February 7, 2026
Update to 9.18.44 (rhbz#2431609) Security Fixes: Fix incorrect length checks for BRID and HHIT records. (CVE-2025-13878) Bug Fixes: Allow glue in delegations with QTYPE=ANY.
February 7, 2026
Update to 13.0.10.
February 7, 2026
An update that fixes one vulnerability, contains one feature is now available.
February 7, 2026
https://security-tracker.debian.org/tracker/DSA-6123-1
February 7, 2026
Sudo, a program designed to allow a sysadmin to give limited root privileges to users and log root activity, was affected by multiple vulnerabilities. CVE-2023-28486 Sudo did not escape control characters in log messages.
February 6, 2026
Microsoft bumps .NET Framework 3.5 from Windows installers
February 6, 2026
https://security-tracker.debian.org/tracker/DSA-6122-1
February 6, 2026
https://security-tracker.debian.org/tracker/DSA-6121-1
February 6, 2026
https://security-tracker.debian.org/tracker/DSA-6120-1
February 6, 2026
https://security-tracker.debian.org/tracker/DSA-6119-1
February 6, 2026
Flickr emails users about data breach, pins it on 3rd party
February 6, 2026
DDoS deluge: Brit biz battered as botnet blitzes break records
February 6, 2026
Claude AI finds 500 high-severity software vulnerabilities
February 6, 2026
Python everywhere—but are we there yet?
February 6, 2026