2026

Thousands of Public Google Cloud API Keys Exposed with Gemini Access After API Enablement 2026-02-28 at 12:52 By New research has found that Google Cloud API keys, typically designated as project identifiers for billing purposes, could be abused to authenticate to sensitive Gemini endpoints and access private data. The findings come from Truffle Security, which

Open source devs consider making hogs pay for every Git pull 2026-02-28 at 10:37 By Steven J. Vaughan-Nichols Careless big-time users are treating FOSS repos like content delivery networks Opinion  I’m at the Linux Foundation Members Summit, and Sonatype‘s CTO Brian Fox introduced me to a new open source problem. I wouldn’t have thought that

Pentagon Designates Anthropic Supply Chain Risk Over AI Military Dispute 2026-02-28 at 08:20 By Anthropic on Friday hit back after U.S. Secretary of Defense Pete Hegseth directed the Pentagon to designate the artificial intelligence (AI) upstart as a “supply chain risk.” “This action follows months of negotiations that reached an impasse over two exceptions we

Enhancing Incident Response with Integrated Access Control and Video Verification 2026-02-28 at 07:07 By Evolving threats have security teams on alert to integrate solutions that both mitigate and combat different scenarios. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Malicious Go Crypto Module Steals Passwords, Deploys Rekoobe Backdoor 2026-02-28 at 07:07 By Cybersecurity researchers have disclosed details of a malicious Go module that’s designed to harvest passwords, create persistent access via SSH, and deliver a Linux backdoor named Rekoobe. The Go module, github[.]com/xinfeisoft/crypto, impersonates the legitimate “golang.org/x/crypto” codebase, but injects malicious code that’s responsible

Double whammy: Steaelite RAT bundles data theft, ransomware in one evil tool 2026-02-28 at 00:59 By Jessica Lyons Credential and cryptocurrency theft, live surveillance, ransomware – an attacker’s Swiss Army knife A new remote access trojan (RAT) being sold on cybercrime networks enables double extortion attacks on Windows machines by bundling ransomware and data theft,

Trump orders purge of ‘woke’ Anthropic from government 2026-02-28 at 00:39 By Brandon Vigliarolo Without a single ‘You’re Fired’ joke updated  President Trump has escalated Anthropic’s dispute with the Defense Department with a social media post ordering the entire federal government purge the company’s software from its systems. … This article is an excerpt from The