Uncategorized

Thousands of Public Google Cloud API Keys Exposed with Gemini Access After API Enablement 2026-02-28 at 12:52 By New research has found that Google Cloud API keys, typically designated as project identifiers for billing purposes, could be abused to authenticate to sensitive Gemini endpoints and access private data. The findings come from Truffle Security, which […]

Open source devs consider making hogs pay for every Git pull 2026-02-28 at 10:37 By Steven J. Vaughan-Nichols Careless big-time users are treating FOSS repos like content delivery networks Opinion  I’m at the Linux Foundation Members Summit, and Sonatype‘s CTO Brian Fox introduced me to a new open source problem. I wouldn’t have thought that

Pentagon Designates Anthropic Supply Chain Risk Over AI Military Dispute 2026-02-28 at 08:20 By Anthropic on Friday hit back after U.S. Secretary of Defense Pete Hegseth directed the Pentagon to designate the artificial intelligence (AI) upstart as a “supply chain risk.” “This action follows months of negotiations that reached an impasse over two exceptions we

Enhancing Incident Response with Integrated Access Control and Video Verification 2026-02-28 at 07:07 By Evolving threats have security teams on alert to integrate solutions that both mitigate and combat different scenarios. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Malicious Go Crypto Module Steals Passwords, Deploys Rekoobe Backdoor 2026-02-28 at 07:07 By Cybersecurity researchers have disclosed details of a malicious Go module that’s designed to harvest passwords, create persistent access via SSH, and deliver a Linux backdoor named Rekoobe. The Go module, github[.]com/xinfeisoft/crypto, impersonates the legitimate “golang.org/x/crypto” codebase, but injects malicious code that’s responsible

Double whammy: Steaelite RAT bundles data theft, ransomware in one evil tool 2026-02-28 at 00:59 By Jessica Lyons Credential and cryptocurrency theft, live surveillance, ransomware – an attacker’s Swiss Army knife A new remote access trojan (RAT) being sold on cybercrime networks enables double extortion attacks on Windows machines by bundling ransomware and data theft,

Trump orders purge of ‘woke’ Anthropic from government 2026-02-28 at 00:39 By Brandon Vigliarolo Without a single ‘You’re Fired’ joke updated  President Trump has escalated Anthropic’s dispute with the Defense Department with a social media post ordering the entire federal government purge the company’s software from its systems. … This article is an excerpt from The

PCs and phones to get more boring and expensive in 2026 thanks to memory drought 2026-02-28 at 00:03 By O’Ryan Johnson ‘This is perhaps the biggest challenge the industry has faced since its inception’ The next wave of smartphones and PCs will have less memory and fewer capabilities, yet are likely to cost consumers 14

Amazon and Nvidia open their wallets to lock in OpenAI’s business while SoftBank keeps the lights on 2026-02-27 at 22:08 By Tobias Mann ChatGPT maker announces $110B in new investment amid flurry of self-serving deals The headlines say OpenAI on Friday announced $110 billion in new investment from Amazon, Nvidia, and SoftBank at a $730

Suspected Nork digital intruders caught breaking into US healthcare, education orgs 2026-02-27 at 21:59 By Jessica Lyons Who is knocking at the Dohdoor? Digital intruders with possible links to North Korea have been infecting US education and healthcare sectors with a never-before-seen backdoor since at least December, according to security researchers.… This article is an

DoJ Seizes $61 Million in Tether Linked to Pig Butchering Crypto Scams 2026-02-27 at 20:11 By The U.S. Department of Justice (DoJ) this week announced the seizure of $61 million worth of Tether that were allegedly associated with bogus cryptocurrency schemes known as pig butchering. The confiscated funds were traced to cryptocurrency addresses used for

900+ Sangoma FreePBX Instances Compromised in Ongoing Web Shell Attacks 2026-02-27 at 19:59 By The Shadowserver Foundation has revealed that over 900 Sangoma FreePBX instances still remain infected with web shells as part of attacks that exploited a command injection vulnerability starting in December 2025. Of these, 401 instances are located in the U.S., followed

Cops back Dutch telco Odido after second wave of ShinyHunters leaks 2026-02-27 at 16:31 By Connor Jones Company refuses to pay ransom as attackers threaten larger daily dumps The Netherlands’ national police is backing Odido’s refusal to pay a ransom after ShinyHunters leaked a second round of records belonging to the telco.… This article is

Burger King testing AI headsets that track how friendly employees are to customers 2026-02-27 at 15:38 By Associated Press Burger King has begun testing AI-powered headsets that can recite recipes, alert managers when inventory is low, and even track how friendly employees are to customers. This article is an excerpt from Latest Technology News |

50 GW of datacenter demand queues up for UK grid access 2026-02-27 at 15:38 By Dan Robinson To put that into perspective, 45 GW was peak electricity use for Britain so far this year About 140 datacenters are in the queue to be connected to Britain’s power grid, and their combined energy requirements are estimated

ScarCruft Uses Zoho WorkDrive and USB Malware to Breach Air-Gapped Networks 2026-02-27 at 15:38 By The North Korean threat actor known as ScarCruft has been attributed to a fresh set of tools, including a backdoor that uses Zoho WorkDrive for command-and-control (C2) communications to fetch more payloads and an implant that uses removable media to

Half of German-speaking SAP users set to blow past 2027 ECC support deadline 2026-02-27 at 14:31 By Lindsay Clark Most DSAG members willing to pay a premium to stay on legacy platform until 2030 About half of German-speaking SAP users on its legacy ECC ERP system are set to ignore the 2027 support deadline, according

Sopra Steria sues UK government over £958M Capita outsourcing award 2026-02-27 at 14:31 By Lindsay Clark French firm claims DWP failed to identify rival’s bid was ‘abnormally low’ and alleges govt breached procurement rules Sopra Steria is suing the UK government, alleging it accepted a bid from rival Capita for an outsourcing contract worth up

Trojanized Gaming Tools Spread Java-Based RAT via Browser and Chat Platforms 2026-02-27 at 12:47 By Threat actors are luring unsuspecting users into running trojanized gaming utilities that are distributed via browsers and chat platforms to distribute a remote access trojan (RAT). “A malicious downloader staged a portable Java runtime and executed a malicious Java archive

Mondelēz picks Celonis as process backbone for SAP overhaul 2026-02-27 at 12:18 By Lindsay Clark Snack giant opts for vendor-neutral process mining as it shifts from ECC to S/4HANA In the middle of a mammoth migration off SAP’s legacy ERP systems, global snack giant Mondelēz has found an alternative to the German vendor’s tech as