📝 Windows 11 NOTEPAD RCE ZERO-DAY Executes Files Silently 📝

Microsoft patched a remote code execution vulnerability in Windows 11 Notepad that allowed attackers to execute local or remote programs through specially crafted Markdown links without triggering Windows security warnings. Users could be tricked into clicking malicious links in seemingly harmless text files.

Sources:

• https://www.bleepingcomputer.com/news/microsoft/windows-11-notepad-flaw-let-files-execute-silently-via-markdown-lin...

🚨 Microsoft Patches 6 Actively Exploited Zero-Days 🚨

Microsoft's February 2026 Patch Tuesday fixes dozens of Windows and Office bugs, including six zero-day vulnerabilities actively exploited in the wild. Security teams are urged to patch quickly, especially for flaws tied to SmartScreen bypass and privilege escalation.

Sources:

• https://www.bleepingcomputer.com/news/microsoft/microsoft-february-2026-patch-tuesday-fixes-6-zero-days-58-flaws/

• https://thehackernews.com/2026/02/microsoft-patch...

🏢 Conduent Breach Balloons to Millions 🏢

The data breach at government technology giant Conduent has expanded dramatically, now affecting millions more Americans. The Safeway ransomware group claims responsibility for stealing over 8 terabytes of data containing personal and health information. Conduent handles data for more than 100 million people across America, making this one of the largest breaches of 2026.

Sources:

• https://techcrunch.com/2026/02/05/data-breach-at-govtech-giant-conduen...

⚠️ BeyondTrust Critical RCE Flaw Patched ⚠️

BeyondTrust patched a critical pre-authentication remote code execution vulnerability (CVE-2026-1731) in Remote Support and PRA products. Attackers could run OS commands via crafted requests without authentication. Approximately 11,000 exposed instances were found online. Security patches have been released for all affected versions.

Sources:

• https://thehackernews.com/2026/02/beyondtrust-patches-pre-auth-rce.html

• https://x.com/TheHackersNews/statu...

✈️ Air France Data Breach Exposes 2M+ Records ✈️

Threat actors claim access to Air France admin panel exposing over 2 million customer purchase records including PII, Flying Blue loyalty data, and booking details. If you've ever flown Air France, your data might be at risk.

Sources:

• https://darkwebinformer.com/threat-actor-claims-air-france-vulnerability-exposes-2-million-customer-records-via-admin-panel/

• https://www.bleepingcomputer.com/news/security/air-france-and-klm-disclose-data-brea...

#openclaw (formerly Clawdbot/Moltbot) exploded to 160,000 GitHub stars in 6 weeks and represents a fundamental shift in AI: autonomous agents that execute terminal commands, manage emails, and operate 24/7 without human oversight. This isn't a chatbot. It's AI with hands.

In this 30-minute talk, I break down the security nightmare keeping CISOs awake: active vulnerabilities (CVE-2026-25253), 1.5 million exposed API keys, malicious marketplace entries, and why traditional IAM can't handle autono...

⚠️ Chinese Hackers Hijack Notepad++ Updates for Months ⚠️

Chinese state-sponsored hackers compromised Notepad++ update infrastructure from June through December 2025, delivering malware to select targets via hijacked hosting provider. The attack used Microsoft Warbird obfuscation APIs and went undetected for half a year.

Sources:

• https://www.bleepingcomputer.com/news/security/notepad-plus-plus-update-feature-hijacked-by-chinese-state-hackers-for-months/

• https://thehackernews.com/2026/01/c...

🚨 CISA Director Uploaded Classified Docs to ChatGPT (After Failing Polygraph) 🚨

The acting Director of CISA, America's top cybersecurity agency, uploaded classified government documents to public ChatGPT four times. He specifically requested access even though it's blocked on DHS networks. Oh, and he failed a polygraph test before getting the job. Classic "do as I say, not as I do."

Sources: - https://twitter.com/IntCyberDigest/status/2016575284946837691

- https://twitter.com/TheHackersNews/st...

📦 That WinRAR "Free Trial" You Never Paid For? Hackers Are Exploiting It Right Now 🚨

A WinRAR vulnerability patched last July (CVE-2025-8088) is still being actively exploited by Russian APTs, Chinese threat actors, and cybercrime gangs six months later. The path traversal flaw lets attackers slip malicious files into your system when you extract see...

💔 10M Dating App Users Exposed in Match Group Breach 💔

ShinyHunters cybercrime group claims to have stolen over 10 million records from Match Group (NASDAQ: MTCH), owner of Tinder, Hinge, Match.com, and OkCupid. The alleged breach, posted January 28, 2026, includes user behavioral data from Appsflyer analytics (swipes, matches, sessions, geo-locations), hundreds of internal corporate documents, and highly sensitive personal information including romantic preferences. The 1.76GB compressed dump ...