🚨 Texas Sues TP-Link Over Chinese Hacking Risks 🚨

Texas sued TP-Link Systems alleging the company deceptively marketed routers as secure while firmware vulnerabilities enabled Chinese state-backed hackers to compromise American users' devices and networks.

Sources:

• https://www.bleepingcomputer.com/news/security/texas-sues-tp-link-over-chinese-hacking-risks-user-deception/

• https://www.texasattorneygeneral.gov/news/releases/texas-files-lawsuit-tp-link-systems-deceptive-security-claims

• htt...

🔴 Google Patches First Chrome Zero-Day of 2026 — Actively Exploited 🔴

Google released emergency updates on February 16, 2026 to patch CVE-2026-2441, a high-severity use-after-free vulnerability in Chrome with a CVSS score of 8.8. The flaw is being actively exploited in the wild, allowing remote attackers to potentially execute code by getting victims to visit a crafted webpage. This is Chrome's first actively exploited zero-day of 2026, and users on all platforms should update immediately.

Sou...

🦀Infostealer Steals OpenClaw AI Agent Secrets🦀

Information-stealing malware has been observed for the first time specifically targeting OpenClaw, a popular agentic AI assistant framework, stealing API keys, authentication tokens, and cloud credentials stored in its configuration files. This attack vector is particularly dangerous because compromised AI agent credentials can give attackers access to entire automated pipelines and connected cloud services. Security experts warn that as AI agent a...

📬 Hackers Are Literally Mailing You Fake Letters 📬

Threat actors are sending physical letters through postal mail pretending to be from Trezor and Ledger, manufacturers of cryptocurrency hardware wallets. The letters use official-looking branding and urgent language to trick recipients into revealing their wallet recovery phrases on fake websites. The scam represents a sophisticated blend of physical and digital social engineering.

Sources:

• https://www.bleepingcomputer.com/news/security/sna...

🤖 Hackers Weaponize Google's Gemini AI in Multi-Stage Attacks 🤖

Google Threat Intelligence Group published a report warning about AI model extraction and distillation attacks where threat actors abuse legitimate API access to systematically probe AI models. Attackers are using Gemini AI across all stages of cyber attacks, from reconnaissance to payload delivery.

Sources:

• https://www.bleepingcomputer.com/news/security/google-says-hackers-are-abusing-gemini-ai-for-all-attacks-stages/

• https:...

📝 Windows 11 NOTEPAD RCE ZERO-DAY Executes Files Silently 📝

Microsoft patched a remote code execution vulnerability in Windows 11 Notepad that allowed attackers to execute local or remote programs through specially crafted Markdown links without triggering Windows security warnings. Users could be tricked into clicking malicious links in seemingly harmless text files.

Sources:

• https://www.bleepingcomputer.com/news/microsoft/windows-11-notepad-flaw-let-files-execute-silently-via-markdown-lin...

🚨 Microsoft Patches 6 Actively Exploited Zero-Days 🚨

Microsoft's February 2026 Patch Tuesday fixes dozens of Windows and Office bugs, including six zero-day vulnerabilities actively exploited in the wild. Security teams are urged to patch quickly, especially for flaws tied to SmartScreen bypass and privilege escalation.

Sources:

• https://www.bleepingcomputer.com/news/microsoft/microsoft-february-2026-patch-tuesday-fixes-6-zero-days-58-flaws/

• https://thehackernews.com/2026/02/microsoft-patch...

🏢 Conduent Breach Balloons to Millions 🏢

The data breach at government technology giant Conduent has expanded dramatically, now affecting millions more Americans. The Safeway ransomware group claims responsibility for stealing over 8 terabytes of data containing personal and health information. Conduent handles data for more than 100 million people across America, making this one of the largest breaches of 2026.

Sources:

• https://techcrunch.com/2026/02/05/data-breach-at-govtech-giant-conduen...

⚠️ BeyondTrust Critical RCE Flaw Patched ⚠️

BeyondTrust patched a critical pre-authentication remote code execution vulnerability (CVE-2026-1731) in Remote Support and PRA products. Attackers could run OS commands via crafted requests without authentication. Approximately 11,000 exposed instances were found online. Security patches have been released for all affected versions.

Sources:

• https://thehackernews.com/2026/02/beyondtrust-patches-pre-auth-rce.html

• https://x.com/TheHackersNews/statu...

✈️ Air France Data Breach Exposes 2M+ Records ✈️

Threat actors claim access to Air France admin panel exposing over 2 million customer purchase records including PII, Flying Blue loyalty data, and booking details. If you've ever flown Air France, your data might be at risk.

Sources:

• https://darkwebinformer.com/threat-actor-claims-air-france-vulnerability-exposes-2-million-customer-records-via-admin-panel/

• https://www.bleepingcomputer.com/news/security/air-france-and-klm-disclose-data-brea...