Follow on Google News
fast-mcp-telegram Vulnerability Lets Attackers Access Default Telegram Sessions
A critical vulnerability in fast-mcp-telegram can let a remote attacker bypass bearer-token authentication and access a default Telegram account session without knowing the correct token.…
Windows Device Identifier Helped FBI Trace Alleged Scattered Spider Member
A persistent Windows device identifier helped federal investigators connect an alleged Scattered Spider member to a 2025 intrusion at a luxury jewelry retailer, according to…
Critical BeyondTrust Flaws Let Attackers Bypass Access Controls in Remote Support and PRA
BeyondTrust has patched four vulnerabilities in its Remote Support and Privileged Remote Access products, including two critical authentication bypass flaws that could let attackers gain…
16-Year-Old Linux KVM Flaw Lets Malicious Guests Corrupt Host Kernel Memory
A long-standing Linux KVM vulnerability can let a malicious guest virtual machine corrupt host kernel memory, breaking one of the core security promises of virtualization.…
Tenda Router Backdoor Grants Attackers Full Admin Access Without Valid Credentials
A hidden authentication backdoor in several Tenda router firmware builds can let attackers bypass normal login checks and gain full administrator access to the device’s…
Cavern Manticore Abuses SysAid and WinDirStat DLL Sideloading to Deploy Cavern C2 Framework
Iran-linked threat actor Cavern Manticore has been using trusted IT administration tools and DLL sideloading to deploy a modular command-and-control framework called Cavern against Israeli…
OpenAI Codex macOS Vulnerability Could Leak Data Through Indirect Prompt Injection
A vulnerability in the OpenAI Codex desktop app for macOS could allow attackers to leak sensitive data by abusing indirect prompt injection and automatic Markdown…
Hackers Use Microsoft Teams Calls to Install RMM Tools and Deploy EtherRAT
Threat actors are abusing Microsoft Teams voice calls to impersonate corporate IT support and trick employees into installing remote access tools that lead to EtherRAT…
Fake Recruiter Emails Use Career Pages to Steal Gmail Logins
A phishing campaign is impersonating recruiters from major global brands to steal Google account credentials from professionals looking at job opportunities. The campaign uses personalized…
Microsoft Will Turn On Windows Settings Backup by Default in Windows 11 26H2
Microsoft is changing how Windows settings backup works in Windows 11 version 26H2. Starting with the update, the backup policy for Windows settings backup and…
February 10, 2026
1 comment 
