Google Chrome security advisory (AV26-081)

Android security advisory – February 2026 monthly rollup (AV26-082)

Qualcomm security advisory – February 2026 monthly rollup (AV26-083)

Django security advisory (AV26-084)

[Control Systems] Moxa security advisory (AV26-085)

F5 security advisory (AV26-086)

Cisco security advisory (AV26-087)

Splunk security advisory (AV26-088)

GitLab security advisory (AV26-089)

TeamViewer security advisory (AV26-090)

n8n security advisory (AV26-091)

Zyxel security advisory (AV26-092)

Microsoft Edge security advisory (AV26-093)

[Control Systems] Moxa security advisory (AV26-094)

Tenable security advisory (AV26-095)

APA reports: Personal data of employees of the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP) and the Council for Justice was accessed by unauthorized persons as a result of a...

Germany's Federal Office for the Protection of the Constitution (aka Bundesamt für Verfassungsschutz or BfV) and Federal Office for Information Security (BSI) have issued a joint advisory warning...

Harvey Kong reports: Hong Kong’s privacy watchdog plans to consult lawmakers this year about introducing mandatory data breach reporting and related penalties, the body’s chief has said. Privacy...

Research shows productivity and judgment peak decades after graduation A growing body of research continues to show that older workers are generally more productive than younger employees.…

Plus: Apple’s Lockdown mode keeps the FBI out of a reporter’s phone, Elon Musk’s Starlink cuts off Russian forces, and more.

A new state-aligned cyberespionage threat group tracked as TGR-STA-1030/UNC6619, has conducted a global-scale operation dubbed the "Shadow Campaigns," where it targeted government infrastructure...

BridgePay Network Solutions confirmed late Friday that the incident disrupting its payment gateway was caused by ransomware. In an update posted Feb. 6, the company said it has engaged federal law...

Overview During the week of January 31 - February 7, 2026, GreyNoise sensors observed 3,979 HTTP sessions from 245 unique IP addresses containing callbacks to Interactsh OAST (Out-of-band...

In October 2025, the publishing platform Substack suffered a data breach that was subsequently circulated more widely in February 2026. The breach exposed 663k account holder records containing...

We introduce a novel method that maps cloud alert trends to MITRE ATT&CK techniques. The patterns created could identify threat actors by behavior. The post Novel Technique to Detect Cloud Threat...

The government has withheld details of the investigation of Renee Good's killing—but an unrelated case involving the ICE agent who shot her could force new revelations.

This is a video of advice for squid fishing in Puget Sound. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.

Officials at Cubic, the manufacturer of the gates, reportedly say their product has cameras that record for five seconds when someone neglects to pay a fare. Artificial intelligence is used to...

Once. Someone named “Vincenzo lozzo” wrote to Epstein in email, in 2016: “I wouldn’t pay too much attention to this, Schneier has a long tradition of dramatizing and misunderstanding things.” The...

Cybersecurity researchers have taken the wraps off a gateway-monitoring and adversary-in-the-middle (AitM) framework dubbed DKnife that's operated by China-nexus threat actors since at least 2019....