Security

• Vercel Sandbox now enforces egress policies via SNI filtering and CIDR blocks. • Outbound TLS connections are matched at handshake, blocking unauthorized destinations pre‑data. •

• How GEICO lowered its $300M cloud spend and decoupled security from the network Mitch Pronschinske Optimize operations Risk & compliance Speed & agility Secrets & identity manage

• Linux drives a lot of the world’s computing infrastructure, and that means it will continue to be a strategic target for threat actors. • This post gives you a 101 overview of: -

• AWS us-east-1 outage on Oct 20, 2025 tested HCP Vault Dedicated resilience. • Control plane hit 500 errors, but data plane clusters stayed 100% uptime. • HCP Vault leveraged AWS

• Seven years ago, managing security and compliance was fairly straightforward at Duke Energy. • Most of the company’s applications ran on-premises. • Security teams had complete c

• CVE-2026-2329 allows unauthenticated root-level access to SMB phone infrastructure, so attackers can intercept calls, commit toll fraud, and impersonate users.

• Alirohas raised $15 million in an oversubscribed funding round led byGutbrain Ventures, with participation fromCisco Investments,Argon Ventures, andWonderstone Ventures. • The co

• My 6 favorite DNS services - and why they’re a must for security Follow ZDNET:Add us as a preferred sourceon Google ZDNET key takeaways Private DNS is a must these days. • If you

• Security updates for Wednesday Dist. • | ID | Release | Package | Date | Debian | DLA-4482-1 | LTS | ceph | 2026-02-17 | Debian | DSA-6139-1 | stable | gimp | 2026-02-18 | Debian

• Security updates for Wednesday Dist. • | ID | Release | Package | Date | Debian | DLA-4482-1 | LTS | ceph | 2026-02-17 | Debian | DSA-6139-1 | stable | gimp | 2026-02-18 | Debian

• DAO hack in 2016 siphoned millions, sparking Ethereum’s first major crisis. • 75,000 ETH remained untouched, now forming a $150M security endowment. • DAO Security Fund will stak

• Uses trace rewriting to deter unauthorized knowledge distillation from large language models. • Introduces anti-distillation techniques that degrade training usefulness while kee

• Non‑human identities outnumber humans, yet still managed like people. • Microservices and containers create thousands of secrets across environments. • Static secrets (passwords,

• Red Hat Lightspeed rebrands Insights, delivering AI-driven predictive analytics for faster, smarter operations. • Existing Insights features-advisor, vulnerability, compliance-re

• Securing the AI software supply chain: Security results across 67 open source projects Learn how The GitHub Secure Open Source Fund helped 67 critical AI‑stack projects accelerat

• PP097: How and Why to Turn the Browser into a Universal Security Agent (Sponsored) Podcast:Download(40.6MB) |Embed Jennifer (JJ)Minella DrewConry-Murray With the rise of cloud se

• SINGAPORE, Singapore, 17th February 2026, CyberNewswire

• Atomic distributions ensure upgrades either fully succeed or are discarded, eliminating rollback headaches. • Many atomic distros are immutable, adding extra security by preventi

• Keenadu: sophisticated Android malware embedded in firmware across multiple device brands. • Distributes via OTA firmware, system apps, unofficial sources, and Google Play apps.

• Multiple distributions released critical security patches for popular packages like gimp, golang, and gnupg2. • Kernel updates appeared across Oracle, SUSE, and Debian, addressin

• Security updates for Tuesday Dist. • | ID | Release | Package | Date | —|—|—|—|—| AlmaLinux | ALSA-2026:2707 | 9 | gimp | 2026-02-17 | AlmaLinux | ALSA-2026:2708 | 8 |

• Engineer discovers smart sleep mask can read other users’ brainwaves. • Issue caused by hardcoded credentials and insecure Bluetooth protocol. • Mask likely from SLEEPU DreamPilo

• Tuesday, February 17, 2026 Join the Python Security Response Team! • Thanks to the work of the Security Developer-in-Residence Seth Larson, the Python Security Response Team (PS

• Computer Science > Artificial Intelligence [Submitted on 4 Feb 2026] Title:Human-Centered Explainable AI for Security Enhancement: A Deep Intrusion Detection Framework View PDF H

• Computer Science > Artificial Intelligence [Submitted on 4 Feb 2026] Title:Human-Centered Explainable AI for Security Enhancement: A Deep Intrusion Detection Framework View PDF H

• The curl project has found AI-powered tools to be a mixed bag when it comes to security reports. • At FOSDEM 2026 , curl creator and lead developer Daniel Stenberg used his keyno

• The curl project has found AI-powered tools to be a mixed bag when it comes to security reports. • At FOSDEM 2026 , curl creator and lead developer Daniel Stenberg used his keyno

• Four stable kernel releases announced for the Linux community today. • New versions include 6.19.1, 6.18.11, 6.12.72, and 6.6.125 for all. • Each kernel contains critical bug fix

• Security updates for Monday Dist. • | ID | Release | Package | Date | —|—|—|—|—| Debian | DSA-6135-1 | stable | chromium | 2026-02-15 | Debian | DSA-6134-1 | stable | p

• We’re so glad you’re here. • You can expect all the best TNS content to arrive Monday through Friday to keep you on top of the news and at the top of your game. • Check

• We’re so glad you’re here. • You can expect all the best TNS content to arrive Monday through Friday to keep you on top of the news and at the top of your game. • Check

• As AI deployments scale and start to include packs of agents autonomously working in concert, organizations face a naturally amplified attack surface.

• AlmaLinux: Firefox, GCC toolset, Node.js 20/22/24, PHP 7.4, Python 3.12 patched. • Debian: Stable updates for haproxy, nginx, PostgreSQL 15/17 released Feb 12‑13. • Fedora F43: l

• Organizations are rapidly adopting Copilot Studio agents, but threat actors are equally fast at exploiting misconfigured AI workflows. • Mis-sharing, unsafe orchestration, and we

• | ID | Release | Package | Date | AlmaLinux | ALSA-2026:2389 | 8 | brotli | 2026-02-11 | AlmaLinux | ALSA-2026:2323 | 8 | git-lfs | 2026-02-11 | AlmaLinux | ALSA-2026:1377 | 9 |

• The CTEM Divide: Why 84% of Security Programs Are Falling Behind A new 2026 market intelligence study of 128 enterprise security decision-makers (available here) reveals a stark

• Cyberattacks & Data Breaches Cyber Risk Data Privacy Cybersecurity Operations News Breaking cybersecurity news, news analysis, commentary, and other content from around the world

• The European Space Agency (ESA) will take part in the upcoming Munich Security Conference (MSC), one of the world’s leading forums for international security policy. • ESA Direct

• Posted on February 11, 2026by Eddie Knight, Sonatype TheCNCF Technical Advisory Group for Security & Complianceis excited to announce the upcoming 2026 Security Slam at KubeCon +

• Criticize the government online? • The Department of Homeland Security (DHS) might ask Google to cough up your name. • By abusing an investigative tool called ‘administrative sub

• CISA’s 2025 Year in Review: Driving Security and Resilience Across Critical Infrastructure WASHINGTON - The Cybersecurity and Infrastructure Security Agency (CISA) unveiled its20

• I have survived the biggest Pwn2Own ever, but I’m back in Tokyo for the second Patch Tuesday of 2026. • My location never stops Patch Tuesday from coming, so let’s take a look at

• Today, Microsoft is releasing the new Cyber Pulse report to provide leaders with straightforward, practical insights and guidance on new cybersecurity risks. • One of today’s mos

• Man tricked hundreds of women into handing over Snapchat security codes Fresh off a breathless Super Bowl Sunday, we’re less thrilled to bring you this week’s Weirdo Wednesday. •

• Share Link copied to clipboard! • Content types News Topics Office of the CISO Security management Security operations Every conversation I have with information security leaders

• How academic collaboration delivers real-world security to Amazon customers An early meeting between Amazon scientists and Stanford researchers led to cvc5, an open-source tool n

• The 3Cs: A Framework for AI Agent Security Every time execution models change, security frameworks need to change with them. • Agents force the next shift. • The Unattended Lapto

• Carnegie Mellon launches summer undergraduate research program to expand pathways into security and privacy The application deadline for this year’s program is February 1, 2026 M

• Trillion Dollar Security Day at Devconnect Posted by Ethereum Foundation Team on February 3, 2026 Security During Devconnect Buenos Aires, the Ethereum Foundation andSecureumTrus

• AI coding agents enable developers to work faster by streamlining tasks and driving automated, test-driven development. • However, they also introduce a significant, often overlo

• Sigstore’s original hard-coded ECDSA P-256 + SHA-256 limited future cryptographic flexibility. • Trail of Bits collaborated to create centralized algorithm registry in Protobuf s

• Ingress NGINX: Statement from the Kubernetes Steering and Security Response Committees In March 2026, Kubernetes will retire Ingress NGINX, a piece of critical infrastructure for

• CATEGORIES Android Malware23 Artificial Intelligence4 ChatGPT3 Check Point Research Publications443 Cloud Security1 CPRadio44 Crypto2 Data & Threat Intelligence1 Data Analysis0 D

• 270M phishing attempts on Ethereum and BSC, 17M victims, $83.8M lost. • Attack exploits wallet address usability; attackers craft lookalike 40‑char hex addresses. • Scammers send

• WhatsApp introduces Strict Account Settings, a lockdown feature to counter sophisticated cyber attacks. • Targeted users include journalists, public figures, and others at higher

• WhatsApp has adopted and rolled out a new layer of security for users - built with Rust - as part of its effort to harden defenses against malware threats. • WhatsApp’s experienc

• Coding agents advanced, now used widely across engineering teams. • Companies struggle to secure AI usage while keeping developer productivity. • Tailscale’s Aperture offers an A

• 180+ internet disruptions in 2025, ranging from brief outages to multi‑day service losses. • Q4 saw only one government‑directed shutdown, but cable cuts caused widespread connec

• DHI removes package managers and shells to limit attack surface, but developers still need tools for setup. • Customizing DHI via Docker Hub UI lets platform teams create ‘golden

• Workload identity federation now integrated across API, Go client, and Terraform provider. • India DERP server city name updated to Bengaluru, hosting provider and IPs unchanged.