Malicious Campaign Exploits OpenClaw AI Assistant to Distribute Password-Stealing Malware

Feb 5, 2026 | Podcast

https://opensourcemalware.com/blog/clawdbot-skills-ganked-your-crypto Security researchers have uncovered a large-scale malicious campaign targeting users of OpenClaw, an open-source personal AI assistant that has undergone multiple name changes in recent weeks from...

Chinese State Hackers Hijacked Notepad++ Update Feature for Six Months

Feb 4, 2026 | Podcast

https://notepad-plus-plus.org/news/hijacked-incident-info-update Chinese state-sponsored threat actors successfully compromised the Notepad++ update infrastructure for nearly half a year, intercepting and redirecting update requests from targeted users to malicious...

Iron Mountain Downplays Data Breach Claimed by Everest Extortion Gang

Feb 3, 2026 | Podcast

Iron Mountain, a major data storage and recovery services provider serving over 240,000 customers globally including 95% of the Fortune 1000, has confirmed a security incident following claims by the Everest extortion group that it stole 1.4 terabytes of internal...

Apple Introducing Privacy Feature to Reduce Carrier Location Tracking on Select Devices

Feb 2, 2026 | Podcast

https://support.apple.com/en-us/126101 Apple will be rolling out a new privacy enhancement called “Limit Precise Location” with iOS 26.3, allowing users of select iPhone and iPad models to restrict the precision of location data shared with cellular...

ShinyHunters Targets Approximately 100 Organisations in Okta Single Sign-On Credential Theft Campaign

Jan 30, 2026 | Podcast

https://www.okta.com/blog/threat-intelligence/phishing-kits-adapt-to-the-script-of-callers ShinyHunters has targeted around 100 organisations in its latest Okta single sign-on credential stealing campaign using evolved voice-phishing techniques to compromise SSO...

Extortion Group WorldLeaks Claims 1.4 Terabyte Data Theft From Nike in Manufacturing-Focused Breach

Jan 29, 2026 | Podcast

Nike confirmed it is investigating a potential cybersecurity incident after extortion crew WorldLeaks claimed to have stolen 1.4 terabytes containing 188,347 files from the sportswear giant’s systems and posted samples on its leak site. The published data...