Weekly News - Notepad++ supply chain attack: Researchers reveal details, IoCs, targets

February 2026 Patch Tuesday forecast: Lots of OOB love this month - View in browser  Weekly cybersecurity news February 9, 2026 When your CEO calls, will you know it's real? AI voices, videos and deepfakes power modern phishing. Prepare your team with executive deepfake attack simulations. Start reducing risk Tour the platform Latest articles: Why boards must prioritize non-human identity governance State-backed phishing attacks targeting military officials and journalists on Signal Poland's energy control systems were breached through exposed VPN access CISA orders US federal agencies to replace unsupported edge devices Ransomware attackers are exploiting critical SmarterMail vulnerability (CVE-2026-24423) Claude Opus 4.6 improves agentic performance and model safety February 2026 Patch Tuesday forecast: Lots of OOB love this month Mobile privacy audits are getting harder New infosec products of the week: February 6, 2026 CISA confirms exploitation of VMware ESXi flaw by ransomware attackers OpenAI Frontier organizes AI agents under one system Why a decade-old EnCase driver still works as an EDR killer International sting dismantles illegal streaming empire serving millions GitHub enables multi-agent AI coding inside repository workflows Police shut down global DDoS operation, arrest 20-year-old Microsoft brings project-focused AI agents into OneDrive Microsoft launches LiteBox, a security-focused open-source library OS Smart glasses are back, privacy issues included AI is driving a new kind of phishing at scale Cybersecurity planning keeps moving toward whole-of-society models Measuring AI use becomes a business requirement Incognito dark web drug market operator gets 30 years in prison Major vulnerabilities found in Google Looker, putting self-hosted deployments at risk Apple Xcode 26.3 adds coding agent support from OpenAI and Anthropic Global Threat Map: Open-source real-time situational awareness platform How Secure by Design helps developers build secure software Auto finance fraud is costing dealers up to $20,000 per incident Russian hackers are exploiting recently patched Microsoft Office vulnerability (CVE-2026-21509) Download: Tines Voice of Security 2026 report Notepad++ supply chain attack: Researchers reveal details, IoCs, targets Sandisk brings SPRandom to open source for large SSD testing Firefox to let users manage and block AI features OpenAI releases Codex macOS app for agent-based software development Open-source attacks move through normal development workflows Product showcase: 2FAS Auth – Free, open-source 2FA for iOS Cybersecurity jobs available right now: February 3, 2026 ShinyHunters flip the script on MFA in new data theft attacks How state-sponsored attackers hijacked Notepad++ updates Microsoft sets a path to switch off NTLM across Windows Open-source AI pentesting tools are getting uncomfortably good Where NSA zero trust guidance aligns with enterprise reality Pompelmi: Open-source secure file upload scanning for Node.js AI is flooding IAM systems with new identities Videos: The hidden cost of putting off security decisions Why incident response breaks down when it matters most What boards need to hear about cyber risk, and what they don't Industry news: MintMCP's governance platform helps organizations deploy, monitor, and secure AI agents Kasada Account Intelligence combats manual fraud and abuse AiStrike introduces AI-powered MDR to reduce costs and alert fatigue Varonis acquires AllTrue.ai to enable safe, compliant AI at scale ConnectSecure introduces Linux patching capability to simplify cross-distro updates SECNAP CloudJacket MXDR integrates SOC, SIEM, and NDR Avast brings deepfake scam detection to Windows PCs and mobile devices Socure unifies identity, fraud, and program integrity for government at scale Fingerprint enables enterprises to tell trusted AI agents apart from bots and scrapers Detectify Internal Scanning finds and fixes vulnerabilities behind the firewall Orion Security raises $32 million to build AI-powered data loss prevention solution Gremlin launches Disaster Recovery Testing for zone, region, and datacenter failovers Snowflake makes enterprise data AI-ready with native Postgres in its AI Data Cloud Malwarebytes in ChatGPT delivers AI-powered protection against scams Span Cyber Security Arena 2026: Only 10 days left to secure early bird tickets Copyright © 2026 Help Net Security, All rights reserved. You are receiving Help Net Security daily security news because you opted in at our web site located on www.helpnetsecurity.com. Our mailing address is: Help Net Security Astus d.o.o. Kastav 51215 Croatia Add us to your address book No longer interested in receiving these emails? Unsubscribe Missed an issue? Access our past newsletters here: Archive