"Attackers use new tool to scan for React2Shell exposure."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 20 February 2026, 2323 UTC.

Content and Source provided by email subscription from https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.darkreading.com%2Frss%2Fall.xml

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Dark Reading

151K followers25 articles per week

#security#tech

23

Today

Attackers Use New Tool to Scan for React2Shell Exposure

by Nate Nelson / 1h

Researchers say threat actors wielded the sophisticated — and unfortunately named — toolkit to target high-value networks for React2Shell exploitation.

'God-Like' Attack Machines: AI Agents Ignore Security Policies

by Robert Lemos / 4h

Microsoft Copilot recently summarized and leaked user emails; but any AI agent will go above and beyond to complete assigned tasks, even breaking through their carefully designed guardrails.

Lessons From AI Hacking: Every Model, Every Layer Is Risky

by Robert Lemos / 5h

After two years of finding flaws in AI infrastructure, two Wiz researchers advise security pros to worry less about prompt injection and more about vulnerabilities.

Stop Flushing Cash Without Realizing It

by Finance Buzz

sponsored

Tiny mistakes = big losses. See what habits might be costing you every month.

Latin America's Cyber Maturity Lags Threat Landscape

by Alexander Culafi / 9h

The slower pace of upgrades has the unintended impact of creating a haven for attackers, especially for initial access brokers and ransomware gangs.

Emerging Chiplet Designs Spark Fresh Cybersecurity Challenges

by Agam Shah / 10h

As scaled-down circuits with limited functions redefine computing for AI systems and autonomous vehicles, their flexibility demands new approaches to safeguard critical infrastructure.

Yesterday

Supply Chain Attack Secretly Installs OpenClaw for Cline Users

2 TTPs

•

by Rob Wright / 1d

•

Cline CLI npm package compromised

The malicious version of Cline's npm package — 2.3.0 — was downloaded more than 4,000 times before it was removed.

Best-in-Class 'Starkiller' Phishing Kit Bypasses MFA

Starkiller phishing kit bypasses MFA

•

by Nate Nelson / 1d

A user-friendly PhaaS tool beats standard methods for detecting phishing attacks by live-proxying legitimate login sites.

Abu Dhabi Finance Week Exposed VIP Passport Details

by Jai Vijayan / 1d

Unprotected cloud data sends the wrong signal at a time when the emirate's trying to attract investors and establish itself as a global financial center.

Connected and Compromised: When IoT Devices Turn Into Threats

by Arielle Waldman / 1d

Reused passwords, a lack of network segmentation, and poor sanitization processes make the Internet of Things' attack surfaces more dangerous.

Threat Intelligence Has a Human-Shaped Blind Spot

by Dr. Megan Squire / 1d

How I realized what I was taught to about threat intelligence was missing something crucial.

Feb 18, 2026

More Than 40% of South Africans Were Scammed in 2025

by Nate Nelson, Contributing Writer / 1d

Survey underscores the reality that scammers follow "scalable opportunities and low friction," rather than rich targets that tend to be better protected.

Scam Abuses Gemini Chatbots to Convince People to Buy Fake Crypto

by Elizabeth Montalbano, Contributing Writer / 2d

A convincing presale site for phony "Google Coin" features an AI assistant that engages victims with a slick sales pitch, funneling payment to attackers.

Critical Grandstream VoIP Bug Highlights SMB Security Blind Spot

CVE-2026-2329

•

by Jai Vijayan, Contributing Writer / 2d

CVE-2026-2329 allows unauthenticated root-level access to SMB phone infrastructure, so attackers can intercept calls, commit toll fraud, and impersonate users.

Dell's Hard-Coded Flaw: A Nation-State Goldmine

by Alexander Culafi / 2d

A China-related attacker has exploited the vendor flaw since mid-2024, allowing it to move laterally, maintain persistent access, and deploy malware.

A CISO's Playbook for Defending Data Assets Against AI Scraping

by Areejit Banerjee / 2d

Discover a strategic approach to govern scraping risks, balance security with business growth, and safeguard intellectual capital from automated data harvesting.

Feb 17, 2026

Singapore & Its 4 Major Telcos Fend Off Chinese Hackers

UNC3886 attacks Singapore telcos

•

by Robert Lemos, Contributing Writer / 2d

After detecting a zero-day attack, the country's effective response was attributed to the tight relationship between its government and private industry.

Supply Chain Attack Embeds Malware in Android Devices

Keenadu malware infects Android devices

•

by Jai Vijayan, Contributing Writer / 3d

Keenadu downloads payloads that hijack browser searches, commit ad fraud, and execute other actions without user knowledge.

Poland Energy Survives Attack on Wind, Solar Infrastructure

by Alexander Culafi / 3d

Russia-aligned groups are probable culprits behind the wiper attacks against renewable energy farms, a manufacturer, and a heating and power plant.

RMM Abuse Explodes as Hackers Ditch Malware

by Rob Wright / 3d

Remote monitoring and management (RMM) software offers hackers multiple benefits, including stealth, persistence, and operational efficiency.

ClickFix Attacks Abuses DNS Lookup Command to Deliver ModeloRAT

ClickFix attack uses DNS hijacking

•

by Elizabeth Montalbano, Contributing Writer / 3d

ClickFix campaigns have adapted to the latest defenses with a new technique to trick users into infecting their own machines with malware.

Feb 16, 2026

Operation DoppelBrand: Weaponizing Fortune 500 Brands

by Elizabeth Montalbano, Contributing Writer / 4d

The GS7 cyber-threat group targets US financial institutions with near-perfect imitations of corporate portals to steal credentials and gain remote access.

260K+ Chrome Users Duped by Fake AI Browser Extensions

by Nate Nelson, Contributing Writer / 4d

30 copycat apps tricked users, and Google itself, into thinking they're legitimate AI tools.

Feb 14, 2026

Zscaler-SquareX Deal Boosts Zero Trust, Secure Browsing Capabilities

Zscaler acquires SquareX for security

•

by Jeffrey Schwartz / 6d

Zscaler's acquisition of SquareX comes as competitors like CrowdStrike and Palo Alto Networks also invest in secure browser technologies.

End of feed