"A security flaw at DavaIndia Pharmacy allowed attackers to access customers' data and more."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 17 February 2026, 0105 UTC.

Content and Source provided by email subscription from https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fsecurityaffairs.co%2Fwordpress%2Ffeed

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Security Affairs

78K followers26 articles per week

#security#tech

11

Today

A security flaw at DavaIndia Pharmacy allowed attackers to access customers’ data and more

DavaIndia Pharmacy data breach exposed

•

by Pierluigi Paganini / 5h

A security flaw at DavaIndia Pharmacy exposed customer data and gave outsiders full admin control of its systems. DavaIndia is a large Indian pharmacy retail chain focused on selling affordable generic medicines. Operated by Zota Health Care Ltd., the brand promotes low-cost alternatives to branded drugs to make healthcare more accessible across India. DavaIndia runs hundreds of franchised stores

ShinyHunters leaked 600K+ Canada Goose customer records, but the firm denies it was breached

2 TTPs

•

by Pierluigi Paganini / 9h

•

Canada Goose investigates data breach

ShinyHunters leaked 600,000+ Canada Goose customer records, though the company insists its systems were not breached. Data extortion group ShinyHunters has published over 600,000 Canada Goose customer records on its data leak site. Canada Goose is a Canadian luxury outerwear company best known for high‑end, cold‑weather jackets and parkas. Founded in 1957 and headquartered in Toronto, it has grow

Microsoft alerts on DNS-based ClickFix variant delivering malware via nslookup

IoC > 1 URL

•

by Pierluigi Paganini / 11h

•

14 TTPs

•

ClickFix attack uses DNS hijacking

Microsoft warns of a new ClickFix variant that tricks users into running DNS commands to fetch malware via nslookup. Microsoft has revealed a new ClickFix variant that deceives users into running a malicious nslookup command through the Windows Run dialog to retrieve a second-stage payload via DNS. ClickFix typically uses fake CAPTCHA or error messages to trick victims into infecting their own sy

Google fixes first actively exploited Chrome zero-day of 2026

Execution (Enterprise TA0002)

•

by Pierluigi Paganini / 14h

•

CVE-2026-2441

Google patched Chrome zero-day CVE-2026-2441, a high-severity CSS use-after-free flaw actively exploited in the wild. Google has released urgent security updates to address a high-severity zero-day vulnerability, tracked as CVE-2026-2441, in Chrome that is already being exploited in real-world attacks. The flaw is a use-after-free bug in the browser’s CSS component. This is the first actively exp

Yesterday

Japanese sex toys maker Tenga discloses data breach

3 TTPs

•

by Pierluigi Paganini / 15h

•

Tenga reports data breach incident

Sex toy maker Tenga says a hacker accessed an employee’s email account, potentially exposing customer names, emails, and order details. TENGA Co., Ltd. is a Tokyo-based Japanese sexual wellness and lifestyle company known for its innovative adult products. It employs roughly 125–200 people worldwide across its Japan headquarters and international offices. Tenga operates in personal care product m

Malicious npm and PyPI packages linked to Lazarus APT fake recruiter campaign

11 TTPs

•

by Pierluigi Paganini / 1d

•

Lazarus Group targets developers with malware

Researchers found malicious npm and PyPI packages tied to a fake recruitment campaign linked to North Korea’s Lazarus Group. ReversingLabs researcher uncovered new malicious packages on npm and PyPI connected to a fake job recruitment campaign attributed to the North Korea-linked Lazarus Group . The campaign uses deceptive hiring themes to trick developers into downloading infected packages, cont

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 84

by Pierluigi Paganini / 1d

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Stan Ghouls targeting Russia and Uzbekistan with NetSupport RAT Breaking Down ZeroDayRAT – New Spyware Targeting Android and iOS Old-School IRC, New Victims: Inside the Newly Discovered SSHStalker Linux Botnet Reynolds: Defense Evasion Capability

Security Affairs newsletter Round 563 by Pierluigi Paganini – INTERNATIONAL EDITION

CVE-2026-1731

•

by Pierluigi Paganini / 1d

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Fintech firm Figure disclosed data breach after employee phishing attack U.S. CISA adds a flaw in BeyondTrust RS and PRA to its Known Exploited Vuln

Feb 14, 2026

Fintech firm Figure disclosed data breach after employee phishing attack

4 TTPs

•

by Pierluigi Paganini / 2d

•

Figure confirms data breach

Fintech firm Figure confirmed a data breach after hackers used social engineering to trick an employee and steal a limited number of files. Blockchain-based lending firm Figure confirmed a data breach after an employee fell victim to a social engineering attack. According to a company spokesperson, the incident allowed hackers to access and steal a limited number of files. The company disclosed t

U.S. CISA adds a flaw in BeyondTrust RS and PRA to its Known Exploited Vulnerabilities catalog

10 TTPs

•

by Pierluigi Paganini / 2d

•

CVE-2026-1731

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in BeyondTrust RS and PRA to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an BeyondTrust RS and PRA vulnerability, tracked as CVE-2026-1731 (CVSS score of 9.9), to its Known Exploited Vulnerabilities (KEV) catalog . This week BeyondTrust released secu

Suspected Russian hackers deploy CANFAIL malware against Ukraine

12 TTPs

•

by Pierluigi Paganini / 2d

•

Google links Russian actor to CANFAIL

A new alleged Russia-linked APT group targeted Ukrainian defense, government, and energy groups, with CANFAIL malware. Google Threat Intelligence Group identified a previously undocumented threat actor behind attacks on Ukrainian organizations using CANFAIL malware. The group is possibly linked to Russian intelligence services and has targeted defense, military, government, and energy entities at

End of feed