CIRCLE WITH A DOT

DDoS attacks

Deutsche Bahn says cyberattack hit ticket and info systems
https://www.dw.com/en/deutsche-bahn-says-cyberattack-hit-ticket-and-info-systems/a-76024130

Microsoft says bug causes Copilot to summarize confidential emails
https://www.bleepingcomputer.com/news/microsoft/microsoft-says-bug-causes-copilot-to-summarize-confidential-emails/

A report from House Oversight Committee Democrats delivers a damning recounting of the varied ways Elon Musk’s Department of Government Efficiency (DOGE) violated cybersecurity protocols across nearly every executive branch agency.

Check out today's Metacurity for more on this crucial development and other infosec news you should know, including

--Palo Alto: attackers have moved from AI experimentation to AI operationalization,
--Dragos discovered three new ICS threat groups,
--European Parliament disabled AI features over cybersecurity concerns,
--Kenyan authorities used Cellebrite on human rights activist's phone,
--Eurail confirms its stolen data is for sale,
--First live attack on an OpenClaw configuration witnessed,
--Samsung reveals new display with a built-in privacy mode in Galaxy S26,
--Canada Goose claims ShinyHunters claimed stolen data is old,
--HHS wants to protect substance use disorder patients' records,
--Russian hackers infiltrated Ukrain government service Diia,
--Dutch police gave a man data and then arrested him for hacking
https://www.metacurity.com/doge-linked-to-potential-russian-chinese-access-to-opm-systems-report/

Citizen Lab links Cellebrite to the hacking of a Kenyan presidential candidate’s phone
https://cyberscoop.com/citizen-lab-kenya-cellebrite-phone-cracking-boniface-mwangi-forensic-evidence/

Just in time for Valentine's Day, you can share your password with your partner, but I would reconsider if I were you. It's OK to keep something private.

Bitwarden has launched a new system called ‘Cupid Vault’ that allows users to safely share passwords with trusted email addresses.
https://www.bleepingcomputer.com/news/security/bitwarden-introduces-cupid-vault-for-secure-password-sharing/

"Wikipedia’s volunteer community of editors reverted changes within minutes, according to the emails. Eventually, Seckel and his team were able to 'hack' the IP addresses of certain editors to block them from interfering, he wrote."

Epstein Paid Reputation Firms to Suppress Child Sex Offenses Online
https://www.bloomberg.com/news/articles/2026-02-13/epstein-paid-reputation-firms-to-suppress-child-sex-offenses-online

The telcos keep falling.

Dutch telecom provider Odido has been hit by a major cyberattack. Criminals gained access to a file containing the data of 6.2 million accounts.
https://nos.nl/artikel/2602080-hack-bij-odido-gegevens-miljoenen-klanten-in-handen-van-criminelen

The number of new software vulnerabilities discovered could top 100,000 in 2026, according to the latest forecast by FIRST. But that doesn't necessarily mean more cyberattacks. Check out my latest CSO piece on how CISOs might have to up their efforts to separate signal from noise as CVE volume soars.

Many thanks to Michael Roytman of Empirical Security, Éireann Leverett of FIRST, and Sasha Romanosky of Rand for their insights.
https://www.csoonline.com/article/4130453/cisos-must-separate-signal-from-noise-as-cve-volume-soars.html

Russia Further Restricts Telegram, Escalating Internet Clampdown
https://www.nytimes.com/2026/02/10/world/europe/telegram-throttled-internet-russia.html

Google Fulfilled ICE Subpoena Demanding Student Journalist’s Bank and Credit Card Numbers

Google Fulfilled ICE Subpoena Demanding Student Journalist’s Bank and Credit Card Numbers

Amandla Thomas-Johnson didn't know how much information ICE requested in a subpoena now. Google never gave him a chance to fight it.

The Intercept (theintercept.com)

@simonzerafa You're welcome!

Interesting alert from CISA

Poland Energy Sector Cyber Incident Highlights OT and ICS Security Gaps
https://www.cisa.gov/news-events/alerts/2026/02/10/poland-energy-sector-cyber-incident-highlights-ot-and-ics-security-gaps

@simonzerafa I know.

As a "safety measure," Discord will require a face scan or ID starting next month.

Discord Launches Teen-by-Default Settings Globally

Discord is announcing enhanced teen safety features rolling out globally that reinforce its long-standing commitment to creating a safer and more inclusive experience for users over the age of 13.

(discord.com)