French lawmakers approved a social media ban for children under 15 and restrictions on mobile phone use in high schools, passing the bill 130-21 in the National Assembly with implementation expected in September pending Senate review. The measure, championed by President Emmanuel Macron and aligned with recent actions in Australia and…
Category: Cyber Security News
French police raided X’s offices as European investigations into the Grok AI chatbot focus on nonconsensual sexual deepfakes, potential child sexual abuse material, and the dissemination of Holocaust denial content. Authorities across France, the UK, and the EU — with Europol’s assistance and ICO scrutiny — have opened probes and summoned…
![Cybersecurity News | Daily Recap [02 Feb 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [02 Feb 2026]")
Daily Recap, Britain and Japan agreed to deepen a cyber strategic partnership to boost cybersecurity and secure critical mineral supply chains, while India unveiled a long-term digital strategy in Union Budget 2026–27 prioritizing AI, cloud, semiconductors, data centers and integrated cybersecurity including a tax holiday until 2047 to attract foreign cloud providers. The roundup also highlights a spate of incidents from piracy takedowns in Bulgaria to MongoDB data extortion involving over 1,400 databases, the OpenVSX supply-chain attack delivering the GlassWorm loader exfiltrating macOS credentials, a multi-stage eScan compromise, UAT-8099 region-locked BadIIS campaigns, NationStates data breach, Microsoft planning NTLM deprecation in favor of Kerberos, and the rise of autonomous threat tooling led by OpenClaw, Moltbook and Molt Road. #GlassWorm #OpenVSX #eScan #UAT-8099 #BadIIS #NationStates #NTLM #Kerberos #OpenClaw #Moltbook #MoltRoad #MongoDB #macOS #Solana #EtherHiding
Microsoft announced a three-phase plan to phase out New Technology LAN Manager (NTLM) and transition Windows environments to more secure Kerberos-based authentication, citing NTLM’s weak cryptography and susceptibility to replay, relay, and pass-the-hash attacks. The rollout includes immediate enhanced NTLM auditing, pre-release migration features like IAKerb and Local KDC, and a…
Microsoft confirmed a known shutdown bug that affected Windows 11 also impacts Windows 10 systems when Virtual Secure Mode (VSM) is enabled. Affected users can use the command “shutdown /s /t 0” as a temporary workaround while Microsoft prepares a future update to fix VSM-enabled systems. #VirtualSecureMode #SystemGuardSecureLaunch
A critical token-exfiltration vulnerability (CVE-2026-25253, CVSS 8.8) in OpenClaw lets an attacker steal a gateway token via a crafted link and gain operator-level access to a victim’s local gateway. By exploiting a lack of WebSocket origin validation and the Control UI trusting gatewayUrl, an attacker can disable approvals, escape sandboxing and…
Mozilla announced that Firefox will add an AI controls panel in version 148, letting users block all AI features or manage them individually. The “Block AI enhancements” toggle, rolling out Feb. 24 (first in Nightly), will block current and future generative AI features, prevent pop-ups and reminders, and keep preferences persistent across updates. #Firefox #Mozilla
A security audit of 2,857 ClawHub skills found 341 malicious skills across multiple campaigns, with 335 using fake prerequisites to deliver the macOS information stealer Atomic Stealer. Attackers used typosquat and utility-style skills to socially engineer users into running installers or glot[.]io scripts that fetch payloads from 91.92.242[.]30 to install keyloggers,…
More than 230 malicious OpenClaw skills were published in under a week on ClawHub and GitHub, impersonating legitimate utilities to deliver info-stealing payloads that target API keys, wallets, credentials, and sensitive files. The campaign uses detailed documentation to trick users into running a malicious “AuthTool” installer that drops a NovaStealer variant capable of bypassing macOS Gatekeeper, prompting calls for isolation and stricter registry review. #NovaStealer #OpenClaw
Ukraine’s CERT warns that Russian-linked APT28 is actively exploiting CVE-2026-21509 in multiple Microsoft Office versions using malicious DOC attachments to deploy the COVENANT loader. The exploit chain leverages WebDAV downloads, COM hijacking with EhStoreShell.dll, shellcode embedded in an image, and a scheduled task, and defenders are advised to apply Microsoft’s out-of-band Office updates or registry mitigations and monitor/block Filen C2 traffic. #CVE-2026-21509 #APT28
GlassWorm was distributed by attackers who compromised the oorzc developer account and pushed malicious updates to four OpenVSX extensions with some 22,000 downloads. The macOS-focused infostealer harvests passwords, crypto-wallet data, browser and keychain secrets, and developer credentials, establishes persistence via a LaunchAgent, and exfiltrates data to an attacker-controlled server. #GlassWorm #OpenVSX
Civil society groups warn that NSO Group is using its submission to the Pall Mall Process to whitewash a long record of human rights abuses tied to its Pegasus spyware, while providing little transparency or evidence of enforcement. Critics and officials stress that consultation responses do not equal endorsement and call…
The Notepad++ update mechanism was hijacked by suspected Chinese state-sponsored hackers who silently redirected some users to malicious update servers by compromising the update delivery infrastructure rather than the editor’s source code. The selective “on-path” campaign, active from June to December 2025 and likened to the ShadowHammer ASUS incident, prompted developers…
A new Dutch minority government is pushing for an enforceable Europe-wide minimum age of 15 to access social media, with privacy-friendly age verification and stricter oversight of large platforms. The proposal, which would ban addictive algorithms and require rapid removal of punishable content, follows similar moves in France, the UK, and…
Notepad++ confirmed a months-long compromise of its update infrastructure in which state-sponsored actors hijacked the update mechanism to deliver malicious payloads to select targets. The project has migrated hosting and overhauled WinGup in version 8.8.9 to add certificate and signature verification and XMLDSig, and it urges users to update immediately. #NotepadPlusPlus…