<img src="https://secure.ruth8badb.com/159098.png" alt="" style="display:none;">

IT Security Newsletter - 2/25/2026

SHARE

Top News

Google Disrupts Chinese Cyberespionage Campaign Targeting Telecoms, Governments

Google announced on Wednesday that it has disrupted a significant China-linked cyberespionage campaign targeting telecoms and government organizations worldwide. The threat actor, tracked by Google's Threat Intelligence Group (GTIG) and Mandiant as UNC2814, has been active since at least 2017. It has been described as one of the most far-reaching and impactful campaigns encountered in recent years. READ MORE...


Ex-US Defense Contractor Executive Jailed for Selling Exploits to Russia

An Australian national was sentenced to 87 months in a US prison for stealing trade secrets from a defense contractor and selling them to a Russian cyber-exploit broker. According to documents presented in court, between April 2022 and June 2025, Peter Williams, 39, stole at least eight cyber exploits from his employer. The exploits, described as components of software associated with national security, were sold to a Russian broker that provides cyber tools to the Russian government. READ MORE...

Breaches

Wynn Resorts confirms employee data breach after extortion threat

Wynn Resorts has confirmed that a hacker stole employee data from its systems after the company was listed on the ShinyHunters extortion gang's data leak site. In a statement shared today, the company said it activated its incident response procedures and launched an investigation, with assistance from external cybersecurity experts, after discovering the breach. "We have learned that an unauthorized third party acquired certain employee data," reads a statement shared with BleepingComputer. READ MORE...


CarGurus data breach exposes information of 12.4 million accounts

The ShinyHunters extortion group has published personal information in more than 12 million records allegedly stolen from CarGurus, a U.S.-based digital auto platform. CarGurus is a publicly traded automotive research and shopping company that operates in the U.S., Canada, and the U.K. Its website has an estimated 40 million monthly visitors and helps people find, compare, and contact sellers of new and used vehicles. READ MORE...

Hacking

Chinese group's ChatGPT use reveals worldwide harassment campaign against critics

A Chinese law enforcement official attempted to use ChatGPT to review its reports on cyber operations, subsequently revealing details of a worldwide online harassment and silencing campaign of China's critics at home and abroad. In a new threat report released Wednesday, OpenAI said the activity concerned a single account that regularly used ChatGPT to review and edit reports on "cyber special operations." READ MORE...

Trends

Attackers Now Need Just 29 Minutes to Own a Network

In 2025, cybercriminals needed less time to move from break-in to lateral movement across a network than it takes to watch a typical sitcom. An analysis by CrowdStrike of threat activity last year found attackers took just 29 minutes, on average, to pivot to other systems after gaining an initial foothold in a victim environment, marking a 65% acceleration from the year before. The fastest "breakout" happened in a mere 27 seconds. READ MORE...

Software Updates

Patch these 4 critical, make-me-root SolarWinds bugs ASAP

If you run SolarWinds' Serv-U, you should patch promptly. Four critical vulnerabilities in the file transfer software can allow attackers to execute code as root. The four flaws, all of which earned a 9.1 CVSS rating, include a broken access control vulnerability (CVE-2025-40538), two type confusion bugs (CVE-2025-40540 and CVE-2025-40539), and an Insecure Direct Object Reference (IDOR) issue (CVE-2025-40541), all of which can lead to remote code execution (RCE). READ MORE...

Information Security

Roblox gives predators "powerful tools" to target children, says LA County

Los Angeles County has sued online gaming company Roblox, adding to a series of suits that accuse the virtual worlds platform of misleading parents into thinking it's safe while leaving children exposed to predators and sexually explicit content. The February 19 filing makes LA County the first California government body to take the company to court over child safety. Roblox claims over 151 million daily users, most of which are kids. READ MORE...

On This Date

  • ...in 1836, Samuel Colt is granted a patent for the Colt revolver, the first gun manufactured on an assembly line using interchangeable parts.
  • ...in 1901, industrialist J.P. Morgan incorporates the United States Steel Corporation by financing the merger of three smaller steel companies for $492 million.
  • ...in 1928, The Federal Radio Commission issues the first television broadcast license to inventor and early TV pioneer Charles Jenkins.
  • ...in 1971, actor Sean Astin ("Rudy", "Lord of the Rings") is born in Santa Monica, CA.