Login Subscribe

7secure Coverage

Articles

Search and filter the broader reporting stream across incidents, AI security, policy, and operational coverage.

Threat Intelligence

Lithuania Launches National AI‑Fraud Defense Initiative to Shield E‑Signatures & Health Data

Lithuania Launches National AI‑Fraud Defense Initiative to Shield E‑Signatures & Health Data

Lithuania’s government has unveiled a €20 million, three‑year program aimed at countering AI‑driven cyber fraud. The effort brings together ministries, law‑enforcement agencies, fintech firms, and health‑care providers to harden e‑signature platforms and digital health‑record systems. Legal reforms tighten liability for AI‑generated deep‑

Threat Intelligence

Romanian Oil Pipeline Outage Exposes Critical Energy Cyber Weaknesses

Romanian Oil Pipeline Outage Exposes Critical Energy Cyber Weaknesses

On February 9, Check Point’s threat report documented a cyber intrusion against Conpet, Romania’s national oil pipeline operator. The attackers breached the company’s IT environment, disabling internal systems and taking the public website offline, causing a temporary disruption to the pipeline’s monitoring and reporting capabilities. The

Security Culture & Human Factors

QR Code Phishing Turns Smartphones Into New Attack Vectors

QR Code Phishing Turns Smartphones Into New Attack Vectors

Researchers observed threat actors embedding malicious URLs in QR codes that, when scanned, direct victims to credential‑harvesting webpages or automatically launch vulnerable deep‑link schemes on mobile operating systems. By leveraging the convenience of QR‑based payments, signage, and marketing material, attackers sidestep traditional email filters and broaden the

Vulnerabilities & Exploits

Amaranth‑Dragon Exploits CVE‑2025‑8088 in SE Asian Supply‑Chain Attack

Amaranth‑Dragon Exploits CVE‑2025‑8088 in SE Asian Supply‑Chain Attack

Check Point researchers identified that the APT‑41 affiliated group, operating under the name Amaranth‑Dragon, weaponized the recently disclosed CVE‑2025‑8088 flaw in a widely used enterprise software platform. By compromising the software’s update mechanism, the threat actors inserted malicious code that was signed and distributed through

Vulnerabilities & Exploits

Spike in Scans Targets New BeyondTrust RCE Vulnerability, Threat Actors Reconnaissance Rising

Spike in Scans Targets New BeyondTrust RCE Vulnerability, Threat Actors Reconnaissance Rising

GreyNoise has observed a sharp increase in scanning traffic aimed at the newly disclosed CVE‑2026‑1731 remote code execution flaw in BeyondTrust Privileged Access Management solutions. The scans are probing for exposed services and default configurations, indicating that threat actors are actively mapping networks to locate vulnerable endpoints before

RCE exploits and AI fraud heighten risk 🚨. Zero‑day and supply‑chain attacks test resilience 🛡️.

Hello, February 16, 2026 – here's the latest threat intelligence you need to act on. Stay ahead of emerging risks. Today's headlines * Surge in scanning for BeyondTrust RCE vulnerability (CVE‑2026‑1731) * Amaranth‑Dragon exploits CVE‑2025‑8088 targeting Southeast Asian entities * QR code phishing attacks broaden

Threat Intelligence

Kimwolf Botnet Hijacks I2P, Boosting Stealthy DDoS Threats

Kimwolf Botnet Hijacks I2P, Boosting Stealthy DDoS Threats

The Kimwolf botnet has started routing its command‑and‑control (C2) traffic through the I2P anonymity network. By embedding its C2 servers in I2P, the malware can issue high‑volume distributed denial‑of‑service (DDoS) commands while masking the origin of the traffic, making traditional network‑based detection and sink‑

Vulnerabilities & Exploits

AI-Driven Zero Trust Cuts Manual Policy Work, Boosts Defender Efficiency

AI-Driven Zero Trust Cuts Manual Policy Work, Boosts Defender Efficiency

VMware’s latest blog details a new AI engine that ingests user and device behavior, contextual threat intelligence, and existing policy frameworks to automatically create and fine‑tune zero‑trust access rules. The system continuously monitors activity, adjusts permissions in real time, and surfaces policy recommendations without requiring security engineers