Exploitation of a recent RCE in BeyondTrust remote access products, tracked as CVE-2026-1731, reportedly started less than 24h after a PoC was published

https://www.greynoise.io/blog/reconnaissance-beyondtrust-rce-cve-2026-1731

https://x.com/ethicalhack3r/status/2021870311377879136

https://x.com/DefusedCyber/status/2022044978697125892

Critical cybersecurity alert: North Korea's UNC2970 is weaponizing Google Gemini for reconnaissance. A CVSS 9.9 BeyondTrust vulnerability (CVE-2026-1731) is also under active exploitation, enabling remote code execution. Meanwhile, the Munich Security Conference highlighted deepening transatlantic tensions.

#Cybersecurity #AI #Geopolitics

Czytam, że #Microsoft "poprawił" Notatnik (#Notepad).

Tak, ten program, który nie był dotykany, od 40 lat robił tylko to, co miał robić.
Dodali mu sztuczną inteligencję, dostęp do sieci, obsługę Markdown. A może Copilot dodał?🤔

CVE-2026-20841. CVSS 8.8. Zdalne wykonywanie kodu.

https://sekurak.pl/podatnosc-klasy-rce-w-windowsowym-notatniku-windows-11/

Microsoft, the company known for such amazing achievements as Teams, Github's uptime, Copilot etc. has managed to add features to Notepad in such a way, they introduced a remote code execution vulnerability.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20841

⚠️ Apple patches decade-old iOS zero-day exploited in the wild

｢ CVE-2026-20700, discovered by Google's Threat Analysis Group, affects dyld - Apple's dynamic linker - and allows attackers with memory write capability to execute arbitrary code. Apple said the flaw was exploited in the wild and may have been part of an exploit chain ｣

https://www.theregister.com/2026/02/12/apple_ios_263/

#apple #zeroday #cybersecurity #CVE202620700

Here's a snapshot of recent geopolitical, technology, and cybersecurity developments:

**Geopolitical:** Iranian FM Araghchi stated on Feb 14, 2026, that the EU has lost its geopolitical weight, criticizing the Munich Security Conference on Iran. African leaders held their AU Summit Feb 14-15, focusing on water security and Sudan's conflict.

**Technology:** AI faces significant energy bottlenecks in February 2026, potentially altering industry growth. Singapore committed $155B to a nationwide AI push on Feb 14, 2026.

**Cybersecurity:** Apple patched CVE-2026-20700, an actively exploited zero-day, on Feb 11, 2026. Malicious Chrome extensions were discovered stealing sensitive business and email data around Feb 13-14, 2026.

#Cybersecurity #Geopolitics #TechNews

🚨 CVE-2026-1490: CleanTalk Spam Protection plugin (WordPress) CRITICAL vuln (CVSS 9.8) lets unauth attackers install plugins via reverse DNS spoofing if API key is invalid. Audit keys & restrict plugin installs! https://radar.offseq.com/threat/cve-2026-1490-cwe-350-reliance-on-reverse-dns-reso-0fc3066a #OffSeq #WordPress #CVE20261490

Sudden #Telnet Traffic Drop. Are #Telcos Filtering Ports to Block Critical #Vulnerability?

Telcos likely received advance warning about January's critical Telnet vulnerability before its public disclosure, according to threat intelligence biz GreyNoise. Global Telnet traffic "fell off a cliff" on January 14, 6 days before #security advisories for CVE-2026-24061 went public on Jan 20. The flaw, a decade-old bug in GNU #InetUtils telnetd with a 9.8 #CVSS score, allows …

https://tech.slashdot.org/story/26/02/14/0447228/sudden-telnet-traffic-drop-are-telcos-filtering-ports-to-block-critical-vulnerability?utm_source=rss1.0mainlinkanon&utm_medium=feed

https://winbuzzer.com/2026/02/14/microsoft-blocks-credential-autofill-windows-hello-flaw-cve-2026-20804-xcxwbn/

Microsoft Blocks Credential Autofill to Fix Windows Hello Flaw

#Microsoft #Windows11 #February2026PatchTuesday #Cybersecurity #Authentication #WindowsHello #Biometrics #RemoteDesktop

CVE-2026-22906: Vulnerabilidad Crítica en Almacenamiento de Credenciales

https://blog.elhacker.net/2026/02/cve-2026-22906-vulnerabilidad-critica.html

OpenClaw Vulnerability!

CVE-2026-25253 enables attackers to steal authentication tokens of OpenClaw AI Systems!

https://hackers-arise.com/cve-2026-25253-how-malicious-links-can-steal-authentication-tokens-and-compromise-openclaw-ai-systems/