Security Update for Microsoft Power BI Report Server (August 2026)

The Microsoft Power BI Report Server on the remote host is missing the February 2026 security update. It is, therefore, affected by an RCE vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 809...

FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation

A Russian-speaking initial access broker IAB driven by financial gain is assessed to be behind a large-scale credential-harvesting operation known as FortiBleed that has targeted over 430,000 FortiGate firewalls globally. The campaign, active since February 2026, involves collecting credential...

Hidden Passenger? How Taboola Routes Logged-In Banking Sessions to Temu

A bank approved a Taboola pixel. That pixel quietly redirected logged-in users to a Temu tracking endpoint. This occurred without the bank’s knowledge, without user consent, and without a single security control registering a violation. Read the full technical breakdown in the Security Intelligen...

Security Updates for Microsoft .NET Framework (February 2026)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2025-55248 Note that...

Wordfence Bug Bounty Program Monthly Report – February 2026

Last month in February 2026, the Wordfence Bug Bounty Program received 1078 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the...

External Client App (ECA) for Veeam Data Cloud — Adapting to New Salesforce Security Requirements

Support Statement Summary of Changes to Salesforce Security Protocols Salesforce has introduced new security protocols for third-party applications accessing Salesforce organizations. This change affects all third-party products that integrate with Salesforce, requiring those vendors to transitio...

APT28 Tied to CVE-2026-21513 MSHTML 0-Day Exploited Before Feb 2026 Patch Tuesday

A recently disclosed security flaw patched by Microsoft may have been exploited by the Russia-linked state-sponsored threat actor known as APT28, according to new findings from Akamai. The vulnerability in question is CVE-2026-21513 CVSS score: 8.8, a high-severity security feature bypass affecti...

March 2, 2026—KB5082314 (OS Build 20348.4776) Out-of-band

None None...

CVE-2025-11251 SQLi in Dayneks Software's E-Commerce Platform

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows SQL Injection. This issue affects E-Commerce Platform: through 27022026. NOTE: The vendor was contacted early about this disclosu...

OpenAI - Disrupting Malicious Uses of Our Models

This is the February, 2026 report from OpenAI that discusses their work in disrupting malicious use of their models...

Intel NPU Driver February 2026 Security Update

Intel has informed HP of potential security vulnerabilities for some Intel® NPU Drivers Neural Processing Unit, which might allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate t...

Sendmarc Releases DMARCbis Fireside Chat Featuring Co-Editor Todd Herr

Wilmington, North America, 24th February 2026, CyberNewswire...

CVE-2026-2731

creationtimestamp| type| source ---|---|--- 2026-02-20 03:27:16+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mfb5zqtokv2h...

PayPal February 2026 Notice of Data Breach

PayPal has released this notice of data breach to its customers following a data exposure issue that spanned from July 1, 2025 to December 13, 2025...

Azure File Sync Agent v22.1 Release – February 2026 (KB5080681)

Update Rollup for Azure File Sync agent version 22.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v22.1 Release – February 2026 (KB5080681)

Update Rollup for Azure File Sync agent version 22.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v22.1 Release – February 2026 (KB5080681)

Update Rollup for Azure File Sync agent version 22.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

AI Under Control: Link11 Launches AI Management Dashboard for Clean Traffic

Frankfurt am Main, Germany, 19th February 2026, CyberNewswire...

CVE-2025-70149

creationtimestamp| type| source ---|---|--- 2026-02-18 19:37:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf5tcqkdiw2x 2026-02-18 19:37:49+00:00| seen| https://mastodon.social/ap/users/115755483699003887/statuses/116093316812596790 2026-02-18 19:37:59+00:00| seen|...

CVE-2026-2576

creationtimestamp| type| source ---|---|--- 2026-02-18 05:20:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf4dfvkk7t2s 2026-02-18 05:20:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf4dgh6zvt2v 2026-03-27 00:00:04+00:00|...