Breaking infosec news, breach reports, company rankings, and expert guides.https://uinat.com/https://uinat.com/news/lockbit-operation-cronos-takedown-2024/https://uinat.com/news/lockbit-operation-cronos-takedown-2024/On February 20, 2024, a 10-country task force seized LockBit's infrastructure, identified 194 affiliates, and froze $112 million in cryptocurrency in the most significant ransomware takedown in history.Fri, 20 Feb 2026 00:00:00 GMThttps://uinat.com/guides/cryptography-key-management-guide/https://uinat.com/guides/cryptography-key-management-guide/A practical guide to implementing enterprise cryptography and key management, covering algorithm selection, HSMs, PKI, secrets management, and post-quantum cryptography transition.Fri, 06 Feb 2026 00:00:00 GMThttps://uinat.com/guides/dns-security-implementation/https://uinat.com/guides/dns-security-implementation/A practical guide to implementing DNS security, covering protective DNS, DNSSEC, encrypted DNS protocols, threat detection, and enterprise architecture patterns.Fri, 06 Feb 2026 00:00:00 GMThttps://uinat.com/guides/mobile-security-byod-guide/https://uinat.com/guides/mobile-security-byod-guide/A practical guide to implementing mobile security and BYOD programs, covering MDM deployment, containerization, app vetting, conditional access, and compliance requirements for iOS and Android.Fri, 06 Feb 2026 00:00:00 GMThttps://uinat.com/guides/security-program-development/https://uinat.com/guides/security-program-development/A practical guide for new CISOs and security leaders building security programs from scratch, covering governance, risk assessment, team building, framework selection, and executive communication.Fri, 06 Feb 2026 00:00:00 GMThttps://uinat.com/rankings/top-database-security-platforms-2026/https://uinat.com/rankings/top-database-security-platforms-2026/Ranking the leading database security solutions based on activity monitoring, encryption, access controls, cloud database coverage, and compliance automation.Fri, 06 Feb 2026 00:00:00 GMThttps://uinat.com/rankings/top-enterprise-password-managers-2026/https://uinat.com/rankings/top-enterprise-password-managers-2026/Ranking the leading enterprise password management solutions based on security architecture, SSO integration, admin controls, compliance certifications, and enterprise scalability.Fri, 06 Feb 2026 00:00:00 GMThttps://uinat.com/rankings/top-mtd-platforms-2026/https://uinat.com/rankings/top-mtd-platforms-2026/Ranking the leading mobile threat defense solutions based on on-device detection, phishing protection, app vetting, network security, and enterprise integration capabilities.Fri, 06 Feb 2026 00:00:00 GMThttps://uinat.com/rankings/top-privacy-management-platforms-2026/https://uinat.com/rankings/top-privacy-management-platforms-2026/Ranking the leading privacy management solutions based on consent management, DSAR automation, data mapping, regulatory coverage, and integration capabilities.Fri, 06 Feb 2026 00:00:00 GMThttps://uinat.com/compliance/australia-essential-eight/https://uinat.com/compliance/australia-essential-eight/The Essential Eight is a set of baseline cybersecurity mitigation strategies from the Australian Cyber Security Centre (ACSC) designed to protect organizations against cyber threats. Updated July 2024 with refined maturity levels.Fri, 06 Feb 2026 00:00:00 GMThttps://uinat.com/compliance/glba-compliance-guide/https://uinat.com/compliance/glba-compliance-guide/The Gramm-Leach-Bliley Act requires financial institutions to protect customer information through the Privacy Rule, Safeguards Rule, and Pretexting provisions. Major Safeguards Rule updates effective 2023-2024 mandate enhanced cybersecurity controls.Fri, 06 Feb 2026 00:00:00 GMThttps://uinat.com/compliance/sox-it-controls-guide/https://uinat.com/compliance/sox-it-controls-guide/Sarbanes-Oxley Section 404 requires publicly traded companies to establish, document, and test internal controls over financial reporting, including IT General Controls and application controls supporting financial systems.Fri, 06 Feb 2026 00:00:00 GMThttps://uinat.com/news/clop-oracle-ebs-zero-day-campaign-2026/https://uinat.com/news/clop-oracle-ebs-zero-day-campaign-2026/The Clop ransomware group weaponized CVE-2025-61882 and CVE-2025-61884 to breach nearly 100 organizations including Allianz UK, GlobalLogic, Envoy Air, Harvard, and Washington Post, with ransom demands reaching $50 million.Thu, 05 Feb 2026 00:00:00 GMThttps://uinat.com/news/coupang-data-breach-33-million-accounts-2026/https://uinat.com/news/coupang-data-breach-33-million-accounts-2026/South Korean e-commerce giant Coupang confirmed an additional 165,000 user accounts were exposed in the massive data breach affecting 33.7 million total accounts, triggered by a former employee using valid authentication keys.Thu, 05 Feb 2026 00:00:00 GMThttps://uinat.com/news/amaranth-dragon-apt41-winrar-exploitation-2026/https://uinat.com/news/amaranth-dragon-apt41-winrar-exploitation-2026/Check Point Research documents a new threat cluster weaponizing CVE-2025-8088 within days of disclosure to target government and law enforcement agencies across Cambodia, Thailand, Philippines, and neighboring countries.Wed, 04 Feb 2026 00:00:00 GMThttps://uinat.com/news/dead-vax-asyncrat-ipfs-campaign-2026/https://uinat.com/news/dead-vax-asyncrat-ipfs-campaign-2026/Securonix researchers document a sophisticated malware campaign that chains IPFS hosting, virtual hard disk abuse, and in-memory shellcode injection to deliver AsyncRAT while evading traditional detection.Wed, 04 Feb 2026 00:00:00 GMThttps://uinat.com/news/metro4shell-react-native-rce-exploitation-2026/https://uinat.com/news/metro4shell-react-native-rce-exploitation-2026/CVE-2025-11953 in React Native CLI's Metro Development Server is being exploited in the wild to deploy Rust-based malware on developer systems, with attacks observed since December 2025.Wed, 04 Feb 2026 00:00:00 GMThttps://uinat.com/news/apt28-lamehug-ai-malware-ukraine-2026/https://uinat.com/news/apt28-lamehug-ai-malware-ukraine-2026/Russia's APT28 has deployed LAMEHUG and PROMPTSTEAL malware that queries large language models via Hugging Face to dynamically generate attack commands, marking the first confirmed use of AI-powered malware in active cyber operations.Wed, 04 Feb 2026 00:00:00 GMThttps://uinat.com/news/harvard-upenn-shinyhunters-breach-2026/https://uinat.com/news/harvard-upenn-shinyhunters-breach-2026/The ShinyHunters cybercriminal group published stolen data from Harvard University and the University of Pennsylvania after ransom demands went unpaid, exposing over 2 million alumni, donor, and student records.Wed, 04 Feb 2026 00:00:00 GMThttps://uinat.com/news/n8n-cve-2026-25049-sandbox-bypass-rce-2026/https://uinat.com/news/n8n-cve-2026-25049-sandbox-bypass-rce-2026/A critical flaw in n8n (CVSS 9.4) exploits TypeScript/JavaScript type mismatch to bypass sanitization from a December 2025 patch, enabling authenticated remote command execution via webhook workflows.Wed, 04 Feb 2026 00:00:00 GMThttps://uinat.com/news/react2shell-nginx-traffic-hijacking-campaign-2026/https://uinat.com/news/react2shell-nginx-traffic-hijacking-campaign-2026/Threat actors are using CVE-2025-55182 exploitation to inject malicious NGINX configurations that silently redirect web traffic through attacker infrastructure, targeting Asian TLDs and government sites.Wed, 04 Feb 2026 00:00:00 GMThttps://uinat.com/guides/ics-ot-security-fundamentals/https://uinat.com/guides/ics-ot-security-fundamentals/A comprehensive guide to securing Industrial Control Systems and Operational Technology, covering the Purdue Model, ICS-specific threats, network segmentation, and building an OT security program.Wed, 04 Feb 2026 00:00:00 GMThttps://uinat.com/guides/insider-threat-program/https://uinat.com/guides/insider-threat-program/A comprehensive guide to establishing an insider threat program, covering detection technologies, behavioral indicators, HR integration, legal considerations, and balancing security with employee trust.Wed, 04 Feb 2026 00:00:00 GMThttps://uinat.com/guides/privileged-access-management-implementation/https://uinat.com/guides/privileged-access-management-implementation/A practical guide to implementing PAM, covering credential vaulting, just-in-time access, session recording, service account management, and cloud privileged access across AWS, Azure, and GCP.Wed, 04 Feb 2026 00:00:00 GMThttps://uinat.com/guides/security-awareness-training-program/https://uinat.com/guides/security-awareness-training-program/A comprehensive guide to developing security awareness training that changes behavior, not just checks compliance boxes. Covers program design, phishing simulations, metrics, and building a security culture.Wed, 04 Feb 2026 00:00:00 GMThttps://uinat.com/guides/security-metrics-board-reporting/https://uinat.com/guides/security-metrics-board-reporting/A practical guide to developing security metrics that matter, communicating cyber risk to boards in financial terms, and building dashboards that drive decisions rather than just display data.Wed, 04 Feb 2026 00:00:00 GMThttps://uinat.com/guides/siem-log-management-implementation/https://uinat.com/guides/siem-log-management-implementation/A comprehensive guide to implementing SIEM, covering log source prioritization, detection engineering, architecture patterns, cost optimization, and the shift toward data lake architectures.Wed, 04 Feb 2026 00:00:00 GMThttps://uinat.com/news/apt28-operation-neusploit-office-zero-day-2026/https://uinat.com/news/apt28-operation-neusploit-office-zero-day-2026/Russia's APT28 weaponized CVE-2026-21509 within three days of Microsoft's disclosure, deploying MiniDoor email stealers and PixyNetLoader against Ukraine, Slovakia, and Romania.Tue, 03 Feb 2026 00:00:00 GMThttps://uinat.com/news/mozilla-firefox-ai-disable-option-2026/https://uinat.com/news/mozilla-firefox-ai-disable-option-2026/Firefox 148 introduces a 'Block AI enhancements' toggle that disables all current and future generative AI features, plus individual controls for translations, tab grouping, link previews, and chatbot access.Tue, 03 Feb 2026 00:00:00 GMThttps://uinat.com/news/dockerdash-ai-assistant-vulnerability-2026/https://uinat.com/news/dockerdash-ai-assistant-vulnerability-2026/Noma Labs discovered a critical flaw in Docker's Ask Gordon AI assistant allowing attackers to hijack AI reasoning through malicious image metadata, leading to remote code execution or data exfiltration.Tue, 03 Feb 2026 00:00:00 GMThttps://uinat.com/breaches/moltbook-database-exposure-2026/https://uinat.com/breaches/moltbook-database-exposure-2026/A misconfigured Supabase database at Moltbook, the 'social network for AI agents,' exposed 1.5 million API tokens, 35,000 email addresses, and private messages—revealing the platform was mostly humans operating bot fleets.Tue, 03 Feb 2026 00:00:00 GMThttps://uinat.com/breaches/ascension-health-ransomware-2024/https://uinat.com/breaches/ascension-health-ransomware-2024/A Black Basta ransomware attack on Ascension Health, one of the largest US Catholic healthcare systems, forced hospitals to divert emergency patients, delay surgeries, and revert to paper records, affecting 5.6 million patients.Tue, 03 Feb 2026 00:00:00 GMThttps://uinat.com/breaches/evolve-bank-lockbit-ransomware-2024/https://uinat.com/breaches/evolve-bank-lockbit-ransomware-2024/A LockBit ransomware attack on Evolve Bank & Trust, a banking-as-a-service provider for major fintechs, exposed data of 7.6 million individuals and rippled through partners including Affirm, Mercury, Wise, and others.Tue, 03 Feb 2026 00:00:00 GMThttps://uinat.com/breaches/hot-topic-snowflake-breach-2024/https://uinat.com/breaches/hot-topic-snowflake-breach-2024/One of the largest retail data breaches in history exposed 57 million Hot Topic, Torrid, and BoxLunch customer records including 25 million credit card numbers after attackers compromised Snowflake cloud credentials stolen via infostealer malware.Tue, 03 Feb 2026 00:00:00 GMThttps://uinat.com/breaches/kaiser-foundation-data-exposure-2024/https://uinat.com/breaches/kaiser-foundation-data-exposure-2024/Kaiser Foundation Health Plan disclosed that web tracking technologies including Google Analytics shared personal health information of 13.4 million current and former members with third-party advertisers, the second-largest healthcare breach of 2024.Tue, 03 Feb 2026 00:00:00 GMThttps://uinat.com/breaches/moneygram-social-engineering-2024/https://uinat.com/breaches/moneygram-social-engineering-2024/A social engineering attack targeting MoneyGram's IT helpdesk led to a week-long global outage affecting billions in remittances and exposed sensitive customer data including government IDs and bank account information.Tue, 03 Feb 2026 00:00:00 GMThttps://uinat.com/breaches/sk-telecom-usim-breach-2025/https://uinat.com/breaches/sk-telecom-usim-breach-2025/A sophisticated malware attack on South Korea's largest mobile carrier compromised USIM authentication data for nearly the entire subscriber base, forcing mass SIM replacements and costing over $120 million.Tue, 03 Feb 2026 00:00:00 GMThttps://uinat.com/guides/network-security-fundamentals/https://uinat.com/guides/network-security-fundamentals/Comprehensive guide to network security covering defense in depth, segmentation, firewalls, IDS/IPS, zero trust architecture, and protection against common network attacks including lateral movement and man-in-the-middle.Tue, 03 Feb 2026 00:00:00 GMThttps://uinat.com/rankings/top-itdr-platforms-2026/https://uinat.com/rankings/top-itdr-platforms-2026/Ranking the leading ITDR platforms for detecting and responding to identity-based attacks including credential theft, privilege escalation, and Active Directory compromise.Tue, 03 Feb 2026 00:00:00 GMThttps://uinat.com/rankings/top-security-awareness-training-2026/https://uinat.com/rankings/top-security-awareness-training-2026/Ranking the leading security awareness training and human risk management platforms based on content quality, phishing simulation, behavioral analytics, and effectiveness at reducing human risk.Tue, 03 Feb 2026 00:00:00 GMThttps://uinat.com/news/nationstates-data-breach-rce-user-data-exposed/https://uinat.com/news/nationstates-data-breach-rce-user-data-exposed/NationStates shut down its site after a vulnerability reporter chained input sanitization flaws to achieve remote code execution, copying user emails, password hashes, and IP addresses.Mon, 02 Feb 2026 00:00:00 GMThttps://uinat.com/news/notepad-supply-chain-attack-chinese-threat-actors/https://uinat.com/news/notepad-supply-chain-attack-chinese-threat-actors/Lotus Blossom APT compromised Notepad++'s hosting provider to intercept update traffic and deliver the Chrysalis backdoor to targeted government and financial organizations over a six-month period.Mon, 02 Feb 2026 00:00:00 GMThttps://uinat.com/news/vllm-critical-rce-vulnerability-2026/https://uinat.com/news/vllm-critical-rce-vulnerability-2026/CVE-2026-22778, a critical RCE in vLLM versions 0.8.3-0.14.0, chains a PIL information leak with a JPEG2000 heap overflow to achieve code execution through a malicious video link.Mon, 02 Feb 2026 00:00:00 GMThttps://uinat.com/news/openclaw-one-click-rce-vulnerability-2026/https://uinat.com/news/openclaw-one-click-rce-vulnerability-2026/CVE-2026-25253 (CVSS 8.8) allows attackers to steal authentication tokens and achieve RCE through a single malicious link via cross-site WebSocket hijacking—even on localhost-only OpenClaw instances.Mon, 02 Feb 2026 00:00:00 GMThttps://uinat.com/news/malicious-openclaw-skills-clawhub-malware-2026/https://uinat.com/news/malicious-openclaw-skills-clawhub-malware-2026/Over 400 malicious OpenClaw AI agent skills on ClawHub deploy Atomic Stealer via ClickFix-style social engineering. The hightower6eu account alone published 314 malicious skills targeting crypto and developer credentials.Mon, 02 Feb 2026 00:00:00 GMThttps://uinat.com/news/microsoft-ntlm-deprecation-three-phase-plan-2026/https://uinat.com/news/microsoft-ntlm-deprecation-three-phase-plan-2026/Microsoft will disable the 33-year-old NTLM authentication protocol by default in future Windows releases through a phased rollout: enhanced auditing now, Kerberos improvements in H2 2026, and disabled-by-default in future major releases.Mon, 02 Feb 2026 00:00:00 GMThttps://uinat.com/news/n8n-sandbox-escape-jfrog-vulnerabilities-2026/https://uinat.com/news/n8n-sandbox-escape-jfrog-vulnerabilities-2026/JFrog discovered two sandbox escape flaws in n8n: CVE-2026-1470 (CVSS 9.9) bypasses JavaScript sandboxing via deprecated 'with' statement, and CVE-2026-0863 (CVSS 8.5) escapes Python restrictions via AttributeError.obj.Mon, 02 Feb 2026 00:00:00 GMThttps://uinat.com/news/pdf-dropbox-phishing-credential-theft-2026/https://uinat.com/news/pdf-dropbox-phishing-credential-theft-2026/A phishing campaign uses clean PDF attachments hosted on Vercel to redirect victims to fake Dropbox login pages, bypassing email security by avoiding traditional malware or suspicious links.Mon, 02 Feb 2026 00:00:00 GMThttps://uinat.com/news/winrar-cve-2025-8088-ongoing-exploitation-2026/https://uinat.com/news/winrar-cve-2025-8088-ongoing-exploitation-2026/CVE-2025-8088 (CVSS 8.8), a path traversal flaw abusing Windows Alternate Data Streams, continues to be exploited by Russian APTs, Chinese actors, and cybercriminals to achieve persistence via Startup folder drops.Mon, 02 Feb 2026 00:00:00 GMThttps://uinat.com/breaches/panera-bread-shinyhunters-breach-2026/https://uinat.com/breaches/panera-bread-shinyhunters-breach-2026/ShinyHunters breached Panera Bread via Microsoft Entra SSO vishing attack, leaking 5.1 million customer records including names, emails, phone numbers, and addresses after the company refused extortion demands.Mon, 02 Feb 2026 00:00:00 GMT