Microsoft fixes broken Excel copy and paste for all Office users

A Critical Issue Fixed: Microsoft Resolves Broken Copy-Paste Functionality in Excel Microsoft has addressed a significant problem affecting Excel users after installing its September 2026 security updates. The issue, which was confirmed by customer reports on Reddit and the company’s Q&A forums, causes copy-and-paste operations to fail silently without providing any error messages or alerts. … Read more

Google fined €403 million over location data privacy violations

Google’s €403 Million Fine Highlights Location Data Privacy Concerns In a major blow to Google’s data collection practices, Ireland’s Data Protection Commission (DPC) has imposed a record-breaking fine of €403 million on the tech giant for violating the General Data Protection Regulation (GDPR). The hefty penalty is the result of an investigation that exposed Google’s … Read more

TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data

Cybersecurity researchers have uncovered a sophisticated backdoor, dubbed “TASK#STOMP,” which has been lurking in PowerShell environments on Windows systems. This malicious tool allows attackers to quietly extract sensitive information, including documents, Wi-Fi passwords, and clipboard data, from compromised machines. The impact is significant: TASK#STOMP has been identified as a key component of an attack chain … Read more

⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks

A Spate of Zero-Day Exploits and Attacks Brings Home the Importance of Vigilance in Cybersecurity This week has seen a flurry of high-profile zero-day exploits, remote code execution (RCE) vulnerabilities, and malicious attacks that highlight the ongoing cat-and-mouse game between security experts and cyber attackers. A particular trend has emerged: identity exposure as a key … Read more

Microsoft reminds admins to migrate Entra ID users to passkeys

Microsoft’s Phasing Out SMS-Based Authentication: What You Need to Know As of February 2027, Microsoft will retire SMS-based sign-in for its Entra ID service, a move that affects administrators who use this method as a first-factor authentication. To avoid disruptions, admins must migrate users to alternative phishing-resistant methods, such as passkeys, which are now the … Read more

FBI’s CJIS v6.1: What Security Teams Need to Know.

The FBI’s CJIS Security Policy has undergone significant changes with the release of version 6.1, building on the modernized policy introduced in version 6.0 last year. The latest update refines the security standards for handling and protecting Criminal Justice Information (CJI) by addressing omissions, corrections, and additions highlighted throughout 2025. For organizations responsible for CJI, … Read more

Microsoft fixes broken Excel copy and paste for all Office users

A Critical Issue with Microsoft Office’s Copy and Paste Functionality Has Been Fixed, But What Does This Mean for Users? In a recent update, Microsoft addressed a critical issue affecting millions of Office users worldwide. The problem, which was caused by this month’s security updates, resulted in copy-and-paste failures, autofill issues, and formula dragging problems … Read more

TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data

A sophisticated PowerShell backdoor has been discovered, allowing attackers to remotely steal sensitive information from compromised Windows systems. Dubbed “TASK#STOMP,” this malware is being used in targeted attacks against individuals and organizations worldwide. The malware uses a combination of legitimate tools and social engineering tactics to gain access to victims’ machines. First, an attacker sends … Read more

⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks

A Critical Week in Cybersecurity: Cisco Zero-Day, AI Agent Vulnerability, and More This week has been marked by a series of significant security incidents that have left many organizations scrambling to patch vulnerabilities and protect themselves against emerging threats. At the heart of these issues lies a fundamental problem: identity exposure. When an attacker gains … Read more

Colorado Water Utilities Hit by Cyberattacks Targeting OT Systems

Colorado’s Water Utilities Fall Victim to Sophisticated Cyberattacks A pair of private water utilities in Colorado recently found themselves under attack from sophisticated hackers targeting their operational technology (OT) systems. The attackers, described as “foreign actors” by a spokesperson for Governor Jared Polis, attempted to disrupt the utilities’ industrial control systems (ICS). While the disruptions … Read more