Infosec bits for 2026 week 06

Anele Siwela | Feb. 6, 2026, 3:18 p.m.

Cybersecurity News:

Beyond AI: Why cyber security remains a human discipline [Rennie Naidoo, Itweb]

CISA confirms exploitation of VMware ESXi flaw by ransomware attackers [Zeljka Zorz, Help Net Security]

Geopolitical OSINT Threat Assessment Report (GOTAR): AI-Driven Cyber Threats and Risks in 2026 – Agentic AI, Ransomware, APT Convergence and Geopolitical Escalation Vectors [Febbraio, Debuglies]

Bulletproof hosting reused Windows images, masking ransomware infrastructure [Stefanie Schappert, Cyber News]

Vulnerabilities & Patches:

Malicious NGINX Configurations Enable Large-Scale Web Traffic Hijacking Campaign [Ravie Lakshmanan, The Hacker News]

Hackers Leveraging Windows Screensaver to Deploy RMM Tools and Gain Remote Access to Systems [Tushar Subhra Dutta, Cybersecurity News]

Chrome Vulnerabilities Allow Code Execution, Browser Crashes [Ken Underhill, Tech Republic]

Cyber Attacks and Breaches:

Claude Opus 4.6 Finds 500+ High-Severity Flaws Across Major Open-Source Libraries [Ravie Lakshmanan, The Hacker News]

VS Code Configs Expose GitHub Codespaces to Attacks [Ionut Arghire, Security Week]

AI-powered Phishing Attacks Hitting Inboxes Every 19 Seconds [Graham Turner, Digit News]

New Hacking Campaign Exploits Microsoft Windows WinRAR Vulnerability [Danny Palmer, Infosecurity Magazine]

Exposed AWS Credentials Lead to AI-Assisted Cloud Breach in 8 Minutes [Deeba Ahmed, Hackread]