Cyber Briefing: 2026.02.12
NK hackers use AI crypto lures, Windows patches zero-days, fake 7-Zip spreads malware, major breaches surface, and global scam crackdowns intensify.
👉 What’s trending in cybersecurity today?
Welcome to Cyber Briefing, the newsletter that informs you about the latest cybersecurity advisories, alerts, incidents and news every weekday.
First time seeing this? Please Subscribe
🚨 Cyber Alerts
1. North Korea–Linked Hackers Use AI Lures
The North Korea-linked group UNC1069 is targeting the cryptocurrency industry through elaborate social engineering tactics on platforms like Telegram to steal data from Windows and macOS users. By utilizing artificial intelligence to create deceptive lures and fake meeting invitations, the threat actor aims to facilitate large-scale financial theft.
2. Windows 10 KB5075912 Extended Update
Microsoft has launched the KB5075912 extended security update for Windows 10 to address numerous vulnerabilities, including six actively exploited zero-day flaws. This release also continues the phased rollout of new Secure Boot certificates to replace expiring credentials and resolves a specific bug that caused system restart issues during attempted shutdowns.
3. Fake 7-Zip Site Spreads Malicious Installer
A fraudulent website impersonating the official 7-Zip project is currently distributing a compromised installer that transforms victim computers into residential proxy nodes. This malicious campaign uses cloned web design and deceptive domain names to trick users into installing software that routes third-party traffic through their home internet connections.
For more alerts click here!
💥 Cyber Incidents
4. Georgia Healthcare Data Breach Exposes
A major data breach at a Georgia healthcare provider has exposed the sensitive personal and medical information of over 620,000 individuals. Although the company first alerted patients last fall, a recent federal filing has confirmed the full scale of the cyberattack carried out by a known ransomware group.
5. North Ferry Payment System Hit By Cyberattack
The North Ferry company has suspended online payments following a ransomware attack on its payment processor that occurred on February 6. While the FBI and Secret Service investigate the breach, management confirmed that no customer data was compromised and all pass holders will maintain access to the ferries regardless of their current account balance.
6. Carolina Beach Loses $488K In Hacks
Officials reported that hackers stole nearly $500,000 from Carolina Beach through two cyberattacks occurring between late December and early January. Although the police investigation has concluded that no staff members were involved, the FBI is continuing to track the international sources believed to be responsible for the theft.
For more incidents click here!
📢 Cyber News
7. Google Recovers Deleted Nest Video
Google Nest cameras typically require a monthly subscription for long-term storage, otherwise videos are generally deleted after three hours. However, investigators in the Nancy Guthrie abduction case recently recovered doorbell footage from an unpaid account that was previously thought to be lost.
8. Police Arrest Seller Of JokerOTP Tool
Authorities in the Netherlands have arrested a 21-year-old man from Dordrecht suspected of selling license keys for JokerOTP, a sophisticated phishing automation tool used to bypass multi-factor authentication. This arrest follows the 2025 dismantling of the platform, which facilitated over 28,000 attacks and resulted in at least $10 million in global financial losses.
9. Thailand Moves To Seize Scam Assets
Thailand is moving to permanently confiscate approximately 420 million dollars in luxury assets linked to a massive international cybercrime and fraud network. This escalation follows a preliminary freeze on high-end property and vehicles as the government intensifies its broader crackdown on financial syndicates and money laundering.
For more news click here!
📈Cyber Stocks
Cybersecurity stocks on Thursday, 12 February 2026 reflected continued rotation within the broader technology sector, while resilient enterprise security spending supported identity and cloud-focused names against wider market volatility.
CrowdStrike closed at 415.81 dollars and moved modestly higher, supported by sustained demand for cloud-native endpoint and identity protection.
Okta closed at 88.45 dollars and edged up, reflecting continued investor interest in identity and access management solutions.
Zscaler closed at 174.34 dollars and advanced, with zero-trust and secure access service edge demand underpinning strength.
Fortinet closed at 85.53 dollars and was slightly lower, as network security demand remained stable despite sector rotation.
Check Point Software Technologies closed at 180.57 dollars and eased, with its defensive firewall and threat prevention portfolio holding steady.
💡 Cyber Tip
🗜️ Fake 7-Zip Site Spreads Malicious Installer
A fraudulent website impersonating the official 7-Zip project is distributing a trojanized installer that secretly turns infected systems into residential proxy nodes. While the software appears legitimate, it installs hidden services with system privileges, modifies firewall rules, and routes third-party traffic through the victim’s home IP address.
🛠️ What You Should Do
Download 7-Zip only from the official project website
Avoid clicking software links from YouTube descriptions or sponsored search ads
Bookmark trusted download pages to prevent landing on lookalike domains
Monitor for unknown services set to auto-start
Use endpoint protection to detect unauthorized network tunneling
⚠️ Why This Matters
Residential proxy malware can make your internet connection a cover for criminal activity. Victims may unknowingly host illegal traffic, risk account bans, or face reputational damage while attackers remain anonymous behind their IP address.
📚 Cyber Book
Don't Step in the Trap by Brett Smith
Copyright © 2026 CyberMaterial. All Rights Reserved.
Follow CyberMaterial on:
Substack, LinkedIn, Twitter, Reddit, Instagram, Facebook, YouTube, and Medium