Data Security

Researchers from ETH Zurich and Università della Svizzera italiana identified 12 attacks against Bitwarden, seven against LastPass, and six against Dashlane, targeting the zero-knowledge encryption (ZKE) promises of these services.

The breach, which occurred when threat actors gained unauthorized access to Eurail's customer database, potentially exposed sensitive information including full names, passport details, ID numbers, bank account IBANs, health information, and contact details.

The incident began when a police officer intended to send a link for the man to upload images related to an investigation but instead mistakenly shared a download link to sensitive police files.

The breach occurred on February 13, 2026, at 10 p.m. local time. IT staff immediately disconnected affected servers from the internet to contain the spread.

The Register reports that Canada Goose, a luxury performance outerwear and clothing manufacturer, has denied being subjected to a recent data security incident, noting that ShinyHunters' Valentine's Day leak of over 600,000 records consisted of data stolen from an old breach.

South Korea's Ministry of Justice has announced that U.S. investment firms Foxhaven Asset Management, Abrams Capital, and Durable Capital Partners have joined a lawsuit alleging the South Korean government's lack of impartiality in handling its investigation into the massive data breach at leading South Korean e-commerce firm Coupang, according to TechCrunch.

Malicious actors have created 32 malicious Google Chrome extensions masquerading as ChatGPT, Google Gemini, and other AI chatbots to exfiltrate emails, API keys, and other sensitive information as part of the AiFrame campaign, The Register reports.

Check Point Software Technologies Ltd. has acquired three venture-backed startups, Cyclops Security, Cyata Security, and Rotate Inc., for approximately $150 million to enhance its cybersecurity capabilities.