Cybersecurity startup Cylake announced its launch last week, raising $45 million in seed funding for a platform designed for highly regulated organizations that cannot use public cloud services.

Forty-two cybersecurity-related merger and acquisition (M&A) deals were announced by companies in February 2026.

A new ClickFix attack variant uses fake CAPTCHA pages instructing victims to paste and execute malicious commands in Windows Terminal.

A new phishing campaign abuses the .arpa TLD to host malicious content and hides its location via Cloudflare’s infrastructure.

A newly discovered InstallFix campaign relies on malicious commands on cloned installation webpages to trick victims into installing malware.