Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. UAE Foils Organized Cyber Attacks on Digital Infrastructure
Published: February 21, 2026
The United Arab Emirates has thwarted organised cyber attacks targeting the country’s digital infrastructure and vital sectors, according to the state news agency.
2. Shutdown at DHS Extends to Cyber Agency Amid Ongoing Setbacks
Published: February 22, 2026
The lapse in funding for the Department of Homeland Security is only the latest setback for the Cybersecurity and Infrastructure Security Agency, temporarily winnowing its already thinning ranks without a Senate-confirmed leader.
3. CISA Adds Two Actively Exploited Roundcube Flaws to KEV Catalog
Published: February 21, 2026
The U.S. Cybersecurity and Infrastructure Security Agency added two security flaws impacting Roundcube webmail software to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation, including a 9.9-rated remote code execution vulnerability and a cross-site scripting flaw.
4. Apple Patches Zero-Day Flaw Allowing Device Takeover
Published: February 21, 2026
Apple has released security updates for iPhones, iPads, Macs, Apple Watches, Apple TVs, and Safari, fixing a zero-day flaw actively exploited in targeted attacks that allows cybercriminals to run arbitrary code, potentially installing spyware or backdoors without detection.
5. KEV Surge: Ivanti, BeyondTrust, SolarWinds RMM Flaws Exploited
Published: February 20, 2026
CISA updated its Known Exploited Vulnerabilities catalog with critical remote management flaws from BeyondTrust and SolarWinds, including CVE-2026-1731 (CVSS 9.9), actively exploited for unauthorized access, prompting federal agencies to enforce three-day patch deadlines and urging exposure audits, network segmentation, Zero Trust principles, and rapid patching.
6. PromptSpy: Gen-AI Embedded in Android Malware
Published: February 20, 2026
ESET researchers discovered PromptSpy, the first Android malware integrating Google Gemini AI for adaptive persistence, generating real-time instructions for UI manipulation to evade removal, including VNC access, lockscreen capture, screenshots, audio/video recording, and data exfiltration, distributed via fake banking apps targeting Argentina users.
7. Panera Bread Faces Multiple Lawsuits Over Data Breach
Published: February 2026 (Incident: January 2026)
Restaurant chain Panera Bread faces multiple class action lawsuits following a January 2026 data breach that exposed personal information for 5.1 million customer accounts, with the ShinyHunters hacking group claiming responsibility and publishing stolen data after Panera refused their ransom demand.
8. Conduent Ransomware Attack Exposes Millions in Potential Largest Healthcare Breach
Published: February 2026 (Incident: October 2024 to January 2025)
Conduent, a New Jersey-based technology contractor, faces fallout from a ransomware attack claimed by the SafePay group, potentially affecting 25 million individuals’ personal and medical data, leading to multiple lawsuits and an investigation by the Texas Attorney General.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using tools like advanced threat detection software to monitor your systems for vulnerabilities and automate security patches. Stay safe online!