Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, significant data breaches, and market impacts to keep you informed and secure in the ever-evolving digital landscape.
1. PayPal Data Breach Exposes Personal Info for Months
Published: February 23, 2026
PayPal disclosed a coding error in its Working Capital loan application that exposed sensitive customer data—including Social Security numbers, dates of birth, and contact details—for nearly six months (July–December 2025). A small cohort of users was affected; some experienced unauthorized transactions (refunds issued). PayPal has reset passwords and offered credit monitoring.
2. Malicious npm Packages Spread SANDWORM_MODE Worm Harvesting Crypto Keys, CI Secrets & AI API Tokens
Published: February 23, 2026
Socket researchers uncovered 19 malicious npm packages (plus sleepers) that deliver a sophisticated supply-chain worm. It steals credentials, cryptocurrency keys, CI/CD secrets, and API tokens from AI coding assistants (Claude, Cursor, VS Code, etc.) via MCP prompt injection, with polymorphic evasion and GitHub Action propagation.
3. AI-Assisted Threat Actor Compromises 600+ Fortinet FortiGate Firewalls Across 55 Countries
Published: February 21, 2026
A Russian-speaking actor used generative-AI tools to automate reconnaissance, lateral movement, and compromise of over 600 internet-exposed FortiGate devices with weak credentials and no MFA. AWS and researchers highlighted AI-generated Python scripts for parsing stolen configs.
4. Ransomware Attack Forces University of Mississippi Medical Center to Close All Statewide Clinics
Published: February 23, 2026
A ransomware incident at UMMC took down Epic EHR and core IT systems, forcing closure of 35+ clinics across Mississippi and cancellation of elective procedures. Emergency care continues; FBI is assisting with the investigation into potential data compromise.
5. Cybersecurity Stocks Drop Sharply as Anthropic’s New AI Tool Fuels Disruption Fears
Published: February 23, 2026
CrowdStrike (-10%), Zscaler (-10%), Netskope/Tenable (-12%), and others plunged for a second day after Anthropic launched an AI service that scans code for vulnerabilities. Investors worry it could erode demand for traditional security platforms.
6. Critical Authentication Bypass Flaw in Honeywell CCTV Products (CVE-2026-1670)
Published: February 18, 2026
CISA warned of a critical unauthenticated API flaw in multiple Honeywell CCTV models that lets attackers change recovery emails and hijack accounts/camera feeds. Affects commercial and industrial surveillance; urgent patching and network isolation recommended.
7. CISA Issues Emergency Directive: Patch Exploited Dell RecoverPoint Vulnerability Within 3 Days
Published: February 23, 2026
CISA ordered U.S. federal agencies to remediate CVE-2026-22769 (hardcoded credentials) in Dell RecoverPoint, actively exploited by China-linked actors since mid-2024 to deploy the Grimbolt backdoor in VMware environments.
8. Japanese Semiconductor Firm Advantest Hit by Ransomware Attack
Published: February 15–23, 2026
Advantest Corporation (key supplier to chip manufacturers) detected ransomware on its corporate network February 15. Systems were isolated; investigation into potential data exposure is ongoing.
Stay Vigilant
Cyber threats are evolving rapidly—with AI-powered attacks, supply-chain worms, and ransomware targeting critical infrastructure on the rise. Subscribe to our newsletter for daily updates, enable MFA everywhere, keep systems patched, and monitor for unusual activity. Stay safe online!