Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, state-sponsored attacks, data breaches, and regulatory actions to keep you informed and secure in the ever-evolving digital landscape.
1. RoguePilot Flaw in GitHub Codespaces Enabled Copilot to Leak GITHUB_TOKEN
Published: February 24, 2026
A vulnerability in GitHub Codespaces allowed attackers to inject malicious instructions into GitHub issues, tricking Copilot into leaking the GITHUB_TOKEN and potentially seizing control of repositories. Microsoft has patched the AI-mediated flaw after responsible disclosure by Orca Security.
2. UAC-0050 Targets European Financial Institution With Spoofed Domain and RMS Malware
Published: February 24, 2026
Russia-aligned threat actor UAC-0050 (aka Mercenary Akula / DaVinci Group) used spoofed Ukrainian domains and remote access malware in a social engineering attack on a European financial institution supporting regional development, likely for intelligence gathering or theft.
3. Anthropic Says Chinese AI Firms Used 16 Million Claude Queries to Copy Model
Published: February 24, 2026
Anthropic identified industrial-scale distillation attacks by Chinese AI companies DeepSeek, Moonshot AI, and MiniMax, who generated over 16 million fraudulent queries via ~24,000 fake accounts to illegally extract and replicate Claude model capabilities, violating terms of service.
4. Lazarus Group Uses Medusa Ransomware in Middle East and U.S. Healthcare Attacks
Published: February 24, 2026
North Korea-linked Lazarus Group (Diamond Sleet) deployed Medusa ransomware against a Middle East target and attempted an attack on a U.S. healthcare organization. The RaaS operation has claimed over 366 victims globally.
5. Critical SolarWinds Serv-U Flaws Offer Root Access to Servers
Published: February 24, 2026
SolarWinds has released patches for four critical remote code execution vulnerabilities in Serv-U FTP software that could allow unauthenticated attackers to gain root access to affected servers.
6. ShinyHunters Extortion Gang Claims Odido Breach Affecting Millions
Published: February 24, 2026
The ShinyHunters extortion group claims responsibility for breaching Dutch telecom provider Odido, stealing nearly 21 million user records including names, addresses, phone numbers, bank details, and plaintext passwords. Odido has confirmed a prior data exposure incident.
7. UK Fines Reddit $19 Million for Using Children’s Data Unlawfully
Published: February 24, 2026
The UK Information Commissioner’s Office (ICO) fined Reddit £14.47 million (~$19.5 million) for failing to implement adequate safeguards when collecting and processing personal data of children under 13.
8. Android Mental Health Apps with 14.7M Installs Filled with Security Flaws
Published: February 23, 2026
Multiple popular mental health apps on Google Play Store containing 14.7 million installs suffer from severe security vulnerabilities that could expose users’ sensitive medical and personal information to attackers.
Stay Vigilant
Cyber threats are evolving rapidly with AI playing a growing role on both sides. Subscribe to our newsletter for daily updates, enable multi-factor authentication everywhere, keep software patched, and consider advanced threat monitoring tools. Stay safe online!