Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, data breaches, and key incidents to keep you informed and secure in the fast-evolving digital landscape.
1. CISA Issues Emergency Directive: Patch Critical Cisco SD-WAN Vulnerabilities Under Active Exploitation
Published: 2026-02-25
CISA and international partners warned of ongoing global exploitation of Cisco Catalyst SD-WAN systems. Attackers are exploiting a zero-day authentication bypass (CVE-2026-20127) for initial access and CVE-2022-20775 for privilege escalation and persistence. Federal agencies must inventory systems, apply patches, enable logging, and assess compromises by early March deadlines.
2. Google Disrupts China-Linked UNC2814 GRIDTIDE Espionage Campaign After 53 Breaches
Published: 2026-02-25
Google, working with industry partners, dismantled the infrastructure of suspected China-nexus group UNC2814 (GRIDTIDE). The actors breached at least 53 organizations across 42 countries, abusing Google Sheets API for command-and-control and deploying a custom backdoor.
3. Former L3Harris Executive Jailed for Selling Zero-Days to Russian Broker; U.S. Sanctions Broker
Published: 2026-02-25
A former executive at U.S. defense contractor L3Harris was sentenced to over seven years in prison for stealing and selling eight zero-day exploits to a Russian broker for millions in cryptocurrency. The U.S. Treasury simultaneously sanctioned the broker, whose clients included the Russian government.
4. Zyxel Warns of Critical RCE Flaw Affecting Over a Dozen Router Models
Published: 2026-02-25
Taiwanese vendor Zyxel released urgent patches for a critical remote code execution vulnerability that allows unauthenticated attackers to take full control of more than a dozen router models. Organizations using affected devices should update immediately.
5. Report: Manual Processes Put National Security at Risk in Over Half of Organizations
Published: 2026-02-25
A new CYBER360 report reveals that more than 50% of national security groups still rely on manual sensitive-data transfers, creating exploitable gaps and delays. The findings urge immediate automation to protect mission-critical information.
6. Malicious NuGet Packages Steal ASP.NET Data; npm Package Drops Malware
Published: 2026-02-25
Security researchers discovered four malicious NuGet packages targeting ASP.NET developers to exfiltrate identity data and create backdoors. Separately, an npm package downloaded over 4,500 times was found dropping malware payloads.
7. Critical Flaws in Anthropic’s Claude Code Enable RCE and API Key Exfiltration
Published: 2026-02-25
New vulnerabilities in Anthropic’s Claude Code AI coding assistant allow remote code execution and theft of API credentials when developers open untrusted repositories or use certain configuration hooks and environment variables.
8. Scattered LAPSUS$ Hunters (SLH) Recruit Women with $500–$1,000 Bounties for IT Help Desk Vishing
Published: 2026-02-25
The Scattered LAPSUS$ Hunters group is actively recruiting women via social channels, offering $500–$1,000 per successful call. Recruits use pre-written scripts to bypass security and target corporate IT help desks.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider implementing multi-factor authentication, timely patching, and automated security processes to strengthen your defenses. Stay safe online!