Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, significant data breaches, and key industry developments to keep you informed and secure in the ever-evolving digital landscape.
1. CISA and Partners Release Guidance for Ongoing Global Exploitation of Cisco SD-WAN Systems
Published: 2026-02-25
CISA, along with international partners, issued an alert on active global exploitation of Cisco Catalyst SD-WAN systems. Attackers exploit CVE-2026-20127 (authentication bypass, added to KEV catalog today) for initial access and CVE-2022-20775 for privilege escalation and persistence. Federal agencies must inventory systems, patch immediately, hunt for compromise, and follow Cisco hardening guidance under Emergency Directive 26-03.
2. Google Disrupts UNC2814 GRIDTIDE Campaign After 53 Breaches Across 42 Countries
Published: 2026-02-25
Google and industry partners dismantled infrastructure used by suspected China-linked group UNC2814 (also tracked as GRIDTIDE). The espionage campaign compromised at least 53 organizations in 42 countries, primarily governments and telecoms, using a novel backdoor that abuses Google Sheets API for stealthy C2, SoftEther VPN, and living-off-the-land techniques.
3. Claude Code Flaws Allow Remote Code Execution and API Key Exfiltration
Published: 2026-02-25
Check Point Research disclosed multiple vulnerabilities in Anthropic’s Claude Code AI coding assistant. Flaws enable arbitrary code execution via untrusted project hooks and directories, plus API key theft through malicious repositories. All issues (including CVE-2025-59536 and CVE-2026-21852) have been patched in recent versions.
4. Medical Device Maker UFP Technologies Warns of Data Stolen in Cyberattack
Published: 2026-02-25
UFP Technologies disclosed a February 14 cyber incident that compromised parts of its IT network, including billing and label-making systems. Some company data was stolen or destroyed; the threat has been contained with external help, though the full scope of exfiltrated personal information remains under investigation. No material financial impact is expected.
5. Malicious StripeApi NuGet Package Mimicked Official Library and Stole API Tokens
Published: 2026-02-26
A fake NuGet package called StripeApi.Net impersonated the legitimate Stripe.net library (75M+ downloads). Uploaded on Feb 16, it reached 180,000 downloads across 506 versions before removal. The package secretly exfiltrated Stripe API tokens and sensitive data while appearing to function normally.
6. Microsoft Warns Developers of Fake Next.js Job Repos Delivering In-Memory Malware
Published: 2026-02-26
Microsoft exposed a developer-focused supply-chain campaign using fake Next.js repositories disguised as job assessments on Bitbucket. Victims executing the code (via VS Code, npm run dev, or server startup) receive in-memory JavaScript malware for profiling, C2, and persistent access. Multiple execution paths and second-stage controllers enable further payloads.
7. Trend Micro Warns of Critical Apex One Code Execution Flaws
Published: 2026-02-26
Trend Micro patched two critical path-traversal vulnerabilities (CVE-2025-71210 and CVE-2025-71211) in Apex One that allow unauthenticated remote code execution on the Windows management console. Additional high-severity privilege-escalation fixes were included for Windows and macOS agents in the latest Critical Patch Build.
8. Ransomware Payment Rate Drops to Record Low as Attacks Surge
Published: 2026-02-26
A new report reveals the ransomware payment rate fell to an all-time low of 28% in 2025 (down from 62.8% in 2024), despite a 50% year-over-year surge in attacks. Total on-chain payments reached ~$820M with a median ransom of $59,556 (up 368%). Improved defenses, regulation, and law enforcement actions are credited for the declining success rate of extortion groups.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, enable multi-factor authentication everywhere, keep systems patched, and maintain strong backup practices. Stay safe online!