![Cybersecurity News | Daily Recap [20 Feb 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [20 Feb 2026]")
Daily Recap, Android and AI malware like PromptSpy are using Gemini at runtime to control UI actions, deploy a VNC module, steal unlock credentials, and prevent uninstallation. Infostealers are becoming key entry points linked to Bitter APT, Volt Typhoon remains embedded in US utilities, and ransomware incidents target Advantest and tribal services, highlighting ongoing risks to critical infrastructure and government services. #PromptSpy #VoltTyphoon
Category: Cyber Security News
Attackers are actively exploiting CVE-2026-1731 in BeyondTrust Remote Support and Privileged Remote Access, enabling pre-authentication remote code execution via an OS command injection. CISA added the flaw to its KEV on Feb 13 with a three-day federal patch deadline; SaaS instances were auto-patched while self-hosted users must apply updates (RS 25.3.2, PRA 25.1.1+). #CVE-2026-1731 #BeyondTrust
Advantest disclosed a ransomware attack that may have affected customer or employee data after an intruder gained access to parts of its corporate network on February 15. The company isolated affected systems, engaged third-party cybersecurity specialists, and says the investigation is ongoing while it prepares to notify any impacted individuals. #Advantest #NTT
Elon Muskâs social media company X has appealed a âŹ120 million European Commission fine under the EUâs Digital Services Act, listing multiple X-linked entities and Musk as plaintiffs. X says the commissionâs probe was “incomplete and superficial,” alleging procedural errors and due-process violations while the Commission will defend its decision in…
A Ukrainian national, Oleksandr Didenko, was sentenced to five years after admitting he ran Upworksell.com, a service that sold or rented stolen U.S. identities and arranged U.S.-based laptops to mask North Korean IT workers. The scheme placed North Korean programmers at about 40 U.S. companies, accessed at least 871 American identities,…
A 45-year-old Romanian national, Catalin Dragomir, pleaded guilty to hacking Oregonâs Office of Emergency Management in June 2021, selling administrative access on cybercriminal platforms and exposing an employeeâs personal data. He admitted to breaching 10 other U.S. companies causing at least $250,000 in losses and faces up to seven years in…
CISA updated its Known Exploited Vulnerabilities catalog to flag CVE-2026-1731 â a critical unauthenticated remote code execution flaw in BeyondTrust Remote Support and Privileged Remote Access â after a public proofâofâconcept led to inâtheâwild exploitation and use in ransomware campaigns. Security firms and trackers including Palo Alto Networks, SecureCyber, and GreyNoise…
This weekâs SecurityWeek roundup highlights a range of notable cybersecurity developments, from corporate restructuring and policy changes to data exposures, law enforcement actions, and rising vulnerabilities in critical systems. Coverage includes Axoniusâ workforce reduction and leadership transition, the European Parliament disabling AI features, HackerOne clarifying AI data use, an Abu Dhabi…
The French Ministry of Finance disclosed a cyber incident in which hackers accessed the national bank account registry FICOBA and exposed data tied to about 1.2 million user accounts. Stolen information included RIBs/IBANs, account holder identities, addresses and some taxpayer IDs after attackers used credentials from a civil servant, and authorities are working to secure the system and notify affected users. #FICOBA #DGFiP
A missing-authentication vulnerability (CVE-2026-24790) in Welker OdorEyes EcoSystem Pulse Bypass System with XL4 Controller could allow unauthorized actions that result in over- or under-odorization events. CISA rates this issue CVSS v3 8.2 and recommends isolating control networks, minimizing internet exposure, using updated VPNs and firewalls, and following ICS defense-in-depth guidance to…
A newly observed Remcos RAT variant adds real-time surveillanceâincluding live webcam streaming and online keyloggingâand stronger evasion techniques that reduce forensic traces on Windows systems. Researchers at Point Wild’s Lat61 team report the strain fetches modular DLL plugins from C2 servers, decrypts configuration only in memory, resolves Windows APIs dynamically, and…
A sophisticated fraud campaign exploiting Indonesiaâs official Coretax tax platform has caused an estimated nationwide financial impact of $1.5m to $2m. Beginning in July 2025 and surging during the January 2026 tax filing period, the operation impersonated Coretax to distribute malicious APKs via phishing sites, WhatsApp and vishing, and was linked…
NIST has developed a single-chip source that reliably emits one photon on demand, enabling more efficient and provably secure quantum key distribution. This breakthroughâcombining quantum-dot single-photon emitters with SNSPD receivers and chip-scale integrationâcould broaden QKD adoption beyond niche military and government uses and help defend against “harvest now, decrypt later” threats….
Global leaders at the India AI Impact Summit 2026 warned that AI is evolving faster than governance and security can keep up, spotlighting risks from unequal access, concentration of power, and rising threats like deepfakes. Speakers including Sundar Pichai, Dario Amodei, and N. Chandrasekaran urged Responsible AI at scale, international governance,…
French national bank authority confirmed a major breach affecting 1.2 million bank accounts after stolen credentials of a government official were used to access FICOBA. The Directorate General of Public Finances restricted access, notified banks and affected users, and authorities including CNIL and prosecutors opened investigations. #FICOBA #CNIL…