Latest

Fraud Management & Cybercrime

Hospitals at Risk of BeyondTrust Ransomware Hacks

Marianne Kolbasuk McGee  •  February 20, 2026

Federal authorities and industry officials are urging healthcare sector entities to address a critical flaw in BeyondTrust Remote Support and Privileged Remote Access software, which if exploited, could give an attacker a foothold inside a hospital or clinic network.

►

Cyberwarfare / Nation-State Attacks

Former CISA Official: Shutdown Strains Cyber Operations

Chris Riotta  •  February 20, 2026

With DHS funding lapsed, CISA is maintaining incident response and threat coordination but scaling back vulnerability scanning, stakeholder engagement and forward-looking initiatives. Former CISA technology strategist Daniel Bardenstein warns prolonged disruption could widen risk exposure.

Cybercrime

Android Malware Taps Google Gemini at Runtime

Pooja Tikekar  •  February 20, 2026

A newly discovered Android malware strain, "PromptSpy," is using Google's Gemini generative artificial intelligence model to automate part of its persistence mechanism, marking what researchers describe as the second known case of AI-driven mobile malware.

Business Continuity Management / Disaster Recovery

Univ. of Mississippi Medical Center Dealing With Cyberattack

Marianne Kolbasuk McGee  •  February 19, 2026

The University of Mississippi Medical Center on Thursday said a ransomware attack has triggered its emergency operations plan and forced its hospitals to cancel all clinic and elective procedures at all locations statewide.

Artificial Intelligence & Machine Learning

Treasury AI Plan Faces Calls for Enforceable Controls

Chris Riotta  •  February 19, 2026

Security leaders are pressing Treasury to embed enforceable guardrails - covering adversarial testing, AI inventory, identity privilege mapping and real-time monitoring - into its forthcoming financial-sector AI guidance as deepfake fraud, data poisoning and autonomous agent risks escalate.

Cyberwarfare / Nation-State Attacks

Red Flags for OT Abound in Dragos Review of 2025

Shaun Waterman  •  February 19, 2026

There is a silent epidemic of ransomware attacks on commercial operational technology systems, which are mischaracterized as IT incidents even though they impact operational systems, claims a comprehensive annual review of cyberattacks targeting OT, published this week by security firm Dragos.

Access Management

Audit Finds Security Weaknesses at VA Spokane Medical Center

Marianne Kolbasuk McGee  •  February 19, 2026

A federal watchdog agency inspection of information security at the VA health system in Spokane, Wash. last year found deficiencies across three areas - configuration management, vulnerability management and access controls - that could potentially put sensitive data at risk, a new report said.

Artificial Intelligence & Machine Learning

Cogent Security Gets $42M to Boost AI Vulnerability Defense

Michael Novinson  •  February 19, 2026

Cogent Security secured $42 million in Series A funding to expand its AI-powered platform. Backed by Bain Capital Ventures, the company plans to triple staff, enhance model accuracy and scale its agent-based architecture to help enterprises automate remediation and counter AI-driven cyberattacks.

Fraud Management & Cybercrime

Massiv Attack: Android Trojan Targets IPTV Users

Greg Sirico  •  February 19, 2026

Security researchers warn of "Massiv," an Android Trojan - disguised as an IPTV app - targeting users who sideload streaming apps. The malware enables screen capture, overlays and credential theft - and may soon be marketed on criminal underground forums as malware as a service.

Geo Focus: The United Kingdom

UK Close to Imposing Hash Matching for Revenge Porn

David Meyer  •  February 19, 2026

The United Kingdom inched closer to requiring tech firms to scan all user-uploaded images, as Prime Minister Keir Starmer said sexualized deepfakes and so-called revenge porn constituted a "national emergency."

Standards, Regulations & Compliance

Trump Eyes VPN-Enabled Freedom.gov to Skirt EU Content Bans

Chris Riotta  •  February 19, 2026

The Trump administration is discussing the launch of an online portal allowing unfettered access to content restricted elsewhere by governments. The administration has chaffed, in particular, at the European Digital Services Act, which governs how platforms handle illegal content.

Blockchain & Cryptocurrency

Cryptohack Roundup: Paxful's $4M Penalty

Rashmi Ramesh  •  February 19, 2026

This week, Paxful's $4M AML penalty, Coinbase's agentic AI wallets, a $1M fraud indictment, a 20-year $200M Ponzi sentence, laundering from the $200M Mixin hack, a Binance France home invasion attempt, insider betting charges in Israel and lost seized bitcoin in South Korea.