SecurityWeek Briefing

February 19, 2026

"Nearly 1 million user records compromised in Figure Data breach."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents. Accessed on 19 February 2026, 1340 UTC.

Content and Source provided by email subscription from https://feedly.com.

https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check subscription link or scroll down to read your selections. Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

95K followers43 articles per week
#security #tech
25

Today

Nearly 1 Million User Records Compromised in Figure Data Breach
by Eduard Kovacs / 17min
The blockchain-based lender has confirmed a data breach after ShinyHunters leaked over 2GB of data allegedly stolen from the company. The post appeared first on SecurityWeek .
Venice Security Emerges From Stealth With $33M Funding for Privileged Access Management
by Eduard Kovacs / 1h
Formerly named Valkyrie, the company’s funding includes $25 million raised in a Series A round. The post appeared first on SecurityWeek .
Ivanti Exploitation Surges as Zero-Day Attacks Traced Back to July 2025
by Eduard Kovacs / 1h
Security researchers have seen the vulnerabilities being exploited to deliver shells, conduct reconnaissance, and download malware. The post appeared first on SecurityWeek .
OpenClaw Security Issues Continue as SecureClaw Open Source Tool Debuts
by Kevin Townsend / 2h
OpenClaw faces security vulnerabilities and misconfiguration risks despite rapid patches and its transition to an OpenAI-backed foundation. The post appeared first on SecurityWeek .

Yesterday

German Rail Giant Deutsche Bahn Hit by Large-Scale DDoS Attack
2 TTPs
•
by Eduard Kovacs / 4h
The cyberattack disrupted information and booking systems and lasted for several hours. The post appeared first on SecurityWeek .
New Keenadu Android Malware Found on Thousands of Devices
Keenadu malware infects Android devices
•
by Eduard Kovacs / 21h
The malware has been preinstalled on many devices but it has also been distributed through Google Play and other app stores. The post appeared first on SecurityWeek .
Cogent Security Raises $42 Million for AI-Driven Vulnerability Management
by Eduard Kovacs / 22h
The Series A funding round, led by Bain Capital, brings the total raised by Cogent to $53 million. The post appeared first on SecurityWeek .
Vulnerabilities in Popular PDF Platforms Allowed Account Takeover, Data Exfiltration
by Eduard Kovacs / 1d
Novee researchers discovered 16 vulnerabilities in Foxit and Apryse PDF tools that could have been exploited via malicious documents or URLs. The post appeared first on SecurityWeek .
CISA: Hackers Exploiting Vulnerability in Product of Taiwan Security Firm TeamT5
CISA warns of Google Chromium zero-day
•
by Eduard Kovacs / 1d
The vulnerability added to CISA’s KEV catalog affects ThreatSonar Anti-Ransomware and it was patched in 2024. The post appeared first on SecurityWeek .

Feb 17, 2026

Palo Alto Networks to Acquire Koi in Reported $400 Million Transaction
by Eduard Kovacs / 1d
Koi has developed an endpoint security solution that Palo Alto will use to enhance its products. The post appeared first on SecurityWeek .
Dell RecoverPoint Zero-Day Exploited by Chinese Cyberespionage Group
by Eduard Kovacs / 1d
GTIG and Mandiant said the zero-day tracked as CVE-2026-22769 has been exploited by UNC6201 since at least 2024. The post appeared first on SecurityWeek .
Cyber Insights 2026: The Ongoing Fight to Secure Industrial Control Systems
by Kevin Townsend / 1d
As nation-state actors, ransomware groups, and aging infrastructure collide, organizations must rethink how they defend critical operations through resilience, visibility, and modern security strategies. The post appeared first on SecurityWeek .
VulnCheck Raises $25 Million in Series B Funding to Scale Vulnerability Intelligence
VulnCheck raises 25M Series B
•
by SecurityWeek News / 1d
The latest funding round was led by Sorenson Capital and brings the total investment to $45 million. The post appeared first on SecurityWeek .
Hackers Offer to Sell Millions of Eurail User Records
Eurail data breach exposes customer information
•
by Eduard Kovacs / 1d
Eurail has confirmed that the stolen data is up for sale, but it’s still trying to determine how many individuals are impacted. The post appeared first on SecurityWeek .
API Threats Grow in Scale as AI Expands the Blast Radius
by Kevin Townsend / 1d
New research shows attackers increasingly abusing APIs at machine speed as AI-driven systems widen exposure and amplify impact. The post appeared first on SecurityWeek .
Man Linked to Phobos Ransomware Arrested in Poland
by Eduard Kovacs / 2d
Polish police said they found evidence of cybercrime on the 47-year-old suspect’s devices. The post appeared first on SecurityWeek .
3 Threat Groups Started Targeting ICS/OT in 2025: Dragos
by Eduard Kovacs / 2d
Industrial cybersecurity firm Dragos has published its 9th Year in Review OT/ICS Cybersecurity Report. The post appeared first on SecurityWeek .

Feb 16, 2026

Password Managers Vulnerable to Vault Compromise Under Malicious Server
Password managers have serious vulnerabilities
•
by Eduard Kovacs / 2d
Researchers at ETH Zurich have tested the security of Bitwarden, LastPass, Dashlane, and 1Password password managers. The post appeared first on SecurityWeek .
Dior, Louis Vuitton, Tiffany Fined $25 Million in South Korea After Data Breaches
by Eduard Kovacs / 2d
Luxury brands were among the dozens of major companies whose Salesforce instances were targeted by Scattered LAPSUS$ Hunters. The post appeared first on SecurityWeek .
Android 17 Beta Strengthens Secure-by-Default Design for Privacy and App Security
Android 16 QPR3 Beta 2.1 released
•
by Eduard Kovacs / 2d
The latest Android version continues to improve security and privacy, according to its developers. The post appeared first on SecurityWeek .
CISA Navigates DHS Shutdown With Reduced Staff
CISA warns of funding impacts
•
by Kevin Townsend / 2d
CISA is currently operating at roughly 38% capacity (888 out of 2,341 staff) due to the DHS shutdown that began February 14, 2026. The post appeared first on SecurityWeek .
Microsoft Warns of ClickFix Attack Abusing DNS Lookups
by Eduard Kovacs / 3d
Attackers are using DNS requests to deliver a RAT named ModeloRAT to targeted users. The post appeared first on SecurityWeek .
Amazon Scraps Partnership With Surveillance Company After Super Bowl Ad Backlash
Ring cancels Flock partnership
•
by Associated Press / 3d
Amazon’s smart doorbell maker Ring has terminated a partnership with police surveillance tech company Flock Safety. The post appeared first on SecurityWeek .

Feb 15, 2026

Google Patches First Actively Exploited Chrome Zero-Day of 2026
2 TTPs
•
by Eduard Kovacs / 3d
•
CVE-2026-2441
A Chrome 145 update fixes CVE-2026-2441, a vulnerability that can likely be exploited for arbitrary code execution. The post appeared first on SecurityWeek .

Feb 14, 2026

Over 300 Malicious Chrome Extensions Caught Leaking or Stealing User Data
Malicious AI Chrome extensions steal data
•
23by Ionut Arghire / 5d
With more than 37 million combined downloads, the extensions expose users to tracking and personal information theft. The post appeared first on SecurityWeek .

End of feed

Comments