SecurityWeek Briefing

"Apple iPhone and iPad cleared for classified NATO use."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 27 February 2026, 0014 UTC.

Content and Source provided by email subscription from https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

95K followers43 articles per week

#security#tech

68

Today

Apple iPhone and iPad Cleared for Classified NATO Use

iPhone iPad approved for NATO data

•

by Eduard Kovacs / 6h

The devices have been added to the NATO Information Assurance Product Catalogue (NIAPC). The post appeared first on SecurityWeek .

Four Risks Boards Cannot Treat as Background Noise

by Steve Durbin / 6h

The goal isn’t about preventing every attack but about keeping the business running when attacks succeed. The post appeared first on SecurityWeek .

Claude Code Flaws Exposed Developer Devices to Silent Hacking

by Eduard Kovacs / 10h

Anthropic has patched vulnerabilities whose impact was demonstrated by Check Point via malicious configuration files. The post appeared first on SecurityWeek .

11 Dumbest Things Smart People Waste Money On

by Finance Buzz

sponsored

You’re saving wisely—unlock more secrets to find extra cash fast.

Gambit Security Emerges From Stealth With $61 Million in Funding

by Ionut Arghire / 11h

The seed and Series A investment will enable the startup to accelerate product development and expand sales and customer success teams. The post appeared first on SecurityWeek .

Zyxel Patches Critical Vulnerability in Many Device Models

by Ionut Arghire / 11h

The issue impacts the UPnP function of multiple device models and could be exploited for remote code execution. The post appeared first on SecurityWeek .

US Sanctions Russian Exploit Broker Operation Zero

by Ionut Arghire / 13h

The broker acquired eight zero-day exploits from a US defense contractor executive jailed for his actions. The post appeared first on SecurityWeek .

Yesterday

Trend Micro Patches Critical Apex One Vulnerabilities

by Eduard Kovacs / 14h

TrendAI has fixed eight critical and high-severity issues in Windows and macOS endpoint security products. The post appeared first on SecurityWeek .

Cisco Patches Catalyst SD-WAN Zero-Day Exploited by Highly Sophisticated Hackers

Privilege Escalation (Enterprise TA0004)

•

by Ionut Arghire / 14h

•

Cisco SD-WAN vulnerabilities exploited actively

Already added to CISA’s KEV catalog, the flaw allows attackers to bypass authentication and gain administrative privileges. The post appeared first on SecurityWeek .

The Blast Radius Problem: Stolen Credentials Are Weaponizing Agentic AI

by Kevin Townsend / 1d

More than half (56%) of the 400,000 vulnerabilities IBM X-Force tracked in 2025 required no authentication before exploitation. The post appeared first on SecurityWeek .

Google Disrupts Chinese Hackers Targeting Telecoms, Governments

by Eduard Kovacs / 1d

The UNC2814 threat actor has been active since at least 2017, targeting organizations across 42 countries. The post appeared first on SecurityWeek .

SolarWinds Patches Four Critical Serv-U Vulnerabilities

Critical SolarWinds Serv-U vulnerabilities patched

•

by Ionut Arghire / 1d

The four security defects could be exploited for remote code execution but require administrative privileges. The post appeared first on SecurityWeek .

Medical Device Maker UFP Technologies Hit by Cyberattack

2 TTPs

•

by Eduard Kovacs / 1d

UFP Technologies appears to have been targeted in a ransomware attack that involved data theft and file-encrypting malware. The post appeared first on SecurityWeek .

Ex-US Defense Contractor Executive Jailed for Selling Exploits to Russia

Defense contractor jailed for espionage

•

by Ionut Arghire / 1d

Peter Williams was sentenced to 87 months in prison for selling cyber exploits to a Russian broker. The post appeared first on SecurityWeek .

Over 12 Million Users Impacted by CarGurus Data Breach

by Ionut Arghire / 1d

Hackers claim to have stolen personally identifiable information and internal corporate data from the automotive firm. The post appeared first on SecurityWeek .

SecurityWeek Report: 426 Cybersecurity M&A Deals Announced in 2025

by Eduard Kovacs / 1d

SecurityWeek’s M&A data indicates that today's market is more disciplined, and it seems to favor GRC, data protection, and identity. The post appeared first on SecurityWeek .

Wynn Resorts Confirms Data Breach After Hackers Remove It From Leak Site

Wynn Resorts data breach by ShinyHunters

•

by Eduard Kovacs / 1d

The high-end casino and hotel operator has admitted that employee data was stolen by ShinyHunters. The post appeared first on SecurityWeek .

Astelia Raises $35 Million for Exposure Management

by Ionut Arghire / 1d

The company will expand its AI-based analysis capabilities, grow its employee base, and scale deployments. The post appeared first on SecurityWeek .

Reddit Hit With $20 Million UK Data Privacy Fine Over Child Safety Failings

Reddit fined 14.47 million pounds

•

by Associated Press / 1d

Britain’s data privacy watchdog slapped online forum Reddit on Tuesday with a fine worth nearly $20 million for failures involving children’s personal information. The post appeared first on SecurityWeek .

Feb 24, 2026

Claude’s New AI Vulnerability Scanner Sends Cybersecurity Shares Plunging

CrowdStrike stock drops 8%

•

by Eduard Kovacs / 1d

The stocks of major cybersecurity companies have fallen sharply over fears that AI is disrupting the industry. The post appeared first on SecurityWeek .

Ad Tech Company Optimizely Targeted in Cyberattack

Optimizely suffers data breach vishing

•

by Ionut Arghire / 1d

The company says the attackers accessed internal business systems such as Zendesk and Salesforce. The post appeared first on SecurityWeek .

‘Arkanix Stealer’ Malware Disappears Shortly After Debut

Arkanix Stealer targets data using C++ Python

•

by Ionut Arghire / 2d

Written in C++ and Python, the malware exfiltrates system information, browser data, and steals files. The post appeared first on SecurityWeek .

VMware Aria Operations Vulnerability Could Allow Remote Code Execution

by Eduard Kovacs / 2d

Broadcom has patched several vulnerabilities in VMware Aria Operations, including high-severity flaws. The post appeared first on SecurityWeek .

CISO Conversations: Timothy Youngblood; 4x Fortune 500 CISO/CSO

by Kevin Townsend / 2d

Timothy Youngblood was CISO at Dell, CISO at Kimberley-Clark, VP & CISO at McDonald’s, and SVP, CSO & Product Security Officer at T-Mobile. The post appeared first on SecurityWeek .

New ‘Sandworm_Mode’ Supply Chain Attack Hits NPM

by Ionut Arghire / 2d

The malicious code propagates like a worm, poisons AI assistants, exfiltrates secrets, and contains a destructive dead switch. The post appeared first on SecurityWeek .

GitHub Issues Abused in Copilot Attack Leading to Repository Takeover

by Ionut Arghire / 2d

Attackers can inject malicious instructions in a GitHub Issue that are automatically processed by Copilot when launching a Codespace from that issue. The post appeared first on SecurityWeek .

Taiwan Security Firm Confirms Flaw Flagged by CISA Likely Exploited by Chinese APTs

by Eduard Kovacs / 2d

The vulnerability in TeamT5 ThreatSonar Anti-Ransomware was recently added to CISA’s KEV catalog. The post appeared first on SecurityWeek .

Anonymous Fénix Members Arrested in Spain

by Ionut Arghire / 2d

The group’s administrator and moderator were arrested last year, and two other members were arrested this month. The post appeared first on SecurityWeek .

Feb 23, 2026

US Healthcare Diagnostic Firm Says 140,000 Affected by Data Breach

Vikor Scientific data breach affects 140k

•

by Eduard Kovacs / 3d

The Everest ransomware group has taken credit for a hacker attack on Vikor Scientific, now called Vanta Diagnostics. The post appeared first on SecurityWeek .

Ukrainian Gets 5 Years in US Prison for Aiding North Korean IT Fraud

Ukrainian sentenced for North Korean fraud

•

by Ionut Arghire / 3d

Oleksandr Didenko sold the stolen identities of US citizens, allowing North Koreans to get hired using freelance work platforms. The post appeared first on SecurityWeek .

Autonomous AI Agents Provide New Class of Supply Chain Attack

by Kevin Townsend / 3d

While this campaign targets crypto wallets and steals money, the methodology has far wider potential that could be used by other attackers. The post appeared first on SecurityWeek .

Romanian Hacker Pleads Guilty to Selling Access to US State Network

Romanian hacker pleads guilty Oregon

•

by Ionut Arghire / 3d

Catalin Dragomir admitted in a US court to selling access to an Oregon state government office’s network. The post appeared first on SecurityWeek .

Hundreds of FortiGate Firewalls Hacked in AI-Powered Attacks: AWS

AI hackers breach 600 firewalls

•

by Ionut Arghire / 3d

Threat actors relying on AI have been exploiting exposed ports and weak credentials to take over FortiGate devices. The post appeared first on SecurityWeek .

Recent RoundCube Webmail Vulnerability Exploited in Attacks

CISA warns of Google Chromium zero-day

•

by Ionut Arghire / 3d

Patched in December 2025, the exploited flaw leads to XSS attacks via the animate tags in SVG documents. The post appeared first on SecurityWeek .

Mississippi Hospital System Closes All Clinics After Ransomware Attack

UMMC closes clinics after cyberattack

•

by Associated Press / 3d

A ransomware attack forced the University of Mississippi Medical Center to close all of its roughly three dozen clinics around the state and cancel elective procedures. The post appeared first on