Cyber Threat Feeds

Crims hit a $20M jackpot via malware-stuffed ATMs https://go.theregister.com/feed/www.theregister.com/2026/02/19/crims_atm_jackpotting/

Android malware taps Gemini to navigate infected devices https://go.theregister.com/feed/www.theregister.com/2026/02/19/genai_malware_android/

VoidLink and the New Reality of AI-Driven Linux Malware  https://www.morphisec.com/blog/voidlink-and-the-new-reality-of-ai-driven-linux-malware/

Scam Abuses Gemini Chatbots to Convince People to Buy Fake Crypto https://www.darkreading.com/endpoint-security/scam-abuses-gemini-chatbots-convince-people-buy-fake-crypto

Critical Grandstream VoIP Bug Highlights SMB Security Blind Spot https://www.darkreading.com/threat-intelligence/grandstream-bug-voip-security-blind-spot

Speeding APT Attack Confirmation with Attack Discovery, Workflows, and Agent Builder https://www.elastic.co/security-labs/speeding-apt-attack-discovery-confirmation-with-attack-discovery-workflows-and-agent-builder

Predator spyware used to infect phone belonging to Angolan journalist, report says https://therecord.media/predator-spyware-used-to-infect-phone-angola-journalist

Notepad++ declares hardened update process 'effectively unexploitable' https://go.theregister.com/feed/www.theregister.com/2026/02/18/notepadplusplus_security_update/

Singapore & Its 4 Major Telcos Fend Off Chinese Hackers https://www.darkreading.com/cyberattacks-data-breaches/singapore-major-telcos-fend-chinese-hackers

Poland Energy Survives Attack on Wind, Solar Infrastructure https://www.darkreading.com/threat-intelligence/poland-energy-attack-wind-solar-infrastructure

Critical Vulnerabilities in Ivanti EPMM Exploited https://unit42.paloaltonetworks.com/ivanti-cve-2026-1281-cve-2026-1340/

RMM Abuse Explodes as Hackers Ditch Malware https://www.darkreading.com/application-security/rmm-abuse-explodes-hackers-ditch-malware

Fake shops target Milano Cortina 2026 fans hunting for Tina and Milo plushies https://gridinsoft.com/blogs/fake-olympic-shops-tina-milo-2026/

Canada Goose says leaked customer transaction data did not come from company systems https://therecord.media/canada-goose-says-leaked-customer-data-was-not-from-company

SmartLoader Attack Uses Trojanized Oura MCP Server to Deploy StealC Infostealer https://thehackernews.com/2026/02/smartloader-attack-uses-trojanized-oura.html

Canada Goose ruffles feathers over 600K record dump, says leak is old news https://go.theregister.com/feed/www.theregister.com/2026/02/16/canada_goose_shinyhunters/

Attackers finally get around to exploiting critical Microsoft bug from 2024 https://go.theregister.com/feed/www.theregister.com/2026/02/13/critical_microsoft_bug_from_2024/

Google Ties Suspected Russian Actor to CANFAIL Malware Attacks on Ukrainian Orgs https://thehackernews.com/2026/02/google-ties-suspected-russian-actor-to.html

Microsoft Under Pressure to Bolster Defenses for BYOVD Attacks https://www.darkreading.com/application-security/microsoft-under-pressure-defenses-byovd-attacks

UAT-9921 Deploys VoidLink Malware to Target Technology and Financial Sectors https://thehackernews.com/2026/02/uat-9921-deploys-voidlink-malware-to.html

Google Reports State-Backed Hackers Using Gemini AI for Recon and Attack Support https://thehackernews.com/2026/02/google-reports-state-backed-hackers.html

Nation-state hackers ramping up use of Gemini for target reconnaissance, malware coding, Google says https://therecord.media/nation-state-hackers-using-gemini-for-malicious-campaigns

Supply chain attacks now fuel a 'self-reinforcing' cybercrime economy https://go.theregister.com/feed/www.theregister.com/2026/02/12/supply_chain_attacks/

Senegalese Data Breaches Expose Lack of 'Security Maturity' https://www.darkreading.com/cyberattacks-data-breaches/hackers-breach-senegal-national-biometric-database

83% of Ivanti EPMM Exploits Linked to Single IP on Bulletproof Hosting Infrastructure https://thehackernews.com/2026/02/83-of-ivanti-epmm-exploits-linked-to.html

Nation-State Actors Exploit Notepad++ Supply Chain https://unit42.paloaltonetworks.com/notepad-infrastructure-compromise/

Alleged WormGPT breach exposes 19,000 user records, researchers say https://gridinsoft.com/blogs/wormgpt-user-data-breach-19000/

Singapore Government Reports Technical Details of Telecom Targeting by Alleged Chinese State-Backed Threat Group https://rhisac.org/threat-intelligence/telecom-targeting-singapore/

SSHStalker Botnet Uses IRC C2 to Control Linux Systems via Legacy Kernel Exploits https://thehackernews.com/2026/02/sshstalker-botnet-uses-irc-c2-to.html

Legacy systems blamed as ministers promise no repeat of Afghan breach https://go.theregister.com/feed/www.theregister.com/2026/02/11/uk_afghan_breach_probe/