Latest

Artificial Intelligence & Machine Learning

Anthropic's AI Bug Hunter Jolts Cyber Stocks

Rashmi Ramesh  •  February 22, 2026

Anthropic launched Claude Code Security, an AI tool that found 500+ undetected bugs in production code. Cybersecurity stocks dropped sharply, but analysts are split on whether the disruption signals a genuine industry reckoning or a market overreaction.

Fraud Management & Cybercrime

Hospitals at Risk of BeyondTrust Ransomware Hacks

Marianne Kolbasuk McGee  •  February 20, 2026

Federal authorities and industry officials are urging healthcare sector entities to address a critical flaw in BeyondTrust Remote Support and Privileged Remote Access software, which if exploited, could give an attacker a foothold inside a hospital or clinic network.

Cybercrime

Android Malware Taps Google Gemini at Runtime

Pooja Tikekar  •  February 20, 2026

A newly discovered Android malware strain, "PromptSpy," is using Google's Gemini generative artificial intelligence model to automate part of its persistence mechanism, marking what researchers describe as the second known case of AI-driven mobile malware.

Fraud Management & Cybercrime

How to Spot a North Korean Job Candidate

Greg Sirico  •  February 20, 2026

They're young, tech-savvy and often the most productive remote worker on the team. They're a major security risk numbering in the thousands that a multitude of Fortune 500 companies have unwittingly ushered into their network. They are North Korean IT workers.

►

Artificial Intelligence & Machine Learning

ISMG Editors: No Honor Among Ransomware Thieves

Anna Delaney  •  February 20, 2026

In this week's panel, four ISMG editors examined how cybercriminals may be turning on each other, what security leaders are really saying about machine identities and AI risk, and how shifting U.S.-Europe dynamics are reshaping technology resilience and digital sovereignty.

Cyberwarfare / Nation-State Attacks

Red Flags for OT Abound in Dragos Review of 2025

Shaun Waterman  •  February 19, 2026

There is a silent epidemic of ransomware attacks on commercial operational technology systems, which are mischaracterized as IT incidents even though they impact operational systems, claims a comprehensive annual review of cyberattacks targeting OT, published this week by security firm Dragos.

Access Management

Audit Finds Security Weaknesses at VA Spokane Medical Center

Marianne Kolbasuk McGee  •  February 19, 2026

A federal watchdog agency inspection of information security at the VA health system in Spokane, Wash. last year found deficiencies across three areas - configuration management, vulnerability management and access controls - that could potentially put sensitive data at risk, a new report said.

Artificial Intelligence & Machine Learning

Cogent Security Gets $42M to Boost AI Vulnerability Defense

Michael Novinson  •  February 19, 2026

Cogent Security secured $42 million in Series A funding to expand its AI-powered platform. Backed by Bain Capital Ventures, the company plans to triple staff, enhance model accuracy and scale its agent-based architecture to help enterprises automate remediation and counter AI-driven cyberattacks.

Cybercrime

Breach Roundup: Cambodia Scam Center Crackdown

Pooja Tikekar  •  February 19, 2026

This week, Cambodia shuttered 200 scam centers. EU Parliament banned AI tools. Canada Goose disputed a ShinyHunters leak. Notepad++ patched an updater flaw. Apple fixed a decades-old iOS zero-day. BeyondTrust and Dell patched critical flaws under active exploitation.

Fraud Management & Cybercrime

Massiv Attack: Android Trojan Targets IPTV Users

Greg Sirico  •  February 19, 2026

Security researchers warn of "Massiv," an Android Trojan - disguised as an IPTV app - targeting users who sideload streaming apps. The malware enables screen capture, overlays and credential theft - and may soon be marketed on criminal underground forums as malware as a service.

Geo Focus: The United Kingdom

UK Close to Imposing Hash Matching for Revenge Porn

David Meyer  •  February 19, 2026

The United Kingdom inched closer to requiring tech firms to scan all user-uploaded images, as Prime Minister Keir Starmer said sexualized deepfakes and so-called revenge porn constituted a "national emergency."

Standards, Regulations & Compliance

Trump Eyes VPN-Enabled Freedom.gov to Skirt EU Content Bans

Chris Riotta  •  February 19, 2026

The Trump administration is discussing the launch of an online portal allowing unfettered access to content restricted elsewhere by governments. The administration has chaffed, in particular, at the European Digital Services Act, which governs how platforms handle illegal content.