Friday, February 20, 2026

Cloudflare outage leaving dozens of sites down

Users of U.S. web infrastructure service Cloudflare are reporting outages. Cloudflare has acknowledged the issue and said it is currently working to restore service. 

“Cloudflare is investigating issues with our services and/or network. Users may experience errors or timeouts reaching Cloudflare’s network or services,” 
--- the company said on its website.
  • This is a developing story.

  • Japanese tech giant Advantest hit by ransomware attack

    Advantest Corporation disclosed that its corporate network has been targeted in a ransomware attack that may have affected customer or employee data.

  • New Webinar: Defending Against Malicious Browser Extensions

    Attackers are doubling down on malicious browser extensions as their method of choice, stealing data, intercepting cookies and tokens, logging keystrokes, and more.

    Join Push Security for a teardown of malicious extension functionality, where you'll learn how to defend your organization from this growing attack vector.

  • CISA: BeyondTrust RCE flaw now exploited in ransomware attacks

    Hackers are actively exploiting the CVE-2026-1731 vulnerability in the BeyondTrust Remote Support product, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns.

  • Data breach at French bank registry impacts 1.2 million accounts

    The French Ministry of Finance has published an announcement informing of a cybersecurity incident that has impacted 1.2 million accounts.

  • Why the shift left dream has become a nightmare for security and developers

    The "shift left" approach has increased pressure on developers, as speed demands override security checks in modern CI pipelines. Qualys explains how analyzing 34,000 public container images revealed 7.3% were malicious and why security must be enforced at the infrastructure layer by default.

  • PayPal discloses data breach that exposed user info for 6 months

    PayPal is notifying customers of a data breach after a software error in a loan application exposed their sensitive personal information, including Social Security numbers, for nearly 6 months last year.

  • Learn a language with structure, not guesswork in this Babbel deal

    Right now, you can get lifetime access to all 14 Babbel languages for a one-time $159 (MSRP $646.20) with code LEARN before February 28 at 11:59 p.m. PT.

    • BleepingComputer Deals
    • February 20, 2026
    • 07:12 AM
    • Comment Count 0
  • Mississippi medical center closes all clinics after ransomware attack

    The University of Mississippi Medical Center (UMMC) closed all its clinic locations statewide on Thursday following a ransomware attack.

  • FBI: Over $20 million stolen in surge of ATM malware attacks in 2025

    The FBI warned that Americans lost more than $20 million last year amid a massive surge in ATM "jackpotting" attacks, in which criminals use malware to force cash machines to dispense money.

  • Ukrainian gets 5 years for helping North Koreans infiltrate US firms

    A Ukrainian national was sentenced to five years in prison for providing North Korean IT workers with stolen identities that helped them infiltrate U.S. companies.

  • PromptSpy is the first known Android malware to use generative AI at runtime

    Researchers have discovered the first known Android malware to use generative AI in its execution flow, using Google's Gemini model to adapt its persistence across different devices.

  • Train for CompTIA, AWS, Cisco & more with this $40 course deal

    The Complete CompTIA & IT Exam Lifetime Access Training Bundle gives you ongoing access to learning paths across CompTIA, Cisco, AWS, Microsoft, Google, and Linux for just $39.99 (MSRP $2,748.75). Instead of one course, you're getting an entire certification ecosystem you can revisit anytime.

    • BleepingComputer Deals
    • February 19, 2026
    • 02:11 PM
    • Comment Count 0
  • Flaw in Grandstream VoIP phones allows stealthy eavesdropping

    A critical vulnerability in Grandstream GXP1600 series VoIP phones allows a remote, unauthenticated attacker to gain root privileges and silently eavesdrop on communications.

  • Google blocked over 1.75 million Play Store app submissions in 2025

    Google says that through 2025, it blocked more than 255,000 Android apps from obtaining excessive access to sensitive user data and rejected over 1.75 million apps from being published on Google Play due to policy violations.

  • CISA orders feds to patch actively exploited Dell flaw within 3 days

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered government agencies to patch their systems within three days against a maximum-severity Dell vulnerability that has been under active exploitation since mid-2024.

  • How infostealers turn stolen credentials into real identities

    Infostealer dumps increasingly tie stolen credentials to real identities, linking usernames, cookies, and behavior across personal and enterprise accounts. Specops explains how analyzing 90,000 dumps shows reuse fuels enterprise risk and how continuous AD scanning disrupts that cycle.

  • Nigerian man gets eight years in prison for hacking tax firms

    A Nigerian national was sentenced to eight years in prison for hacking multiple tax preparation firms in Massachusetts and filing fraudulent tax returns seeking over $8.1 million in refunds.

  • Texas sues TP-Link over Chinese hacking risks, user deception

    Texas sued networking giant TP-Link Systems, accusing the company of deceptively marketing its routers as secure while allowing Chinese state-backed hackers to exploit firmware vulnerabilities and access users' devices.

  • Hackers target Microsoft Entra accounts in device code vishing attacks

    Threat actors are targeting technology, manufacturing, and financial organizations in campaigns that combine device code phishing and voice phishing (vishing) to abuse the OAuth 2.0 Device Authorization flow and compromise Microsoft Entra accounts.

  • Police arrests 651 suspects in African cybercrime crackdown

    African authorities arrested 651 suspects and recovered over $4.3 million in a joint operation targeting investment fraud, mobile money scams, and fake loan applications.

  • No comments:

    Friday Frappe: Revised Tariff Path Avoids Strong Resistance in Congress, Anthropic Unveils Claude Security Tool, Anthropic Unveils Claude Security Tool, . . . . . . .

      Supreme Court Axes Tariffs, Trump Responds With New Global Rate Tariff Ruling Kicks Off Fight Over $170 Billion in Refunds Bessent Says Ta...