Daily Threat Briefing — Feb 24, 2026

📰 Cybersecurity News Headlines

Top stories from leading cybersecurity publications as of February 24, 2026.

1. Android mental health apps with 14.7M installs filled with security flaws
   — Bleeping Computer
   
   Several mental health mobile apps with millions of downloads on Google Play contain security vulnerabilities that could expose users' sensit…
2. Spitting Cash: ATM Jackpotting Attacks Surged in 2025
   — Dark Reading
   
   The attacks cost banks more than $20 million in losses last year, as criminals used many of the same tools and tactics they have wielded for…
3. Spain arrests suspected hacktivists for DDoSing govt sites
   — Bleeping Computer
   
   Spanish authorities have arrested four alleged members of a hacktivist group believed to have carried out cyberattacks targeting government …
4. Iran's MuddyWater Targets Orgs With Fresh Malware as Tensions Mount
   — Dark Reading
   
   The long-active Iranian threat group debuted various attack strains and payloads in attacks against organizations in the Middle East and Afr…
5. Enigma Cipher Device Still Holds Secrets for Cyber Pros
   — Dark Reading
   
   The Nazi relic's history is riddled with resilience errors, and those lessons still apply to defending against modern cyber threats.
6. APT28 Targeted European Entities Using Webhook-Based Macro Malware
   — The Hacker News
   
   The Russia-linked state-sponsored threat actor tracked as APT28 has been attributed to a new campaign targeting specific entities in Western…
7. Microsoft says bug in classic Outlook hides the mouse pointer
   — Bleeping Computer
   
   Microsoft is investigating a known issue that causes the mouse pointer to disappear in the classic Outlook desktop email client for some use…
8. 600+ FortiGate Devices Hacked by AI-Armed Amateur
   — Dark Reading
   
   A Russian-speaking hacker used generative AI to compromise the FortiGate firewalls, targeting credentials and backups for possible follow-on…
9. Ad tech firm Optimizely confirms data breach after vishing attack
   — Bleeping Computer
   
   New York-based ad tech company Optimizely has notified an undisclosed number of customers of a data breach after threat actors compromised s…
10. Wormable XMRig Campaign Uses BYOVD Exploit and Time-Based Logic Bomb
    — The Hacker News
    
    Cybersecurity researchers have disclosed details of a new cryptojacking campaign that uses pirated software bundles as lures to deploy a bes…
11. Another day, another malicious JPEG, (Mon, Feb 23rd)
    — SANS ISC
    
    In his last two diaries, Xavier discussed recent malware campaigns that download JPEG files with embedded malicious payload[1,2]. At that po…
12. ⚡ Weekly Recap: Double-Tap Skimmers, PromptSpy AI, 30Tbps DDoS, Docker Malware & More
    — The Hacker News
    
    Security news rarely moves in a straight line. This week, it feels more like a series of sharp turns, some happening quietly in the backgrou…

Generated by cryptxnet.com/ Threat Intelligence Platform · February 24, 2026 · Sources: The Hacker News, Bleeping Computer, Krebs on Security, Dark Reading, SANS ISC