Daily Cyber Threat Brief 🔴 Feb 20’s Top Cyber News NOW! - Ep 1073
Feb 20, 2026
Urgent patching for a Dell RecoverPoint flaw and a three-day CISA mitigation request. New Gemini-assisted Android malware that interprets UI for remote control. Browsers flagged as a top attack surface and proxy phishing tools that capture session tokens to bypass MFA. A France bank data access incident and a rise in ATM jackpotting and third-party vendor probes.
AI Snips
Chapters
Transcript
Episode notes
Patch RecoverPoint Immediately
- Patch Dell RecoverPoint immediately if you run it, then hunt for indicators of compromise quickly.
- Prioritize patching because CISA required federal agencies to fix it within three days due to active exploitation.
Three-Day Order Means Active Campaign
- A three-day federal patch order signals an extremely active and successful exploitation campaign.
- Dr. Gerald Ogier reads it as an all-points-bulletin for a threat actor operating at scale.
Monitor Gemini-Assisted Android Malware
- Treat AI-assisted malware like PromptSpy as an emerging capability and monitor related research and samples.
- Consider threat hunting for Gemini-assisted strains and prepare for UI-driven automation on mobile malware.