Android mental health apps with 14.7M installs filled with security flaws

Several mental health mobile apps with millions of downloads on Google Play contain security vulnerabilities that could expose users' sensitive medical information.

• Ionut Ilascu
• February 23, 2026
• 05:59 PM
• 0

Spain arrests suspected hacktivists for DDoSing govt sites

Spanish authorities have arrested four alleged members of a hacktivist group believed to have carried out cyberattacks targeting government ministries, political parties, and various public institutions.

• Sergiu Gatlan
• February 23, 2026
• 04:59 PM
• 0

New Webinar: Defending Against Malicious Browser Extensions

Attackers are doubling down on malicious browser extensions as their method of choice, stealing data, intercepting cookies and tokens, logging keystrokes, and more.

Join Push Security for a teardown of malicious extension functionality, where you'll learn how to defend your organization from this growing attack vector.

• Push Security Sponsorship

Microsoft says bug in classic Outlook hides the mouse pointer

Microsoft is investigating a known issue that causes the mouse pointer to disappear in the classic Outlook desktop email client for some users.

• Sergiu Gatlan
• February 23, 2026
• 02:40 PM
• 0

Ad tech firm Optimizely confirms data breach after vishing attack

New York-based ad tech company Optimizely has notified an undisclosed number of customers of a data breach after threat actors compromised some of its systems in a voice phishing attack.

• Sergiu Gatlan
• February 23, 2026
• 01:04 PM
• 0

Get started in cybersecurity with $53 training course deal

InfoSec4TC Platinum Membership (currently $52.99, MSRP $280) works more like a permanent training library than a traditional course. Instead of paying per certification prep, you get lifetime access to a full catalog, including GSEC, CISSP, CISA, CISM, ISO 27001, ethical hacking, and Python security courses.

• BleepingComputer Deals
• February 23, 2026
• 11:12 AM
• 0

When identity isn’t the weak link, access still is

Stolen tokens and compromised devices let attackers reuse trust without breaking authentication. Specops Software explains why identity alone isn't enough and how continuous device verification strengthens Zero Trust.

• Specops Software
• February 23, 2026
• 10:00 AM
• 0

CISA: Recently patched RoundCube flaws now exploited in attacks

CISA flagged two Roundcube Webmail vulnerabilities as actively exploited in attacks and ordered U.S. federal agencies to patch them within three weeks.

• Sergiu Gatlan
• February 23, 2026
• 06:44 AM
• 0

Arkanix Stealer pops up as short-lived AI info-stealer experiment

An information-stealing malware operation named Arkanix Stealer, promoted on multiple dark web forums towards the end of 2025, was likely developed as an AI-assisted experiment.

• Bill Toulas
• February 22, 2026
• 10:33 AM
• 0

This $790 AI automation course bundle is $20 today

One of the most useful ways to use AI is also one of the hardest to learn. With a little training, you can learn to use AI to automate all the repetitive tasks that burn through your day, and the ChatGPT and Automation E-Degree can help you learn how. Right now, it's also on sale for only $19.99 (reg. $790).

• BleepingComputer Deals
• February 22, 2026
• 08:19 AM
• 0

Predator spyware hooks iOS SpringBoard to hide mic, camera activity

Intellexa's Predator spyware can hide iOS recording indicators while secretly streaming camera and microphone feeds to its operators.

• Bill Toulas
• February 21, 2026
• 11:13 AM
• 5

Amazon: AI-assisted hacker breached 600 Fortinet firewalls in 5 weeks

Amazon is warning that a Russian-speaking hacker used multiple generative AI services as part of a campaign that breached more than 600 FortiGate firewalls across 55 countries in five weeks.

• Lawrence Abrams
• February 21, 2026
• 08:50 AM
• 0

This open-box 2-in-1 ASUS Chromebook is on sale for $150 & includes a stylus

There's a point where buying a budget computer stops being a compromise and starts being logical. And this new open-box ASUS Chromebook CM30 (2024) lands squarely there. For $149.99 (MSRP $329.99), this is not a "cheap laptop" — it's a "smart everyday device."

• BleepingComputer Deals
• February 21, 2026
• 08:11 AM
• 0

Learn ethical hacking with this hands-on hacking course deal for $28

The All-in-One Super-Sized Ethical Hacking Bundle packages 14 courses and 118 hours of training into one place, and right now it's just $27.99 (MSRP $854). Instead of random tutorials, this follows a structured path: understand attacks, practice them safely, and learn how to defend against them.

• BleepingComputer Deals
• February 20, 2026
• 02:07 PM
• 0

Japanese tech giant Advantest hit by ransomware attack

Advantest Corporation disclosed that its corporate network has been targeted in a ransomware attack that may have affected customer or employee data.

• Bill Toulas
• February 20, 2026
• 01:30 PM
• 0

CISA: BeyondTrust RCE flaw now exploited in ransomware attacks

Hackers are actively exploiting the CVE-2026-1731 vulnerability in the BeyondTrust Remote Support product, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns.

• Bill Toulas
• February 20, 2026
• 12:02 PM
• 0

Data breach at French bank registry impacts 1.2 million accounts

The French Ministry of Finance has published an announcement informing of a cybersecurity incident that has impacted 1.2 million accounts.

• Bill Toulas
• February 20, 2026
• 11:20 AM
• 0

Why the shift left dream has become a nightmare for security and developers

The "shift left" approach has increased pressure on developers, as speed demands override security checks in modern CI pipelines. Qualys explains how analyzing 34,000 public container images revealed 7.3% were malicious and why security must be enforced at the infrastructure layer by default.

• Qualys
• February 20, 2026
• 09:45 AM
• 0

PayPal discloses data breach that exposed user info for 6 months

PayPal is notifying customers of a data breach after a software error in a loan application exposed their sensitive personal information, including Social Security numbers, for nearly 6 months last year.

• Sergiu Gatlan
• February 20, 2026
• 08:12 AM
• 6

Learn a language with structure, not guesswork in this Babbel deal

Right now, you can get lifetime access to all 14 Babbel languages for a one-time $159 (MSRP $646.20) with code LEARN before February 28 at 11:59 p.m. PT.

• BleepingComputer Deals
• February 20, 2026
• 07:12 AM
• 0

Mississippi medical center closes all clinics after ransomware attack

The University of Mississippi Medical Center (UMMC) closed all its clinic locations statewide on Thursday following a ransomware attack.

• Sergiu Gatlan
• February 20, 2026
• 06:50 AM
• 2