Show Notes - 2026-02-20
Stories Covered
Today:CISA 3-Day Deadline: Dell RecoverPoint Hardcoded Credential Flaw (CVE-2026-22769) [Critical Alerts]BeyondTrust CVE-2026-1731 Now Confirmed in Ransomware Campaigns (CVSS 9.9) [Critical Alerts]RoundCube Webmail: Two Actively Exploited Flaws Added to CISA KEV [Critical Alerts]Windows Admin Center Privilege Escalation - Potential Domain Compromise (CVE-2026-26119, CVSS 8.8) [Vulnerability Disclosures]Ivanti Exploitation Surges - Zero-Days Traced to July 2025 [Vulnerability Disclosures]PUSR USR-W610 Industrial Router: Four Vulns, EOL, No Patch Coming [Vulnerability Disclosures]EnOcean SmartServer IoT: Remote Code Execution via Crafted Messages (CVE-2026-20761) [Vulnerability Disclosures]UMMC Ransomware: All Mississippi Clinics Closed, Epic EMR Offline [Ransomware & Extortion]Advantest Ransomware Attack - $120B Semiconductor Test Equipment Maker [Ransomware & Extortion]LockBit 5.0 Cross-Platform Build Explicitly Targets Proxmox [Ransomware & Extortion]ClickFix + Matanbuchus 3.0 + AstarionRAT: Domain Controllers Compromised in Minutes [Ransomware & Extortion]TrustConnect: Fully Fake RMM Vendor Selling a RAT for $300/Month [Business & Infrastructure Threats]Cline CLI 2.3.0 Supply Chain Attack - OpenClaw Installed on ~4,000 Developer Systems [Business & Infrastructure Threats]Identity Posture Gaps: What Cyber Insurers and Threat Actors Both Audit [Windows / AD Security]Microsoft Guidance: Self-Hosted AI Agents Require Full Isolation [General Security News]CVEs Referenced
CVE-2024-12356, CVE-2025-49113, CVE-2025-68461, CVE-2026-1731, CVE-2026-20761, CVE-2026-22769, CVE-2026-22885, CVE-2026-24455, CVE-2026-25715, CVE-2026-26048, CVE-2026-26049, CVE-2026-26119
Indicators of Compromise
178[.]128, 69[.]245, trustconnectsoftware[.]com