AnalysisPublished 23 Feb 2026

23rd February · Threat Intelligence Report

Source Check Point Research

Mentions 3 CVEs : update to 6.0.3.1

Mentioned vulnerabilities

Description

For the latest discoveries in cyber research for the week of 23rd February, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES France’s Ministry of Economy has disclosed a data breach resulted from an unauthorized access to the national bank account registry FICOBA, impacting information tied to 1.2 million accounts. Exposed data includes names, […] The post 23rd February – Threat Intelligence Report appeared first on Check Point Research .

Impact

The impact of these threats is extensive and multifaceted. The FICOBA data breach compromises the confidentiality of millions of French citizens’ financial and personal data, potentially enabling identity theft, fraud, and targeted attacks. Ransomware incidents at Advantest and the University of Mississippi Medical Center disrupt critical business and healthcare operations, risking patient safety and causing financial losses. The supply chain compromise affecting Ukraine’s central bank contractor exposes customer data and highlights risks in third-party dependencies. The Dell RecoverPoint zero-day exploitation threatens VMware environments globally, enabling attackers to gain persistent, unauthenticated root access, deploy advanced malware, and move laterally, jeopardizing data integrity and availability in critical infrastructure and enterprise environments. The Grandstream VoIP phone vulnerability allows attackers to intercept calls and manipulate communications, impacting confidentiality and operational integrity in organizations relying on these devices. The Microsoft 365 Copilot flaw risks exposure of sensitive corporate communications despite DLP policies, undermining data protection efforts. The Google Chrome zero-day enables remote code execution in browsers, threatening endpoint security. AI-assisted attack techniques and supply chain worms increase the sophistication and stealth of attacks, complicating detection and response. Phishing campaigns exploiting trusted domains and automation tools increase the likelihood of successful social engineering attacks against government and corporate targets. Collectively, these threats can lead to data breaches, operational disruptions, financial losses, reputational damage, and erosion of trust in digital services.

Defensive guidance

Organizations should implement targeted mitigations beyond generic advice. For the FICOBA breach, enforce strict credential management, including multi-factor authentication (MFA) for government and critical system access, and conduct thorough audits of privileged accounts. For ransomware threats, deploy network segmentation to limit lateral movement, maintain offline backups, and apply behavioral detection tools to identify early ransomware activity. Address supply chain risks by vetting contractors rigorously, monitoring third-party access, and employing software bill of materials (SBOM) practices. For Dell RecoverPoint environments, immediately upgrade to version 6.0.3.1 or later, remove hardcoded credentials, and deploy intrusion prevention systems (IPS) with signatures for SLAYSTYLE, BRICKSTORM, and GRIMBOLT malware. Patch Grandstream GXP1600 phones to firmware 1.0.7.81 and restrict administrative access to VoIP devices. For Microsoft 365 Copilot, apply vendor patches when available and review AI feature configurations to limit exposure of sensitive data. Update Google Chrome to version 145.0.7632.75 or later. Monitor AI assistant traffic for anomalous patterns indicative of covert C2 channels and restrict AI web browsing features where possible. Employ supply chain security best practices including scanning for typosquatted packages and monitoring CI/CD workflows for unauthorized changes. Enhance phishing defenses by validating sender domains, employing DMARC, SPF, and DKIM, and training users on sophisticated social engineering tactics. Utilize advanced endpoint detection and response (EDR) solutions capable of detecting novel malware behaviors and AI-assisted attacks.

References

research.checkpoint.com/2026/23rd-february-threat-intelligence-report/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 24 Feb 2026, 00:10 UTC

References

Community reviews

Related threats