OPS INTEL

CRITICAL 90% confidence outage

'Starkiller' Phishing Service Proxies Real Login Pages with MFA

['Starkiller phishing service uses real login pages as proxies for MFA attacks.', 'Stealthy Starkiller phishing service bypasses security measures by proxying.

['Starkiller leverages real login pages, reducing detection by security teams who monitor static phishing copies.', 'The method bypasses typical preventive measures like MFA, making it harder to identify and block malici

Enterprise web servicesFinancial institutions

action items (2)

• Review current MFA solutions and their effectiveness against proxy-based attacks.
• Educate users on recognizing suspicious login behaviors and the risks of phishing.

Krebs on Security · 2026-02-21T01:17

CRITICAL 95% confidence advisory

CISA Urges Rapid Patching of Actively Exploited Dell Vulnerability

Federal agencies have three days to address a critical Dell bug exploited since mid-2024. CISA warns of espionage threats linked to hardcoded credentials in.

['The flaw involves hardcoded credentials and has been actively exploited since mid-2024', 'Exploitation could lead to espionage threats against government networks']

Federal agenciesCritical infrastructure operators

action items (2)

• Review and update patch management policies
• Conduct an inventory of all Dell RecoverPoint installations

The Register · 2026-02-21T01:13

MEDIUM 80% confidence outage

Amazon Denies Kiro Agentic AI Behind Outage

['AWS suffered outages reportedly caused by its own agentic AI coding tools, but Amazon claims user misconfiguration as the root cause.'] Includes severity, con

['Operators need to understand potential risks associated with advanced AI tools and ensure robust security practices are in place to prevent similar incidents due to configuration errors or unexpected behavior.']

AWS usersCloud service operators

action items (2)

• Review existing access controls for AI integration
• Update incident response plans to account for potential issues with agentic AI

The Register · 2026-02-21T00:51

HIGH 90% confidence outage

FBI Warns of Rising ATM Jackpotting Incidents

['FBI reports over 1,900 ATM jackpotting incidents since 2020 with losses exceeding $20M in 2025. Operators must stay vigilant against such attacks.'] Includes

['ATM jackpotting attacks involve criminals exploiting vulnerabilities to illegally dispense cash from ATMs.', 'Operators need to enhance security measures and monitor suspicious activities regularly.']

Financial InstitutionsATM Operators

action items (2)

• Review current ATM security protocols and upgrade where necessary.
• Train staff to identify and respond to suspicious activity at ATMs.

The Hacker News · 2026-02-21 21:15

CRITICAL 95% confidence outage

CISA Adds Five Known Exploited Vulnerabilities to Catalog

CISA adds five new vulnerabilities to its KEV Catalog due to active exploitation threats. Prioritize remediation for CVE-2018-14634, CVE-2025-52691. Read full o

['Malicious actors actively exploit these vulnerabilities', 'These vulnerabilities present significant risks to federal enterprises']

Federal Civilian Executive Branch agenciesAll organizations managing federal networks

action items (3)

• Review the KEV catalog regularly
• Prioritize remediation of listed vulnerabilities
• Implement multi-layered security measures

CISA Current Activity · 2026-02-20T05:42