This month in safety with Tony Anscombe – February 2026 version

On this roundup, Tony appears at how opportunistic menace actors are profiting from weak authentication, unmanaged publicity, and fashionable AI instruments

28 Feb 2026

With the second month of 2026 (virtually) behind us, it is time for ESET Chief Safety Evangelist Tony Anscombe to take a look at cybersecurity tales that moved the needle and provided very important classes over the previous 4 weeks. This is Tony’s rundown of a few of what stood out in February 2026:

• Risk actors misused business generative AI instruments to compromise greater than 600 FortiGate units situated in 55 international locations. Somewhat than particular vulnerabilities, the assaults exploited uncovered administration ports and weak credentials with out two-factor authentication, in keeping with Amazon Risk Intelligence.
• Extra proof of unhealthy actors profiting from GenAI providers was offered by ESET researchers this week after they uncovered PromptSpy, the primary identified case of Android malware abusing generative AI for context-aware consumer interface manipulation.
• The FBI has warned ATM operators about a rise in malware-fueled jackpotting assaults in U.S. the place criminals trick money machines into spitting out massive quantities of money,
• The safety trade has additionally been busy digesting a report that Poland’s CERT printed on the very finish of January and that took a deep dive into latest cyberattacks at greater than 30 organizations working in important infrastructure sectors. ESET researchers analyzed a wiper and shared different technical particulars about an incident geared toward an vitality firm as a part of the assaults.

What are a number of the classes companies ought to take away from these incidents? Watch the video to study extra and make sure to take a look at the January 2026 version of Tony’s month-to-month safety information roundup for extra insights.