February 2026 Security Briefing Highlights AI-Enabled Attacks and Supply-Chain Risks
Summary
Sysdig’s February 2026 briefing covers rapidly exploited vulnerabilities, a compromised Cline CLI update, AI-enabled attacks, and reported data exposures. It recommends stronger identity controls, token rotation, AI inventory, patching, and active detection.
Key points
- CVE-2026-1731 in BeyondTrust Remote Support was reportedly exploited soon after disclosure and later reclassified as a zero-day; the article says ransomware use was reported on February 20.
- Cline developers said a compromised token led to an unauthorized Cline CLI v2.3.0 update that installed OpenClaw on developer systems.
- Researchers reportedly found backdoors or credential stealers in 8–12% of audited ClawHub skills; a Vidar variant was reported to steal configuration files, tokens, and API keys from OpenClaw deployments.
- AWS reported that an AI-assisted campaign compromised more than 600 Fortinet FortiGate devices across 55 countries, exploiting exposed management ports and weak credentials.
- Sysdig TRT demonstrated an attack progressing from initial access to admin privileges in eight minutes, followed by data exfiltration and an LLMjacking attack.
- The French Ministry of Finance reported that privileged employee credentials were used to access a file listing bank accounts, potentially exposing records for up to 1.2 million accounts; the investigation was ongoing.
- The briefing recommends reducing exposure, improving identity hygiene, rotating tokens, inventorying AI agents, patching promptly, and using active detection.
Article Details
- Event Type
- February 2026 cybersecurity incidents and threat developments
- Impact
- Reported events included active exploitation of BeyondTrust CVE-2026-1731, followed by ransomware use; a compromised token that led to an unauthorized Cline CLI v2.3.0 update installing OpenClaw; and a reported Vidar variant exfiltrating configuration files, tokens, and API keys from an OpenClaw deployment. AWS reported that an AI-assisted campaign compromised more than 600 FortiGate devices across 55 countries. In France, stolen privileged credentials exposed data associated with up to 1.2 million bank accounts. A separate attack on part of the European Commission’s infrastructure was contained before staff names and phone numbers were exposed.
MITRE ATT&CK
T1078 · Valid AccountsA threat actor reportedly used a privileged employee’s credentials to access a file listing French bank accounts.T1190 · Exploit Public-Facing ApplicationThe article reports remote code execution through exploitation of vulnerabilities in BeyondTrust Remote Support and OpenClaw.T1195 · Supply Chain CompromiseA compromised token led to an unauthorized Cline CLI update that installed OpenClaw on developer systems.T1552 · Unsecured CredentialsA reported Vidar variant exfiltrated configuration files, tokens, and API keys from an OpenClaw deployment.
CVE
CVE-2026-1731BeyondTrust · Remote Support(RS) & Privileged Remote Access(PRA)compromises dominated February’s threat landscape, with rapid exploit weaponization (BeyondTrust CVE-2026-1731, OpenClaw CVE-2026-25253), credential and token theft (Vidar), and large-scale AI-enabled campaignsCVE-2026-25253OpenClaw · OpenClawFebruary’s threat landscape, with rapid exploit weaponization (BeyondTrust CVE-2026-1731, OpenClaw CVE-2026-25253), credential and token theft (Vidar), and large-scale AI-enabled campaigns against exposed management
Malware
Vendors
Amazon Web ServicesAWS reported an AI-planned campaign that compromised 600+ Fortinet FortiGate devices across 55 countries by exploiting exposed management ports and weak credentials.AnthropicAnthropic champions using AI for security: On February 20, Anthropic launched Claude Code Security in the hopes of promoting AI-powered vulnerability remediation.BeyondTrustand supply-chain compromises dominated February’s threat landscape, with rapid exploit weaponization (BeyondTrust CVE-2026-1731, OpenClaw CVE-2026-25253), credential and token theft (Vidar), and large-scale AI-enabledFortinetand token theft (Vidar), and large-scale AI-enabled campaigns against exposed management ports (Fortinet FortiGate).MicrosoftMicrosoft identified “AI Recommendation Poisoning,” where hidden instructions bias AI-generated summaries—threatening integrity of training and retrieval data.SysdigSysdig TRT demonstrated that AI can compress an attack kill chain to eight minutes from initial access to admin, including data exfiltration and an LLMjacking attack.
Products
BeyondTrust Remote SupportBeyondTrust Remote Support vulnerability CVE-2026-1731 was weaponized within hours of PoC release and reclassified as a zero-day with active exploitation and subsequent ransomware usage.Claude Code SecurityAnthropic champions using AI for security: On February 20, Anthropic launched Claude Code Security in the hopes of promoting AI-powered vulnerability remediation.ClawHubSupply chain and agent risks: a compromised token caused a malicious Cline CLI v2.3.0 update that installed OpenClaw, and 8–12% of audited ClawHub skills contained backdoors or credential stealers.Cline CLISupply chain and agent risks: a compromised token caused a malicious Cline CLI v2.3.0 update that installed OpenClaw, and 8–12% of audited ClawHub skills contained backdoors or credential stealers.Fortinet FortiGatetoken theft (Vidar), and large-scale AI-enabled campaigns against exposed management ports (Fortinet FortiGate).OpenClawdominated February’s threat landscape, with rapid exploit weaponization (BeyondTrust CVE-2026-1731, OpenClaw CVE-2026-25253), credential and token theft (Vidar), and large-scale AI-enabled campaigns against
Countries
FinlandAdditional EU-based organizations were also very likely impacted by the same campaign, such as the Dutch Data Protection Authority and Council for Judiciary, and an agency supporting Finland’s Ministry of Finance.FranceHigh-profile incidents include a rapid EU incident response that contained staff data exposure and a France breach where stolen privileged credentials exposed up to 1.2M bank-account records (FICOBA).