CISA flags RoundCube and GitLab flaws as Gemini AI attacks rise

Security Affairs’ newsletter Round 564 by Pierluigi Paganini – INTERNATIONAL EDITION was published on 22 February 2026 and opens a new weekly round of security roundups sent to subscribers. The International edition highlights several items culled from the site’s latest reporting, including U.S. CISA adds RoundCube Webmail flaws to its Known Exploited Vulnerabilities catalog and U.S. CISA adds Dell RecoverPoint and GitLab flaws to its Known Exploited Vulnerabilities catalog.

Other features include PayPal discloses extended data leak linked to Loan App glitch, North Korean IT worker scam nets Ukrainian five-year sentence in the U.S., FBI warns of surge in ATM Jackpotting with $20 million lost in 2025, Red Card 2.0: INTERPOL busts scam networks across Africa, seizes millions, and PromptSpy abuses Gemini AI to gain persistent access on Android.

The digest also covers Germany’s national rail operator Deutsche Bahn being hit by a DDoS attack, and several other links such as CISA alerts on a critical auth bypass CVE-2026-1670 in Honeywell CCTVs and related articles.