Microsoft's Friday the 13th: 6 zero-days patched just before the unluckiest day of the year

Jason's got nothing on Microsoft's February Patch Tuesday.

The lineup of horrors: If you haven't patched yet, this is your final warning. Unlike the movies, these exploits don't need a sequel — they're already in production. Check your patch management process, prioritize…

Full Patch Tuesday breakdown from BleepingComputer → https://www.bleepingcomputer.com/news/microsoft/microsoft-february-2026-patch-tuesday-fixes-6-zero-days-58-flaws/

Platform Spotlight: The wiki-centric compliance engine is here

Turning wiki pages into audit-ready documentation just got stupid simple.

• Wiki pages become control documentation — scope blocks, evidence blocks, and report blocks live right inside your wiki pages, all editable with a click
• Four ways to prove compliance — checkbox confirmation, wiki page links, external URLs, or file uploads. Combine them on a single evidence block
• Progressive refinement — start with "about 30 devices" and add structure when you have it. The system never blocks you from making progress

Get started → https://easycyberprotection.com/contact

Ransomware surges 49% — and two-thirds of victims are SMEs

The ransomware business is booming, and SMEs are paying the price — literally.

Two-thirds of victims are SMEs with under 500 employees, confirming what we already suspected: small businesses are the new gold rush. Why? Weaker defenses, slower patching, and limited security teams make them…

Read the full BlackFog report → https://www.blackfog.com/the-state-of-ransomware-2026/

First malicious Outlook add-in found in the wild — 4,000 credentials stolen

Someone finally weaponized the Outlook add-in ecosystem.

The attack vector is clever and worrying: attackers didn't need to compromise Microsoft or bypass security controls. They just waited for a domain to expire, registered it, and inherited the trust relationship with…

University of Hawaii Cancer Center hit by ransomware — research data exposed

Ransomware just disrupted cancer research, and the damage goes beyond data.

Healthcare and research institutions remain high-value targets because they combine sensitive data with operational urgency. Attackers know hospitals and universities can't afford extended downtime, making them more…