Microsoft's Friday the 13th: 6 zero-days patched just before the unluckiest day of the year

Jason's got nothing on Microsoft's February Patch Tuesday.

The lineup of horrors: If you haven't patched yet, this is your final warning. Unlike the movies, these exploits don't need a sequel — they're already in production. Check your patch management process, prioritize these six CVEs, and get your clients protected. The only acceptable body count this Friday is zero.

Full Patch Tuesday breakdown from BleepingComputer → https://www.bleepingcomputer.com/news/microsoft/microsoft-february-2026-patch-tuesday-fixes-6-zero-days-58-flaws/

Platform Spotlight: The wiki-centric compliance engine is here

Turning wiki pages into audit-ready documentation just got stupid simple.

• Wiki pages become control documentation — scope blocks, evidence blocks, and report blocks live right inside your wiki pages, all editable with a click
• Four ways to prove compliance — checkbox confirmation, wiki page links, external URLs, or file uploads. Combine them on a single evidence block
• Progressive refinement — start with "about 30 devices" and add structure when you have it. The system never blocks you from making progress
• Discussion threads everywhere — @mention teammates on any page, evidence block, or scope card. Keep audit trails without email chaos
• Version history with line-level diffs — see exactly what changed, when, and by whom. Compare any two versions side-by-side

Try it now → https://easycyberprotection.com/start

Ransomware surges 49% — and two-thirds of victims are SMEs

The ransomware business is booming, and SMEs are paying the price — literally.

Two-thirds of victims are SMEs with under 500 employees, confirming what we already suspected: small businesses are the new gold rush. Why? Weaker defenses, slower patching, and limited security teams make them low-hanging fruit for Ransomware-as-a-Service operators hunting fast payouts. Belgium alone has 130 victims listed on leak sites — a...

Read the full BlackFog report → https://www.blackfog.com/the-state-of-ransomware-2026/

First malicious Outlook add-in found in the wild — 4,000 credentials stolen

Someone finally weaponized the Outlook add-in ecosystem.

The attack vector is clever and worrying: attackers didn't need to compromise Microsoft or bypass security controls. They just waited for a domain to expire, registered it, and inherited the trust relationship with existing Outlook installations. Users saw a familiar add-in name, entered their credentials on what looked like a legitimate...

University of Hawaii Cancer Center hit by ransomware — research data exposed

Ransomware just disrupted cancer research, and the damage goes beyond data.

Healthcare and research institutions remain high-value targets because they combine sensitive data with operational urgency. Attackers know hospitals and universities can't afford extended downtime, making them more likely to pay ransoms. The Cancer Center breach shows the cascading impact: lost research time, exposed patient data, disrupted...