Microsoft's Friday the 13th: 6 zero-days patched just before the unluckiest day of the year

Jason's got nothing on Microsoft's February Patch Tuesday.

While the horror franchise scares with a hockey mask, Redmond delivered real terror on February 11 with six actively exploited zero-days — released just in time for Friday the 13th.

Full Patch Tuesday breakdown from BleepingComputer → https://www.bleepingcomputer.com/news/microsoft/microsoft-february-2026-patch-tuesday-fixes-6-zero-days-58-flaws/

Platform Spotlight: The wiki-centric compliance engine is here

Turning wiki pages into audit-ready documentation just got stupid simple.

• Wiki pages become control documentation — scope blocks, evidence blocks, and report blocks live right inside your wiki pages, all editable with a click
• Four ways to prove compliance — checkbox confirmation, wiki page links, external URLs, or file uploads. Combine them on a single evidence block
• Progressive refinement — start with "about 30 devices" and add structure when you have it. The system never blocks you from making progress

Get started → https://easycyberprotection.com/contact/

Ransomware surges 49% — and two-thirds of victims are SMEs

The ransomware business is booming, and SMEs are paying the price — literally.

BlackFog's State of Ransomware 2026 report, released February 12, shows a 49% increase in attacks year-over-year.

Read the full BlackFog report → https://www.blackfog.com/the-state-of-ransomware-2026/

First malicious Outlook add-in found in the wild — 4,000 credentials stolen

Someone finally weaponized the Outlook add-in ecosystem.

Cybersecurity researchers discovered the first malicious Microsoft Outlook add-in deployed in the wild — a supply chain attack that hijacked an abandoned legitimate add-in by claiming its expired domain.

University of Hawaii Cancer Center hit by ransomware — research data exposed

Ransomware just disrupted cancer research, and the damage goes beyond data.

The University of Hawaii Cancer Center confirmed a ransomware attack that compromised research servers, encrypted files, and exposed sensitive data including documents containing Social Security numbers.