VMware’s Support-Assisted Migration Could Open an RCE Window
CISA says attackers exploited a VMware command-injection flaw that became reachable during support-assisted migration. Two more CVEs share the bulletin.
China-Linked Hackers Hid Inside Dell’s Disaster-Recovery Appliances Since 2024
Suspected China-linked hackers exploited Dell RecoverPoint appliances for root access, covert persistence and a route into protected virtual machines.
Notepad++ Downloaded the Update. It Never Checked Who Made It.
Attackers exploited Notepad++ update verification failures to redirect users toward malicious installers while official repository files remained clean.
February 2026 Patch Tuesday: what Security and IT teams should prioritise
February 2026 Patch Tuesday covers 85 approved patch records and 131 unique CVEs across Microsoft, Adobe and SAP.
BeyondTrust Was Supposed to Provide Remote Support. Attackers Turned It Into a Remote Shell.
Attackers exploited a pre-authentication BeyondTrust flaw and deployed remote-access malware through infrastructure built to support privileged systems.
Reset the SmarterMail Admin Password, Then Take the Server
An anonymous SmarterMail endpoint let attackers reset a system administrator, then use built-in management functions to reach server control.
One FortiCloud Account Could Reach Someone Else’s Fortinet Device
Fortinet says attackers exploited a cloud SSO isolation flaw to enter other customers' devices, download configurations and add local administrators.
South Korea’s AI Basic Act Is Now Live
South Korea’s AI Basic Act entered into force on 22 January 2026, combining industrial promotion with obligations for high-impact and generative AI. Europe is not the only jurisdiction turning AI principles into law. South Korea’s Framework Act on the Development…
January 2026 Patch Tuesday: what Security and IT teams should prioritise
January 2026 Patch Tuesday covers 63 approved patch records and 156 unique CVEs across Microsoft, Adobe and SAP.
Somalia’s Data Protection Act Now Has Operating Regulations
Somalia's 2026 regulations turn the 2023 Data Protection Act into a more operational regime for registration, supervision and breach response.
The EU Data Act Is a Cloud-Exit Law as Much as an IoT Law
The EU Data Act, effective from 12 September 2025, grants users rights to access and share data from connected products, aiming to enhance data portability and interoperability. It imposes new requirements on cloud service providers to facilitate easier switching and data extraction, fundamentally altering infrastructure and user access dynamics.
Uruguay Created a Legal Path for AI Regulatory Sandboxes
Uruguay's Decree 276/025 creates governed test environments and data spaces for innovative projects, including AI and data uses.