March 2026 Patch Tuesday: what Security and IT teams should prioritise
March 2026 Patch Tuesday covers 86 approved patch records and 167 unique CVEs across Microsoft, Adobe and SAP.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
Burundi Has a Personal Data Protection Law. The Compliance Map Just Expanded.
Burundi's Law No. 1/03 creates a dedicated personal-data regime, regulator and enforcement framework for public and private processing.
VMware’s Support-Assisted Migration Could Open an RCE Window
CISA says attackers exploited a VMware command-injection flaw that became reachable during support-assisted migration. Two more CVEs share the bulletin.
China-Linked Hackers Hid Inside Dell’s Disaster-Recovery Appliances Since 2024
Suspected China-linked hackers exploited Dell RecoverPoint appliances for root access, covert persistence and a route into protected virtual machines.
Notepad++ Downloaded the Update. It Never Checked Who Made It.
Attackers exploited Notepad++ update verification failures to redirect users toward malicious installers while official repository files remained clean.
February 2026 Patch Tuesday: what Security and IT teams should prioritise
February 2026 Patch Tuesday covers 85 approved patch records and 131 unique CVEs across Microsoft, Adobe and SAP.
BeyondTrust Was Supposed to Provide Remote Support. Attackers Turned It Into a Remote Shell.
Attackers exploited a pre-authentication BeyondTrust flaw and deployed remote-access malware through infrastructure built to support privileged systems.
Reset the SmarterMail Admin Password, Then Take the Server
An anonymous SmarterMail endpoint let attackers reset a system administrator, then use built-in management functions to reach server control.
One FortiCloud Account Could Reach Someone Else’s Fortinet Device
Fortinet says attackers exploited a cloud SSO isolation flaw to enter other customers' devices, download configurations and add local administrators.
South Korea’s AI Basic Act Is Now Live
South Korea’s AI Basic Act entered into force on 22 January 2026, combining industrial promotion with obligations for high-impact and generative AI. Europe is not the only jurisdiction turning AI principles into law. South Korea’s Framework Act on the Development…