Monthly Security Bulletin – February 2026
Telelink Business Services’ latest Monthly Security Bulletin, powered by the Advanced Security Operations Center (ASOC), provides an overview of the rapidly evolving cyber threat landscape and highlights dozens of critical vulnerabilities, exploits, and attacks observed in January 2026.
Here are the highlights:
- Cisco warns of Identity Service Engine flaw with exploit code
- Texas court blocks Samsung from tracking TV viewing, then vacates order
- Cisco switches hit by reboot loops due to DNS client bug
- VMware ESXi zero-days likely exploited a year before disclosure
- Hackers target misconfigured proxies to access paid LLM services
- Microsoft may soon allow IT admins to uninstall Copilot
- BreachForums hacking forum database leaked, exposing 324,000 accounts
- Unveiling VoidLink – a stealthy, cloud-native Linux malware framework
- Convincing LinkedIn comment-reply tactic used in new phishing
- Microsoft Patch Tuesday for January 2026 — Snort rules and prominent vulnerabilities
- Microsoft January 2026 Patch Tuesday fixes 3 zero-days, 114 flaws
- New Windows updates replace expiring Secure Boot certificates
- Microsoft: Windows update blocks access to Cloud PC sessions
- Reprompt attack hijacked Microsoft Copilot sessions for data theft
- Microsoft disrupts massive RedVDS cybercrime virtual desktop service
- Palo Alto Networks warns of DoS bug letting hackers disable firewalls
- Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure stored XSS vulnerability
- Reports about cyberattacks against Cisco Secure Email Gateway and Cisco Secure Email and Web Manager
- Microsoft: Some Windows PCs fail to shut down after January update
- Hackers now exploiting critical Fortinet FortiSIEM flaw in attacks
- StealC hackers hacked as researchers hijack malware control panels
- Malicious GhostPoster browser extensions found with 840,000 installs
- Credential-stealing Chrome extensions target enterprise HR platforms
- New PDFSider Windows malware deployed on Fortune 100 firm’s network
- Fake ad blocker extension crashes the browser for ClickFix attacks
- VoidLink cloud malware shows clear signs of being AI-generated
- Tesla hacked, 37 zero-days demoed at Pwn2Own Automotive 2026
- GitLab warns of high-severity 2FA bypass and denial-of-service flaws
- Fake LastPass emails pose as password vault backup alerts
- New Android malware uses AI to click on hidden browser ads
- Hackers breach Fortinet FortiGate devices, steal firewall configs
- SmarterMail auth bypass flaw now exploited to hijack admin accounts
- Okta SSO accounts targeted in vishing-based data theft attacks
- Microsoft releases emergency update to fix Outlook freezes
- CISA says critical VMware RCE flaw now actively exploited
- New ClickFix attacks abuse Windows App-V scripts to push malware
- New malware service guarantees phishing extensions on Chrome web store
- WinRAR path traversal flaw still exploited by numerous hackers
- Windows 11 KB5074105 update fixes boot, sign-in, and activation issues
Read the full report:
