Table of Contents
Weekly Summary: In the second week of February 2026, the global cyber threat landscape remained active as Microsoft released its February Patch Tuesday security updates, addressing 58 vulnerabilities including six actively exploited zero-days. A critical remote code execution (RCE) flaw CVE-2026-1731 affecting BeyondTrust remote access products was disclosed, prompting urgent patches. The Singapore government revealed details on nation-state attacks against local telecom providers. Additionally, exploitation of SolarWinds Web Help Desk vulnerabilities has been observed in the wild, urging rapid remediation across affected environments.
🔴 Critical Vulnerability Alerts
1. Microsoft February 2026 Patch Tuesday – Six Actively Exploited Zero-Days
- Severity: Critical / High
- Date: February 10, 2026
- Microsoft’s Patch Tuesday addressed 58 security flaws and fixed six zero-days that are actively exploited in the wild, including security feature bypass and remote code execution issues in Windows and Office.
- Affected components include Windows Shell, MSHTML, and Office document handling components – with exploitation in phishing and targeted attacks.
- Mitigation: Immediately apply the February 2026 security updates and prioritize critical systems.
2. BeyondTrust Remote Access Critical RCE (CVE-2026-1731)
- Severity: Critical (CVSS 9.9)
- Disclosure: February 13, 2026
- A critical pre-authenticated remote code execution vulnerability has been disclosed in BeyondTrust Remote Support (<= 25.3.1) and Privileged Remote Access (<= 24.3.4), allowing unauthenticated command execution on affected appliances. Urgent patching is recommended.
🌍 Global Threat Landscape
🇸🇬 Singapore Government Reveals Nation-State Telecom Breach
- The Singapore government disclosed findings from a probe into July 2025 attacks targeting multiple local telecom companies by a China-linked advanced persistent threat. The campaign affected several national carriers and highlighted the critical infrastructure threat exposure.
⚠️ SolarWinds Web Help Desk Exploitation
- Researchers reported exploitation of SolarWinds WHD vulnerabilities (e.g., CVE-2025-40551, CVE-2025-26399) in multi-stage intrusions. Intruders used compromised tools for persistence and lateral movement in victim environments.
🛠️ GitHub Trending Security Tools
API-Guardian
- Category: API Security / Fuzzing Tool
- An automated API fuzzing framework to identify unauthorized access paths and logic flaws across cloud native services.
Contain-Scope
- Category: Container Security / Escape Detection
- Detects misconfigurations and high-risk capabilities leading to potential container escape on Kubernetes and Docker workloads.
📊 Security Observations
- Active exploitation of zero-day vulnerabilities underscores the urgency of timely patch deployment across enterprise and cloud environments.
- High-risk RCE defects in remote access solutions highlight the necessity of layered defenses and access control hardening.
- APT attacks against critical telecom infrastructure emphasize the importance of threat intelligence and proactive defence strategies.
About Lingtian Lab
We are dedicated to providing the latest cybersecurity intelligence and automated solutions. Standing with you against the threats of the AI era.
Sources: US-CERT, The Hacker News, GitHub Trending (Security).