MSP cybersecurity news digest, February 9, 2026

This bulletin reports multiple active and high-impact security incidents: Russian-linked actors exploiting a recently patched Microsoft Office zero-day in targeted phishing campaigns; public proof-of-concept and high-severity RCE/sandbox-escape vulnerabilities in n8n exposing automation servers; a Betterment breach exposing 1.4 million customer accounts; a state-linked “Shadow Campaigns” espionage operation spanning 155 countries with numerous compromises; and a ransomware attack that disrupted nationwide payment processing at BridgePay.