Return-Path: Delivered-To: alvarochf@traceseis.com Received: from cs510.bluehost.com by cs510.bluehost.com with LMTP id ADFZFlatlGnTzwMAWiBQxw (envelope-from ) for ; Tue, 17 Feb 2026 11:03:02 -0700 Return-path: Envelope-to: alvarochf@traceseis.com Delivery-date: Tue, 17 Feb 2026 11:03:02 -0700 Received: from see.rippling.com ([172.246.46.190]:29780) by cs510.bluehost.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1vsPPZ-000000016TQ-3In9 for alvarochf@traceseis.com; Tue, 17 Feb 2026 11:03:02 -0700 DKIM-Signature: a=rsa-sha256; bh=Q8w8IZDhI9q34+W6cBnbfsx737+6V0UiXkbikW6MIEA=; c=relaxed/relaxed; d=see.rippling.com; h=to:cc:from:reply-to:subject:date:mime-version:content-type:list-id:list-unsubscribe:x-csa-complaints:list-unsubscribe-post:message-id:sender:x-sib-id:x-mailin-client:x-mailin-campaign:feedback-id:bimi-selector; q=dns/txt; s=mail; t=1771351369; v=1; b=aoPL7j/S5tfibAP5njsNpvI5Fdt9S//7jPE52/pqpLvyDu53b0P7Ct+4P1lTMgL6UI/QxT8Q NHbDuliY4cs8pPykcYVLFhznq1DxC5zBiQqs0Mkv8fLBujYr+2A5oJCVPxLK/O+DTTuZEg28Mu3 /M36sGdiDZmY5Ru2qcA7dAC0= To: Subject: =?utf-8?q?=F0=9F=91=BE__Latest_zero-days_to_know_+_Run_IT_like_a_mastermi?= =?utf-8?q?nd_(i.e.,_with_an_eyepatch)?= Content-Type: multipart/alternative; boundary="-------?=_97982-5757259185742" Date: Tue, 17 Feb 2026 18:02:49 +0000 Feedback-ID: 172.246.46.190:6348494_3143:6348494:Sendinblue From: The IT Factor by Rippling List-Id: NjM0ODQ5NC0yNTgyODkzLTEyMzM= List-Unsubscribe: , List-Unsubscribe-Post: List-Unsubscribe=One-Click MIME-Version: 1.0 Message-Id: <202617021802.nbnizwr5aa0csjj@see.rippling.com> Reply-To: X-Csa-Complaints: csa-complaints@eco.de X-Mailer: Sendinblue X-Mailin-Campaign: 3143 X-Mailin-Client: 6348494 X-sib-id: -NtBjhtGQoGCAVZFJBb-m1ICsVyp8xBGVh7t2dFuwW95OgMM3rwwIQUJFCJdtWhl4O2IjnAzOsAQM5VLK1kLjP6ZPEkm6SG45O4pxN9lGA6PKdwczebWCBeRI2scnMVhkfmzbI9wi5vNwqxGiwk93Cx6u1Va5ZQL1ebLpQ3o_oDrXtUyRF3PL9X6062QO4vubvBtlG51fcIQI4ofM3L0vFK10Q0hDpvCiLQ-CPTY ---------?=_97982-5757259185742 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=UTF-8 **FEBRUARY=C2=A0 2026** **James Sorrenti** Editor Well hello again! Hope everyone stateside had a nice long weekend. =F0=9F=91=BE =C2=A0First up this week, we'll touch on some recent security = updates from Microsoft and Apple and why you'll want to make sure you're ge= tting those patches in prod. =F0=9F=A6=B9=C2=A0 Then I'll show you guys how Productiv runs IT like a mas= termind. (You'll see.) =F0=9F=8F=88=C2=A0 Finally, I just might pitch you on a bunch of fun virtua= l events we're running in the next few weeks.=C2=A0 Onward! =F0=9F=91=BE =C2=A0Patch 'Er Up: Latest Microsoft & Apple Zero-Days to Know ----------------------------------------------------------- If your team has been delaying this month's OS updates, you might want to m= ove those up in the queue.=C2=A0Last week,=C2=A0both Microsoft and Apple co= nfirmed that hackers are already using several newly discovered flaws -- of= ten referred to as CVEs, or **c**ommon **v**ulnerabilities and **e**xposure= s -- to target users. Microsoft=E2=80=99s=C2=A0[February 10 "Patch Tuesday"](https://support.micr= osoft.com/en-us/topic/february-10-2026-kb5077181-os-builds-26200-7840-and-2= 6100-7840-f0fa9e54-a22a-4a06-96b6-bf5b2aded506) addressed=C2=A0**59 vulnera= bilities**, but the headline is the=C2=A0**six zero-days**=C2=A0that were a= lready being actively exploited. -=20 **The "Silent" Entry (CVE-2026-21510 & CVE-2026-21513):** These are securit= y feature bypasses in the Windows Shell and MSHTML (the engine behind how W= indows renders web content). Attackers are using malicious links or shortcu= t files to trick Windows into skipping those "Are you sure you want to open= this?" warnings. -=20 **The Word Trap (CVE-2026-21514):** A flaw in Microsoft Word allows special= ly crafted documents to bypass OLE (Object Linking and Embedding) security.= Essentially, it lets a document run malicious code that would normally be = blocked by Office's built-in defenses. -=20 **Privilege Escalation (CVE-2026-21533):** A critical flaw in=C2=A0**Remote= Desktop Services (RDS)**. If an attacker has a foothold on your network, t= his allows them to jump from a restricted user to a "SYSTEM" administrator,= giving them total control over the server. Apple released=C2=A0**iOS 26.3**=C2=A0and=C2=A0**macOS Tahoe 26.3**=C2=A0on= =C2=A0[February 11](https://support.apple.com/en-us/126346) to fix a zero-d= ay tracked as=C2=A0**CVE-2026-20700**. -=20 **The "Sophisticated" Attack:** Apple's advisory specifically noted that th= is flaw was used in an "extremely sophisticated attack against specific tar= geted individuals." -=20 **The Technicals:** The bug lives in=C2=A0**dyld** (the Dynamic Link Editor= ), a component that has been part of Apple=E2=80=99s OS for over a decade. = It handles how applications load libraries into memory. By exploiting this,= attackers can bypass the "sandbox" (the digital cage that keeps apps from = touching your private data) and execute arbitrary code. -=20 **The Zero-Click Path:** Security researchers found that when combined with= previously known WebKit flaws, this could be used in "one-click" attacks w= here simply visiting a website could compromise the entire device.=C2=A0 For a small team, the risk isn't just a targeted state-sponsored attack. Th= e danger is "exploit industrialization." Once these zero-days are public kn= owledge, automated botnets start scanning for unpatched systems. So... what can you do about it? Here's your checklist. 1.=20 **For Windows devices:** Force a check for updates to ensure the February 1= 0 cumulative update is installed. 2.=20 **For Apple devices:** Ensure all iPhones and Macs are on version 26.3 (or = the latest security-only release for older OS versions like macOS Sonoma/Se= quoia). 3.=20 **For all your users, regardless of their OS:** Remind staff that "safe" lo= oking files -- like=C2=A0.LNK shortcuts or Word docs -- are actively being = used to bypass security prompts. We sat down with Edgar Saucedo, Head of IT at Notion, for a good old-fashio= ned career chat.=C2=A0 We asked him where he got his start, how he's approached increasing levels = of leadership at companies like Google, Facebook, Dropbox, and now Notion, = and how he suggests IT pros should both prepare and relax a little about th= e impact of AI.=C2=A0 We'll cover all that and more, so come on down.=C2=A0[**Reg**](https://ripp= ling.registration.goldcast.io/webinar/ad19e666-4a69-4ada-8355-5402843fdcb6?= rtlid=3D00QUd00000QcSfRMAV)[**ister he****re**](https://rippling.registrati= on.goldcast.io/webinar/ad19e666-4a69-4ada-8355-5402843fdcb6?rtlid=3D00QUd00= 000QcSfRMAV)[**!**](https://rippling.registration.goldcast.io/webinar/ad19e= 666-4a69-4ada-8355-5402843fdcb6?rtlid=3D00QUd00000QcSfRMAV) The more I look at the lineup this week, I realize we have two themes for t= his week's newsletter. We've got IT career advice, which we'll get back to = in a second, and we've got patches: those of the security and the eye varie= ty. Our legal team did ask us if our customer (that's Josh there, on the left) = agreed to do this case study interview voluntarily. To which we replied, of= course he did! But the eyepatch was a hardship. That I can tell you. There's a serious version of the case study, which you can [**read/watch he= re**](https://www.rippling.com/customers/productiv?rtlid=3D00QUd00000QcSfRM= AV). There's a ton of great stuff in there about how Productiv has been abl= e to use Rippling to get to true zero-touch deployment.=C2=A0 [**But there's also this!**](https://www.linkedin.com/posts/jsorrenti_run-i= t-like-a-mastermind-activity-7427734085147586560-PW66?utm_source=3Dshare&ut= m_medium=3Dmember_desktop&rcm=3DACoAAAy10FMB_fnpZ6jgjEucIqFmQvmlyExKGkw) Wh= ich is decidedly less serious, but a lot of fun. Choose your own adventure.= (And follow me on LinkedIn for further frivolity.) Next week, I'm bringing a panel -- a roundtable? -- of IT pros together to = talk about something that's probably on a lot of your minds lately too: how= AI, and automation more broadly, is affecting the state of our field.=C2= =A0 We'll cover all kinds of stuff, from the shifts in technology to the result= ing shifts in the job market, and how we're all thinking about where things= go from here. Come join us. Let's talk it out. [**Register h**](https://rippling.registration.goldcast.io/webinar/c24aa92f= -d2ca-4f61-85b7-0166322ed595?rtlid=3D00QUd00000QcSfRMAV)[**e****re**](https= ://rippling.registration.goldcast.io/webinar/c24aa92f-d2ca-4f61-85b7-016632= 2ed595?rtlid=3D00QUd00000QcSfRMAV)[**!**](https://rippling.registration.gol= dcast.io/webinar/c24aa92f-d2ca-4f61-85b7-0166322ed595) **Some light reading** ---------------------- =E2=9C=85=C2=A0**Read:=C2=A0**20 IT management certifications for IT leader= s ([CIO](https://www.cio.com/article/221721/10-it-management-certifications= -for-it-leaders.html)) =E2=9C=85=C2=A0**Read:=C2=A0**After all the hype, some AI experts don=E2=80= =99t think OpenClaw is all that exciting ([T](https://techcrunch.com/2026/0= 2/16/after-all-the-hype-some-ai-experts-dont-think-openclaw-is-all-that-exc= iting/)[echCrunch](https://techcrunch.com/2026/02/16/after-all-the-hype-som= e-ai-experts-dont-think-openclaw-is-all-that-exciting/)) =E2=9C=85=C2=A0**Read:=C2=A0**Demand for tech talent remains high as skills= gaps widen ([CIO Dive](https://www.ciodive.com/news/demand-tech-talent-rob= ert-half-IT/812261/)) =E2=9C=85=C2=A0**Read**:=C2=A0Even ransomware actors tire of complicated en= cryption ([IT Brew](https://www.itbrew.com/stories/2026/02/13/even-ransomwa= re-actors-tire-of-complicated-encryption)) =E2=9C=85=C2=A0**Read**: Have money, will travel: a16z's hunt for the next = European unicorn ([TechCrunch](https://techcrunch.com/2026/02/16/have-money= -will-travel-a16zs-hunt-for-the-next-european-unicorn/)) Also! We're up for Best Customer Impact in this year's Cybersecurity Commun= ity Awards from Expert Insights.=C2=A0 So... if you happen to think we deserve it, and we certainly hope that you = do, you can vote for us [**right here**](https://expertinsights.typeform.co= m/Communityvote26?typeform-source=3Dexpertinsights.com). Takes 10 seconds f= lat. Thanks everybody! We're going back on the road, people! And we'd love to see you there, start= ing with the first of three Rippling on the Road stops in the Windy City.= =C2=A0 You can register above, below,=C2=A0[**right here**](https://events.ripplin= g.com/2026ripplingontheroadchicago?rtlid=3D00QUd00000QcSfRMAV). Dealer's ch= oice.=C2=A0See you there! **Details:** =F0=9F=93=8D**=C2=A0****Convene Willis Tower**,=C2=A0233 S Wacker Drive, Ch= icago, IL =F0=9F=93=85 March 11 - 12, 2026 | 9:30 a.m. =E2=80=93 6:00 p.m. =F0=9F=8E=9F=EF=B8=8F Use code=C2=A0***THEROAD26*** to register for free ($= 199 value) Can't make it to Chicago? We're coming to 2 other cities this year! Check o= ut our full schedule here. =C2=A0 [ **View schedule**](https://www.rippling.com/ontheroad?rtlid=3D00QUd00000Q= cSfRMAV "Save my seat") Can't join in person? Tune in for our keynote livestream [***here***](https= ://rippling.registration.goldcast.io/webinar/d5d5a35e-a559-40d5-a1ca-9ff22e= 42480b?rtlid=3D00QUd00000QcSfRMAV). =C2=A0 Was this newsletter forwarded to you? [Subscribe here!](https://www.ripplin= g.com/the-it-factor?SubRef=3Dalvarochf@traceseis.com) [Service Terms](https://app.rippling.com/legal?rtlid=3D00QUd00000QcSfRMAV "= Service Terms")=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0[Privacy Policy](https:= //app.rippling.com/legal/privacy?rtlid=3D00QUd00000QcSfRMAV)[=C2=A0](https:= //app.rippling.com/privacy)=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0[Unsubscribe](htt= ps://www.rippling.com/06741456066933719627-22348?email-type=3Dnewsletter&Em= ail=3Dalvarochf@traceseis.com "Unsubscribe") 430 CALIFORNIA ST, SF, CA 94104 =C2=A0 =C2=A0 Rippling Insurance | CA: 0M36087 | NPN: 18578689 [override](https://r.see.rippling.com/mk/un/v2/sh/WCPxRrWByckThluAc3ZDUbPNC= iXKR1KI/KD3QAV6zrukD) ---------?=_97982-5757259185742 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=UTF-8 =F0=9F=91=BE Latest zero-days= to know + Run IT like a mastermind (i.e., with an eyepatch) =
3D"Rippling

FEBRUARY=C2=A0 2026
<= /a>
<= tr>=
=C2=AD

James Sorrent= i

Editor

Well hello again! Hope everyone stateside h= ad a nice long weekend.


=F0=9F=91=BE =C2=A0First up this week, we'll touch on some recent s= ecurity updates from Microsoft and Apple and why you'll want to make sure y= ou're getting those patches in prod.


<= /p>

=F0=9F=A6=B9=C2=A0 Then I'll show you guys how Productiv= runs IT like a mastermind. (You'll see.)


=F0=9F=8F=88=C2=A0= Finally, I just might pitch you on a bunch of fun virtual events we're run= ning in the next few weeks.=C2=A0

Onward!
=C2=AD
=C2=AD
<= table cellspacing=3D"0" cellpadding=3D"0" border=3D"0" role=3D"presentation= " width=3D"100%" align=3D"left" class=3D"r8-o" style=3D"border-collapse: se= parate; border-radius: 0px; table-layout: fixed; width: 100%;">

=F0=9F=91=BE =C2=A0Patch 'Er Up: Latest Micro= soft & Apple Zero-Days to Know

If your team has been delaying this month's= OS updates, you might want to move those up in the queue.= =C2=A0Last week,=C2=A0both Microsoft and Apple confirmed that hackers are already using several = newly discovered flaws -- often referred to as CVEs, or co= mmon vulnerabilities and exposures -- to = target users.


Microsoft=E2= =80=99s=C2=A0February 10 "Patch T= uesday" addressed=C2=A059 vulnerabilities, but the headline is the=C2= =A0six zero-days=C2=A0that were already being actively exploite= d.


  • The "Silent" Entry= (CVE-2026-21510 & CVE-2026-21513): These are security feature b= ypasses in the Windows Shell and MSHTML (the engine behind how Windows rend= ers web content). Attackers are using malicious links or shortcut files to = trick Windows into skipping those "Are you sure you want to open this?" war= nings.


  • The Word Trap (CVE-2026-21514): A flaw in Microsoft = Word allows specially crafted documents to bypass OLE (Object Linking and E= mbedding) security. Essentially, it lets a document run malicious code that= would normally be blocked by Office's built-in defenses.


  • Privilege Esca= lation (CVE-2026-21533): A critical flaw in=C2=A0Remot= e Desktop Services (RDS). If an attacker has a foothold on your = network, this allows them to jump from a restricted user to a "SYSTEM" admi= nistrator, giving them total control over the server.


Apple released=C2=A0<= span style=3D"font-family: basel, arial; color: rgb(24, 24, 24); font-size:= 15px;">iOS 26.3= =C2=A0and=C2=A0macOS Tahoe 26.3=C2=A0on=C2=A0February 11 to fix a zero-day tracked as=C2=A0CVE-2026-20700.


  • The "So= phisticated" Attack: Apple's advisory specifically noted that th= is flaw was used in an "extremely sophisticated attack against specific tar= geted individuals."


  • <= b data-path-to-node=3D"11,1,0" data-index-in-node=3D"0">The Technicals: The bug lives in=C2=A0dyld (the Dynamic Link Editor), a component that has been part of Appl= e=E2=80=99s OS for over a decade. It handles how applications load librarie= s into memory. By exploiting this, attackers can bypass the "sandbox" (the = digital cage that keeps apps from touching your private data) and execute a= rbitrary code.


  • The Zero-Click Path: Security researchers found that when co= mbined with previously known WebKit flaws, this could be used in "one-click= " attacks where simply visiting a website could compromise the entire devic= e.=C2=A0

For a small team, the risk isn't just a targ= eted state-sponsored attack. The danger is "exploit industrialization." Onc= e these zero-days are public knowledge, automated botnets start scanning fo= r unpatched systems.

So... what can you do about it? Her= e's your checklist.

  1. For Windows devices: Force a check for updates to ensure the February 10 cumulative update= is installed.


  2. For Apple devices: Ensure all iPhones and Macs are on versio= n 26.3 (or the latest security-only release for older OS versions like macO= S Sonoma/Sequoia).


  3. For all your users, = regardless of their OS: Remind staff that "safe" looking files -- like= =C2=A0.LNK shortcuts or Word docs -- are actively being used to bypass security pr= ompts.

We sat down with Edgar Saucedo, Head of = IT at Notion, for a good old-fashioned career chat.=C2=A0


W= e asked him where he got his start, how he's approached increasing levels o= f leadership at companies like Google, Facebook, Dropbox, and now Notion, a= nd how he suggests IT pros should both prepare and relax a little about the= impact of AI.=C2=A0


=

We'll cover all that and more, so come= on down.=C2=A0Register here!
=
=C2=AD
<= /table>
=C2=AD
<= /tr>
=

The more I look at the lineup this week, I realize we have two= themes for this week's newsletter. We've got IT career advice, which we'll= get back to in a second, and we've got patches: those of the security and = the eye variety.

Our legal team did ask us if our customer (that's J= osh there, on the left) agreed to do this case study interview voluntarily.= To which we replied, of course he did! But the eyepatch was a hardship. Th= at I can tell you.


<= /p>

There's a serious version of the case = study, which you can read/watch here. There's a ton of great stuff in = there about how Productiv has been able to use Rippling to get to true zero= -touch deployment.=C2=A0


But there's also this! Which is decidedly les= s serious, but a lot of fun. Choose your own adventure. (And follow me on L= inkedIn for further frivolity.)
=C2=AD
<= /td>
=C2=AD
=

Next week, I'm bringing a panel -- a roundtable= ? -- of IT pros together to talk about something that's probably on a lot o= f your minds lately too: how AI, and automation more broadly, is affecting = the state of our field.=C2=A0

We'll cover all kinds of stuff, from t= he shifts in technology to the resulting shifts in the job market, and how = we're all thinking about where things go from here. Come join us. Let's tal= k it out.


= Register here!
=C2= =AD
=
=C2=AD
=

Some light r= eading

=E2=9C=85= =C2=A0Read:=C2=A0= 20 IT management certifications for IT leaders (CIO)


=E2=9C=85=C2=A0Read:=C2=A0After all the hype, some AI experts don=E2=80=99t think OpenClaw is al= l that exciting (TechCrunch)


=E2=9C=85=C2=A0<= strong>Read:=C2=A0Demand for tech talent remains high as skills gap= s widen (CIO Dive)


=E2=9C=85=C2=A0Read:=C2=A0Even ransomware actors tire of complicated encryption (IT Brew)

=E2=9C=85=C2=A0Read= : Have money, will travel: a16z's hunt for the next European unicorn (TechCrunch)

=
=
=C2=AD
=C2=AD

Also! We're up for Best Customer Imp= act in this year's Cybersecurity Community Awards from Expert Insights.=C2= =A0


So... if you h= appen to think we deserve it, and we certainly hope that you do, you can vo= te for us ri= ght here. Takes 10 seconds flat. Thanks everybody!<= /p>
=
=
<= table width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" border=3D"0" role= =3D"presentation">

We're going back on the road, p= eople! And we'd love to see you there, starting with the first of three Rip= pling on the Road stops in the Windy City.=C2=A0

You can register ab= ove, below,=C2=A0right here= . Dealer's choice.=C2=A0See you there!


= Details:
=F0= =9F=93=8D=C2=A0Convene Willis Tower,=C2= =A0233 S Wacker Drive, Chicago, IL

=F0=9F=93=85 March 11 - 12, 2026 | 9:30 a.m. =E2=80=93 6= :00 p.m.
=F0=9F=8E=9F=EF=B8=8F Use code=C2=A0= THEROAD26 to register for free ($199 value)
=
<= td class=3D"r56-c nl2go-default-textstyle" align=3D"left" style=3D"word-bre= ak: break-word; color: #181818; font-family: Basel, arial; font-size: 15px;= line-height: 1.5; text-align: left; valign: top;">

Can't make it to Chicago? We're coming to 2 other cities thi= s year! Check out our full schedule here.

=C2=A0

View schedule
<= a href=3D"https://r.see.rippling.com/mk/cl/f/sh/28xHLtxYQ52E8YtLa27RTmPuhih= 5xb1Q4k/w1uLdCrZCLso" class=3D"r59-r default-button" target=3D"_blank" titl= e=3D"Save my seat" data-btn=3D"1" style=3D"font-style: normal; font-weight:= bold; line-height: 1.15; text-decoration: none; word-break: break-word; bo= rder-style: solid; word-wrap: break-word; display: block; -webkit-text-size= -adjust: none; background-color: #fdb71c; border-color: #fdb71c; border-rad= ius: 8px; border-width: 0px; color: #ffffff; font-family: Basel, arial; fon= t-size: 16px; height: 18px; mso-hide: all; padding-bottom: 12px; padding-le= ft: 0px; padding-right: 0px; padding-top: 12px; width: 170px;" sib_link_id= =3D"27" templating=3D"y"> View schedule
=
<= tr>

Can't join in person? Tune in for our k= eynote livestream here<= /em>.

=C2=A0=

<= /tr>

Was this newsletter forwarded to you? Subscribe here!

Service Terms= =C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0Privacy Policy=C2=A0= =C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0Unsubscribe
=
=
<= /table>
<= /table>

430 CALIFORNIA ST, SF, CA 94104

=C2=A0

=C2=A0

Rippling Insurance | CA: 0M36087 | NPN: 1= 8578689
---------?=_97982-5757259185742--