VulnHub

Arctic Wolf has reported a surge in automated attacks targeting Fortinet FortiGate devices, which has been ongoing since January 15, 2026. These attacks involve unauthorized changes to firewall configurations, with attackers creating generic accounts to maintain access, enabling VPN capabilities, and exfiltrating sensitive firewall data. This activity mirrors similar attacks identified in December 2025. Organizations using FortiGate firewalls should be vigilant, as these breaches can compromise network security and expose critical information. The situation emphasizes the need for enhanced security measures and monitoring to detect such unauthorized activities.

Atlassian, GitLab, and Zoom have recently released security patches addressing more than two dozen vulnerabilities, some of which are classified as critical or high-severity. These updates aim to protect users from potential attacks that could exploit these weaknesses. Affected products include popular collaboration tools and development platforms, which are widely used in various organizations. It's crucial for users of these applications to apply the patches promptly to safeguard their systems against possible exploitation. The vulnerabilities could allow unauthorized access or other malicious activities if not addressed, making timely updates essential for maintaining security.

Cisco has addressed a serious security flaw in its Unified Communications and Webex Calling platforms, identified as CVE-2026-20045. This vulnerability allows attackers to execute arbitrary commands remotely without authentication, posing a significant risk to users. The flaw has been actively exploited in the wild, which raises concerns for organizations relying on these communication tools. With a CVSS score of 8.2, it is classified as critical, emphasizing the urgency for users to apply the available patches. Companies utilizing Cisco's services should prioritize updating their systems to mitigate potential attacks.

Cisco has addressed a serious vulnerability in its Unified Communications and Webex Calling platforms, identified as CVE-2026-20045. This remote code execution flaw was found to be actively exploited by attackers, posing a significant risk to users. The vulnerability could allow unauthorized access to systems, potentially leading to data breaches or service disruptions. Organizations using these Cisco products are urged to apply the latest updates to mitigate the risk. This incident underscores the importance of timely patch management in maintaining cybersecurity hygiene.

A new type of Linux malware called VoidLink has emerged, specifically targeting cloud environments. What makes this malware stand out is that it has been primarily developed using artificial intelligence. Researchers are concerned about its sophistication and the potential risks it poses to organizations that rely on cloud services. The use of AI in its development could allow for more adaptive and dangerous attacks, making it critical for companies to bolster their security measures. As this malware evolves, it could lead to significant data breaches if not addressed promptly.

Anthropic has addressed several critical vulnerabilities found in their Git MCP server, identified by the AI security startup Cyata. The issues include a path validation bypass (CVE-2025-68145), an unrestricted git_init problem (CVE-2025-68143), and an argument injection vulnerability in git_diff (CVE-2025-68144). These vulnerabilities could potentially allow attackers to manipulate Git operations, which could compromise the integrity of code repositories. It is essential for users of the Git MCP server to apply the latest patches to ensure their systems are secure against these threats, as failure to do so may expose them to exploitation. Users are urged to stay informed about these vulnerabilities and take necessary actions to protect their environments.

TP-Link has addressed a serious vulnerability in its VIGI camera line, which was rated with a CVSS score of 8.7. This flaw allowed attackers on the same local network to bypass authentication during the password recovery process, potentially giving them unauthorized access to the cameras. Users of TP-Link VIGI cameras should be aware of this issue, as it could compromise the security of their surveillance systems. The company has released patches to fix this vulnerability, and it is crucial for users to apply these updates promptly to protect their devices from potential exploitation. Ensuring that all camera firmware is up-to-date is essential for maintaining security.

Zoom and GitLab have rolled out security updates to fix several vulnerabilities, including a critical flaw that could allow remote code execution (RCE) on Zoom Node Multimedia Routers (MMRs). This vulnerability, identified as CVE-2026-22844, poses a significant risk as it could enable an attacker to execute malicious code during a meeting. Additionally, the updates address issues related to denial-of-service (DoS) attacks and two-factor authentication (2FA) bypasses, which could compromise user accounts. Organizations using these platforms should prioritize applying the latest updates to safeguard their systems against potential exploitation. Keeping software up to date is crucial to maintaining security and protecting sensitive data.

The European Union has proposed a new cybersecurity law aimed at banning high-risk suppliers from providing equipment for sensitive infrastructure. Although no specific companies were named, this initiative empowers the European Commission to conduct risk assessments and impose restrictions or outright bans on certain technologies deemed insecure. This move is part of a broader effort to bolster the EU's cybersecurity framework and protect critical infrastructure from potential threats. The implications of this legislation could significantly impact suppliers and manufacturers of technology within the EU, as they may need to comply with stricter regulations to operate in the market. The proposal emphasizes the importance of ensuring that critical systems are safeguarded against vulnerabilities that could be exploited by malicious actors.

A recent study has uncovered that 64% of third-party applications are accessing sensitive user data without proper authorization. This alarming statistic raises concerns about data privacy and security, particularly for users who may unknowingly grant permissions to these applications. The research suggests that many apps do not have adequate safeguards in place to protect sensitive information, which could lead to unauthorized data exposure. This issue affects a wide range of applications across various platforms and industries, putting personal and organizational data at risk. Users and companies must be more vigilant about the permissions they grant to third-party apps to safeguard their sensitive information.

Security researchers successfully exploited Tesla's Infotainment System during the Pwn2Own Automotive 2026 competition, demonstrating 37 zero-day vulnerabilities on the first day. They earned a total of $516,500 for their exploits, which showcase significant flaws in the system. This incident raises concerns about the security of Tesla vehicles and the potential risks they pose to users. As more vehicles become connected, the implications of such vulnerabilities could extend beyond just infotainment systems, affecting critical vehicle functions and user safety. Companies like Tesla need to prioritize addressing these vulnerabilities to protect their customers and maintain trust in their technology.

MITRE has introduced the Embedded Systems Threat Matrix (ESTM), a new framework designed to enhance the security of critical embedded systems. This initiative aims to assist organizations in identifying and mitigating potential threats that target their embedded devices, which are increasingly integral to various industries, from automotive to healthcare. By providing a structured approach to understanding vulnerabilities and attack vectors, the ESTM seeks to bolster defenses against cyber threats that could compromise the functionality and safety of these systems. This development is particularly relevant as the reliance on embedded technology continues to grow, making it essential for companies to adopt better security practices. The framework is expected to serve as a valuable resource for organizations looking to strengthen their cybersecurity measures in this area.

In January 2026, Oracle released its first Critical Patch Update (CPU) of the year, addressing approximately 230 unique vulnerabilities across over 30 of its products. This update includes a total of 337 new security patches, which users are encouraged to apply to protect their systems. These vulnerabilities could potentially expose systems to various security risks, making it crucial for affected organizations to implement the patches promptly. The update reflects Oracle's ongoing commitment to security, as it aims to mitigate risks associated with its software products. Users and administrators should ensure they are running the latest versions to safeguard against potential exploitation.

The European Commission is pushing for new cybersecurity legislation aimed at enhancing the security of telecommunications networks. This proposal focuses on the removal of high-risk suppliers, particularly those linked to foreign nations, to protect against threats from state-sponsored actors and cybercriminal groups targeting critical infrastructure. The initiative comes in response to increasing concerns about security vulnerabilities in supply chains and the potential for attacks on essential services. By strengthening these regulations, the EU aims to create a safer digital environment for its member states and reduce reliance on potentially unsafe technology providers. The move is significant as it could reshape how telecommunications are managed across Europe, impacting various vendors and service providers.

Congressional appropriators are moving forward with legislation that aims to extend an information-sharing law designed to enhance cybersecurity collaboration between the government and private sector. The proposed legislation also allocates funds to the Cybersecurity and Infrastructure Security Agency (CISA), ensuring it can maintain adequate staffing levels. Additionally, it mandates funding for election security and continues a grant program for state and local governments to bolster their cyber defenses. This initiative is crucial as it aims to strengthen the country's overall cybersecurity posture, especially in light of ongoing threats to critical infrastructure and election systems. By securing funding and support for CISA, the legislation seeks to enhance response capabilities and resilience against cyber attacks.