InfoSecBulletin Cybersecurity for mankind
Microsoft’s January 2026 updates address 114 vulnerabilities, including critical remote code execution bugs in Office apps and Windows services like LSASS.
This Patch Tuesday fixes critical vulnerabilities that allow remote code execution and several privilege escalation problems that could let attackers take over systems.
Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes
By infosecbulletin
/ Sunday , October 18 2026
Anthropic says a Claude research model showed how the National Security Agency made seeds for five NIST elliptic curves in...
Read More
Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In
By infosecbulletin
/ Saturday , October 17 2026
The Indian Computer Emergency Response Team (CERT-In), which is the government's cybersecurity arm, has issued a "critical" rated advisory after...
Read More
MITRE ATT&CK v20 Unveils 9 New Attack Techniques On AI Exploits, MFA Bypass, and CAPTCHA Evasion
By infosecbulletin
/ Friday , October 16 2026
MITRE released ATT&CK v20 adding nine Enterprise techniques that explain how attackers might target AI systems, steal app-specific passwords to...
Read More
Hackers Exploit Fortinet Flaws to Deploy Stealthy PEERSTITCH Malware on FortiGate Firewalls
By infosecbulletin
/ Friday , October 16 2026
Cybersecurity researchers at Palo Alto Networks’ Unit 42 have uncovered a sophisticated cyberattack targeting Fortinet network management infrastructure, involving the...
Read More
Hacker stole Meta GitHub repos; Stole Source Code
By infosecbulletin
/ Thursday , October 15 2026
Meta is informing about 1,500 people—mainly employers in the US, that their personal data was affected after hackers broke into...
Read More
Urgent patch! Zoom,NVIDIA and IBM Patch 41 Security flaws
By infosecbulletin
/ Wednesday , October 14 2026
Zoom released four security updates on October 13, 2026, all addressing serious problems. Two Zoom Workplace issues let users gain...
Read More
Microsoft patches record braking 1411 flaws; 2 zero days
By infosecbulletin
/ Wednesday , October 14 2026
Microsoft breaks its record to its patch history. The company patched record 1411 flaws and 3 zero day of its...
Read More
Anthropic unveils “OSS Scanner” Free AI Vulnerability Scanner for Open-Source Projects
By infosecbulletin
/ Saturday , October 10 2026
Anthropic unveiled OSS Scanner on Thursday as an opt-in vulnerability scanner designed to enhance security within the open-source ecosystem through...
Read More
Rise on RCE Exploits Targeting Hikvision Camera Flaw
By infosecbulletin
/ Friday , October 9 2026
There was a rise in scanning and remote code execution attempts on video surveillance devices in Ukraine from September 21...
Read More
FortiBleed Attack Compromised 80,000+ Devices, SonicWall Patches 4 SMA1000 Flaws CVSS 10
By infosecbulletin
/ Thursday , October 8 2026
The FBI and U.S. Secret Service released a joint warning about cybersecurity. The warning said that the FortiBleed campaign is...
Read More
The number of bugs in each vulnerability category is listed below:
| Vulnerability Type | Count |
|---|---|
| Remote Code Execution | 22 |
| Denial of Service | 2 |
| Elevation of Privilege | 57 |
| Information Disclosure | 22 |
| Security Feature Bypass | 3 |
| Spoofing | 5 |
| Tampering | 3 |
| Total | 114 |
Zero-Day Vulnerabilities:
CVE-2026-20805 has high-severity flaws in Desktop Windows Manager that can expose information. CVE-2026-21265 relates to digital media handling that can lead to privilege escalation, often used in chained attacks. CVE-2023-31096 seems to be a backported or related fix included in cumulative updates.
| CVE ID | Component | Type | Severity | Key Notes |
|---|---|---|---|---|
| CVE-2026-20805 | Desktop Windows Manager | Information Disclosure | Important (High per Check Point) | Allows unauthorized access to sensitive data; patched January 13, 2026 ​ |
| CVE-2026-21265 | Windows Digital Media | Elevation of Privilege | Not specified | Enables local privilege escalation ​ |
| CVE-2023-31096 | Unknown (legacy) | Zero-day (contextual) | Not specified | Included in January 2026 updates despite earlier assignment |
Click here for the full list.
