InfoSecBulletin Cybersecurity for mankind
Microsoft’s January 2026 updates address 114 vulnerabilities, including critical remote code execution bugs in Office apps and Windows services like LSASS.
This Patch Tuesday fixes critical vulnerabilities that allow remote code execution and several privilege escalation problems that could let attackers take over systems.
NVIDIA BlueField Flaw Enables Code Execution Attacks
By infosecbulletin
/ Thursday , July 30 2026
NVIDIA has revealed a big flaw with its BlueField DPUs and ConnectX networking systems. This issue could let attackers run...
Read More
Massive customer data from India’s Bank of Baroda surfaced online
By infosecbulletin
/ Wednesday , July 29 2026
India's leading state-owned lender Bank of Baroda acknowledged Monday a security incident after reports that approximately 1 terabyte of customer...
Read More
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
By infosecbulletin
/ Tuesday , July 28 2026
CISA has put the Fortinet FortiOS vulnerability CVE-2025-68686 in its list of known exploited flaws after ongoing attacks. The flaw...
Read More
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
By infosecbulletin
/ Tuesday , July 28 2026
OpenAI's CEO Sam Altman says that AI has reached a big milestone. The technology can now make itself better, leading...
Read More
Shinyhunters claimed and set deadline to publish E&Y data
By infosecbulletin
/ Tuesday , July 28 2026
ShinyHunters has publicly claimed responsibility for the Ernst & Young (EY) data breach. The group posted a message on their...
Read More
Microsoft, NVIDIA and CrowdStrike Initiate Alliance for Open-Source AI Security
By infosecbulletin
/ Monday , July 27 2026
Nvidia and over 30 tech firms started a group on Monday to create open-source AI tools for protecting against cyber...
Read More
Google Search Results Reportedly Show Claude AI Shared Chats
By infosecbulletin
/ Monday , July 27 2026
Claude's share links from Anthropic showed up in public search results. This raised new privacy worries for users who shared...
Read More
“PentesterFlow” AI Automation Tool for Penetration Testers and Bug Hunters
By infosecbulletin
/ Sunday , July 26 2026
PentesterFlow is a new open-source AI tool for command lines. It is made for penetration testers and bug bounty hunters....
Read More
Jailbreak works against AI Models GPT-5.6, Claude Opus 5, and Fable, Claims Researcher
By infosecbulletin
/ Sunday , July 26 2026
A famous AI red team expert claimed developing a universal jailbreak that can work against top large language models, like...
Read More
Researchers found security flaws in every script generated by ChatGPT, Copilot, and Gemini
By infosecbulletin
/ Saturday , July 25 2026
A new study from Beacom College shows that all automation scripts produced by top AI models like ChatGPT, Microsoft Copilot,...
Read More
The number of bugs in each vulnerability category is listed below:
| Vulnerability Type | Count |
|---|---|
| Remote Code Execution | 22 |
| Denial of Service | 2 |
| Elevation of Privilege | 57 |
| Information Disclosure | 22 |
| Security Feature Bypass | 3 |
| Spoofing | 5 |
| Tampering | 3 |
| Total | 114 |
Zero-Day Vulnerabilities:
CVE-2026-20805 has high-severity flaws in Desktop Windows Manager that can expose information. CVE-2026-21265 relates to digital media handling that can lead to privilege escalation, often used in chained attacks. CVE-2023-31096 seems to be a backported or related fix included in cumulative updates.
| CVE ID | Component | Type | Severity | Key Notes |
|---|---|---|---|---|
| CVE-2026-20805 | Desktop Windows Manager | Information Disclosure | Important (High per Check Point) | Allows unauthorized access to sensitive data; patched January 13, 2026 ​ |
| CVE-2026-21265 | Windows Digital Media | Elevation of Privilege | Not specified | Enables local privilege escalation ​ |
| CVE-2023-31096 | Unknown (legacy) | Zero-day (contextual) | Not specified | Included in January 2026 updates despite earlier assignment |
Click here for the full list.
