InfoSecBulletin Cybersecurity for mankind
Microsoft’s January 2026 updates address 114 vulnerabilities, including critical remote code execution bugs in Office apps and Windows services like LSASS.
This Patch Tuesday fixes critical vulnerabilities that allow remote code execution and several privilege escalation problems that could let attackers take over systems.
USA Bimbo Bakeries Confirms Data Stolen in Oracle EBS Zero-Day Attack
By infosecbulletin
/ Tuesday , September 8 2026
Bimbo Bakeries USA has confirmed that hackers stole employee data by exploiting a zero-day vulnerability in Oracle’s E-Business Suite (EBS). In...
Read More
ALERT
Roundcube Webmail fixes 12 security flaws, including zero-click XSS and SSRF bypass
By infosecbulletin
/ Monday , September 7 2026
Roundcube Webmail has given security updates for its 1.6 LTS and 1.7 branches. These updates fix 12 problems that could...
Read More
New HOOKEDGE Backdoor Deployed by Hackers in European Espionage
By infosecbulletin
/ Monday , September 7 2026
Russian-backed hacker group BlueDelta, also known as APT28, Fancy Bear, and Forest Blizzard, has used a small Windows backdoor called...
Read More
Hackers Exploiting MikroTik RouterOS Flaw Gaining Network Access
By infosecbulletin
/ Monday , September 7 2026
Attackers are misusing MikroTik routers through their Secure Shell (SSH) service, which can be accessed from the internet, to take...
Read More
CrowdStrike launches SafeMind, the first agentic cybersecurity solution for defenders
By infosecbulletin
/ Sunday , September 6 2026
CrowdStrike launched CrowdStrike SafeMind, a set of special security models and tools from the CrowdStrike Cyber Superintelligence Lab. The SafeMind...
Read More
Claude, DeepSeek, and Qwen AI agents combinedly used to hit gov.t across Asia
By infosecbulletin
/ Saturday , September 5 2026
Chinese-speaking hackers have added Claude, Qwen, and DeepSeek to their hacking system to automate cyberattacks on governments and other targets...
Read More
India: C-DOT Launches 14 Local Quantum-Safe Technologies
By infosecbulletin
/ Saturday , September 5 2026
India is making its communication systems safer and stronger by launching 14 local quantum products. These products were made by...
Read More
14,000 Dahua cameras compromised: TP-Link flaws enable RCE
By infosecbulletin
/ Saturday , September 5 2026
Over 14,000 Dahua security cameras connected to the internet have been hacked in a 35-day online attack that affected devices...
Read More
Microsoft Reveals Project Zenith Windows PCs Able to Run 30B+ AI Models Locally
By infosecbulletin
/ Saturday , September 5 2026
Microsoft has launched Project Zenith, a new Windows 11 experience for developers. It is made for powerful PCs that can...
Read More
Google issues warning of new Chrome zero-day flaw exploited
By infosecbulletin
/ Friday , September 4 2026
Google has updated the Chrome browser to fix a serious security issue in the V8 engine and 11 other flaws....
Read More
The number of bugs in each vulnerability category is listed below:
| Vulnerability Type | Count |
|---|---|
| Remote Code Execution | 22 |
| Denial of Service | 2 |
| Elevation of Privilege | 57 |
| Information Disclosure | 22 |
| Security Feature Bypass | 3 |
| Spoofing | 5 |
| Tampering | 3 |
| Total | 114 |
Zero-Day Vulnerabilities:
CVE-2026-20805 has high-severity flaws in Desktop Windows Manager that can expose information. CVE-2026-21265 relates to digital media handling that can lead to privilege escalation, often used in chained attacks. CVE-2023-31096 seems to be a backported or related fix included in cumulative updates.
| CVE ID | Component | Type | Severity | Key Notes |
|---|---|---|---|---|
| CVE-2026-20805 | Desktop Windows Manager | Information Disclosure | Important (High per Check Point) | Allows unauthorized access to sensitive data; patched January 13, 2026 ​ |
| CVE-2026-21265 | Windows Digital Media | Elevation of Privilege | Not specified | Enables local privilege escalation ​ |
| CVE-2023-31096 | Unknown (legacy) | Zero-day (contextual) | Not specified | Included in January 2026 updates despite earlier assignment |
Click here for the full list.
