InfoSecBulletin Cybersecurity for mankind
Microsoft’s January 2026 updates address 114 vulnerabilities, including critical remote code execution bugs in Office apps and Windows services like LSASS.
This Patch Tuesday fixes critical vulnerabilities that allow remote code execution and several privilege escalation problems that could let attackers take over systems.
Japan banking crisis
Outage causes disruption at 128 japan banks: preventing ATM transaction
By infosecbulletin
/ Saturday , November 7 2026
A major system failure has brought customer-facing banking services to a standstill at 128 shinkin banks across western Japan, leaving...
Read More
Daily Cyber security update for 06.11. 2026
By infosecbulletin
/ Friday , November 6 2026
Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
Cyber attack causes French bank Credit Mutuel Arkea €100 million missing
By infosecbulletin
/ Friday , November 6 2026
French lender Credit Mutuel Arkea said on Thursday hackers had stolen around €100 million ($112.61 million) in a cyber heist...
Read More
OpenAI AI Pipeline Discovers 948 Linux Kernel Privilege Escalation Flaws in 30 Hours
By infosecbulletin
/ Thursday , November 5 2026
OpenAI says that an automated system found and confirmed 948 different Linux kernel security issues in one run. These flaws...
Read More
Bangladeshi Researcher Rasel Earns First Apple CVE Recognition for Model I/O Flaw
By infosecbulletin
/ Thursday , November 5 2026
Apple credits Md Rasel Bhuyan and fellow researcher Musaab Khan for discovering an out-of-bounds write vulnerability affecting multiple Apple operating...
Read More
WinRAR, WordPress RCE flaw & Zyxel GS1900 Zero-Day exploited in the wild
By infosecbulletin
/ Wednesday , November 4 2026
A flaw in Zyxel GS1900 switches was being used by hackers, and the update to fix it did not work....
Read More
Daily Cyber security update for 04.11. 2026
By infosecbulletin
/ Wednesday , November 4 2026
Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
Daily Cyber security update for 03.11. 2026
By infosecbulletin
/ Tuesday , November 3 2026
Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
Using ARTEX AI, Hacker to attack 200 Organizations Across 14 Countries
By infosecbulletin
/ Tuesday , November 3 2026
Hackers used ARTEX, a free tool for testing security with AI, to attack over 200 organizations in 14 countries. The...
Read More
Amadeus cyber incident impacted “Cathay Pacific, Qantas, Japan, Malaysia, Korean & Asiana” Airlines
By infosecbulletin
/ Monday , November 2 2026
A cybersecurity incident with Spanish travel tech company Amadeus IT Group has worried the global airline industry. Hackers got into...
Read More
The number of bugs in each vulnerability category is listed below:
| Vulnerability Type | Count |
|---|---|
| Remote Code Execution | 22 |
| Denial of Service | 2 |
| Elevation of Privilege | 57 |
| Information Disclosure | 22 |
| Security Feature Bypass | 3 |
| Spoofing | 5 |
| Tampering | 3 |
| Total | 114 |
Zero-Day Vulnerabilities:
CVE-2026-20805 has high-severity flaws in Desktop Windows Manager that can expose information. CVE-2026-21265 relates to digital media handling that can lead to privilege escalation, often used in chained attacks. CVE-2023-31096 seems to be a backported or related fix included in cumulative updates.
| CVE ID | Component | Type | Severity | Key Notes |
|---|---|---|---|---|
| CVE-2026-20805 | Desktop Windows Manager | Information Disclosure | Important (High per Check Point) | Allows unauthorized access to sensitive data; patched January 13, 2026 ​ |
| CVE-2026-21265 | Windows Digital Media | Elevation of Privilege | Not specified | Enables local privilege escalation ​ |
| CVE-2023-31096 | Unknown (legacy) | Zero-day (contextual) | Not specified | Included in January 2026 updates despite earlier assignment |
Click here for the full list.
