InfoSecBulletin Cybersecurity for mankind

Fortinet has revealed a critical vulnerability affecting its products. The company issued a Public Advisory on January 27 after noticing initial attacks on January 23, when it disabled two malicious accounts exploiting the single sign-on feature in FortiOS. In December 2025, an advisory was issued about two previous SSO bypass …

Daily a lot of cyberattack happen around the world including ransomware, malware attack, data breaches, website defacement and so on. It’s our daily security digest to cover the latest happenings in the world. A Daily Security Update is a concise, regularly published summary of the latest developments in cybersecurity. Its …

Microsoft has issued emergency security updates to fix a critical zero-day vulnerability in Microsoft Office that has been actively exploited. The vulnerability, CVE-2026-21509, affects several Office versions: Microsoft Office 2016, 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise (the company’s cloud-based subscription service). “Reliance on untrusted inputs …