Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities
Published: 2026-01-23
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog due to evidence of active exploitation, including issues in PHP, Versa Concerto SD-WAN, Vite Vitejs, and another unlisted flaw.
2. Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate Firewalls
Published: 2026-01-23
Fortinet confirmed exploitation of a FortiCloud SSO authentication bypass vulnerability on fully patched firewalls, allowing unauthenticated access via crafted SAML messages for vulnerabilities originally fixed last month.
3. Phishing Attack Uses Stolen Credentials to Install LogMeIn RMM for Persistent Access
Published: 2026-01-23
Attackers used stolen credentials from fake Greenvelope invitation emails to deploy legitimate LogMeIn RMM software as a backdoor for persistent remote access on compromised hosts, bypassing security by weaponizing trusted IT tools.
4. Under Armour Looking Into Data Breach Affecting Customers’ Email Addresses
Published: 2026-01-23
Under Armour is investigating a data breach that involved the theft of customers’ email addresses and other personal information.
5. Infotainment, EV Charger Exploits Earn Hackers $1M at Pwn2Own Automotive 2026
Published: 2026-01-23
Participants at Pwn2Own Automotive 2026 disclosed 76 vulnerabilities across infotainment systems and EV chargers, earning hackers a total of $1M.
6. Swipe, Plug-in, Pwned: Researchers Find New Ways to Hack Vehicles
Published: 2026-01-23
Researchers have discovered new methods to hack vehicles, including vulnerabilities in infotainment systems demonstrated at Trend AI’s ZDI Pwn2Own event.
7. ShinyHunters Claim to Be Behind SSO-Account Data Theft Attacks
Published: 2026-01-23
The ShinyHunters extortion gang claims it is behind a wave of ongoing voice phishing attacks targeting single sign-on (SSO) accounts at Okta, Microsoft, and Google, enabling threat actors to breach corporate SaaS platforms and steal company data for extortion.
8. Ireland Plans Law Allowing Law Enforcement to Use Spyware
Published: 2026-01-23
Ireland is planning new legislation that would permit law enforcement agencies to utilize spyware in their operations.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your digital assets. Stay safe online!