Patch/Configuration Management

On January 14, six days before the public advisories for CVE-2026-24061 were released, Telnet sessions plummeted by 65% within an hour and 83% within two hours.

Apple patches exploited zero-day in open-source component across iOS, macOS, watchOS.

This flaw allowed attackers to trick users into clicking specially crafted Markdown links, leading to the execution of local or remote programs without triggering standard Windows security warnings.

FIRST forecasts 50K-plus CVEs in 2026 could strain security teams and planning.

Security Affairs reports that Microsoft has addressed six zero-day flaws that have been under attack as part of this month's Patch Tuesday release.

The malware was discovered through a Docker honeypot and is used for cryptojacking.

BleepingComputer reports that intrusions leveraging the critical SolarWinds Web Help Desk flaws, tracked as CVE-2025-40551 and CVE-2026-26399, to deliver legitimate tools for illicit activity have been launched as part of a campaign believed to have commenced in mid-January.

The vulnerability, an improper neutralization of special elements used in an SQL command, enables remote attackers to run malicious code without prior authentication.