Category: Cyber Security News

Microsoft says some Windows 365 customers are unable to download and install Office because a recent service update introduced a configuration change that caused the issue. The company is working on a fix and says affected users can temporarily install Microsoft Office manually from the Microsoft 365 page. #Microsoft #Windows365 #Office

Anthropic’s Mythos model and AWS Threat Intelligence’s FortiGate campaign show that AI-powered attacks are now operating at machine speed, exposing the limits of traditional defense timelines. The article argues that security teams must move from basic visibility and protection to continuous, evidence-based validation with BAS and autonomous pentesting. #Anthropic #Mythos #AWSThreatIntelligence #FortiGate #CISAKEV #VulnCheckKEV

Foxconn said some of its North American factories are resuming normal operations after a cyberattack, while the Nitrogen ransomware group claimed it stole 8 TB of data and more than 11 million documents. The leak allegations reportedly involve confidential materials tied to Foxconn customers including Apple, Intel, Google, Nvidia, and AMD, and the company has faced prior ransomware claims from LockBit and DoppelPaymer. #Foxconn #Nitrogen #LockBit #DoppelPaymer #Apple #Intel #Google #Nvidia #AMD

Microsoft patched CVE-2026-40361, a critical zero-click Outlook flaw that could enable remote code execution when a victim simply reads or previews an email. Researcher Haifei Li warned the bug could bypass enterprise defenses and compared its potential impact to the earlier BadWinmail issue, dubbing it a serious threat to executives and…

OpenLoop Health said hackers accessed its systems on January 7–8, 2026, stealing personal information belonging to 716,000 people, including names, addresses, email addresses, birth dates, and medical data. The telehealth provider said it contained the intrusion, launched an investigation, and offered affected individuals one year of identity and credit monitoring while…

The US House Committee on Homeland Security is seeking a briefing from Instructure after cyberattacks disrupted Canvas and exposed details about two intrusions tied to the ShinyHunters extortion group. Instructure says the incident has been contained, Free-For-Teacher accounts were temporarily shut down, and stolen data was recovered and erased from the…

Foxconn said its North American factories are returning to normal production after a cyberattack disrupted several facilities and triggered emergency response measures. The Nitrogen group claimed responsibility, saying it stole 8 terabytes of data, while Foxconn has also faced past attacks from LockBit and other ransomware gangs. #Foxconn #Nitrogen #LockBit #Conti…

The U.S. House Committee on Homeland Security is asking Instructure executives to testify after ShinyHunters carried out two attacks against the Canvas platform, stealing student data and disrupting schools during final exams. The incidents exposed sensitive education records and led to defaced login portals, exam cancellations, and concerns over Instructure’s incident response and data protection. #Instructure #Canvas #ShinyHunters

ThreatFabric has identified a new TrickMo Android banking trojan variant that uses The Open Network (TON) for stealthy command-and-control communications. The malware is actively targeting banking and cryptocurrency wallet users in France, Italy, and Austria while adding network pivoting features such as SSH tunnelling and SOCKS5 proxying. #TrickMo #ThreatFabric #TON…

RubyGems has temporarily disabled new account registrations after a major malicious attack involving hundreds of packages. The incident is still under investigation, with Mend.io promising more details once the situation is contained. #RubyGems #Mend.io #TeamPCP…

Microsoft patched 137 vulnerabilities across its enterprise products, including 13 critical flaws, but reported no actively exploited zero-days in this month’s Patch Tuesday release. Security researchers highlighted serious risks in CVE-2026-41096, CVE-2026-41089, and CVE-2026-42898, which could enable remote code execution and broad enterprise compromise. #Microsoft #Azure #Dynamics365 #CVE-2026-41096 #CVE-2026-41089 #CVE-2026-42898

International government agencies in the G7, including CISA, released guidance on what an AI software bill of materials should include to improve transparency and security. Experts welcomed the baseline for AI supply-chain visibility, while noting it should better address runtime and real-world implementation challenges. #CISA #G7 #AIBOM #SBOM

A rapidly spreading campaign dubbed “mini Shai-Hulud” compromised hundreds of open-source packages, including TanStack, UiPath, and MistralAI, by injecting credential-stealing code into trusted development tools. The attack bypassed two-factor authentication and valid provenance checks by abusing GitHub Actions and automated publishing pipelines, exposing AWS, Google Cloud, GitHub, Kubernetes, and Vault credentials at risk. #miniShaiHulud #TanStack #UiPath #MistralAI #TeamPCP #AnthropicClaude #GitHubActions

Fortinet has issued patches for two critical flaws, CVE-2026-44277 in FortiAuthenticator and CVE-2026-26083 in FortiSandbox, both of which could let unauthenticated attackers execute unauthorized commands or code. The company said FortiAuthenticator Cloud is not affected, while the updates come amid a history of Fortinet products being targeted in active exploitation and ransomware attacks. #FortiAuthenticator #FortiSandbox #Fortinet #CVE-2026-44277 #CVE-2026-26083