cybernewswire
New York, NY, 14th January 2026, CyberNewsWire
Austin, TX / USA, 14th January 2026, CyberNewsWire
Do Son PoC exploit code released for critical FortiSIEM flaw CVE-2025-64155 (CVSS 9.4). Unauthenticated RCE allows root access. Upgrade to v7.4.1 now.
HPE warns: Details of Aruba VIA root flaw (CVE-2025-37186) are public. Linux users exposed to LPE. No patch yet—apply the workaround now.
The Information reveals that Apple has secured total autonomy to fine-tune Google Gemini, ensuring Siri remains brand-loyal and private in 2026.
Anthropic launches Claude Cowork, a desktop agent that can autonomously organize files, extract data, and navigate the web directly on your Mac.
Meta cuts 1,000+ Reality Labs staff in January 2026, shifting focus from expensive VR headsets to AI-powered smart glasses and mobile wearables.
OpenAI acquires medical startup Torch for up to $100M to build a "Unified Medical Memory," ending data fragmentation within ChatGPT Health.
NVIDIA and Eli Lilly launch a $1B AI Co-Innovation Lab in 2026, using Vera Rubin chips and BioNeMo to automate and accelerate drug discovery.
Mark Zuckerberg unveils Meta Compute, a massive 2026 plan to build hundreds of gigawatts of AI infrastructure powered by landmark nuclear energy deals.
Urgent: Node.js patches CVE-2025-55131 (High Severity). "Dirty" memory flaw exposes secrets. Update to v20.20.0/v22.22.0 now to stop data leaks.
Urgent: Siemens Edge flaw CVE-2025-40805 (CVSS 10) allows remote account takeover. Update SIMATIC & IOT2050 devices immediately to secure ops.
SAP Jan 2026 update fixes 17 flaws, including S/4HANA SQL Injection (CVSS 9.9) & Wily RCE (CVSS 9.6). Patch now to prevent full system compromise.
Urgent: Fortinet fixes critical RCE in FortiSIEM (CVE-2025-64155) & FortiOS. CVSS 9.4 flaw allows unauthenticated attacks. Patch immediately.
New "cloud-first" malware VoidLink targets Linux & containers with advanced stealth. Written in Zig, it mimics Cobalt Strike to evade EDR. Check your cloud.
Chrome 144 fixes 10 vulnerabilities, including high-severity V8 flaw CVE-2026-0899. Update Windows, Mac & Linux immediately to secure your browser.
Critical OpenCode flaws (CVE-2026-22813) allow drive-by RCE via malicious sites. Update to v1.0.216 immediately to stop unauthorized command execution.
Microsoft Jan 2026 Patch Tuesday fixes 114 flaws, including 3 zero-days. CVE-2026-20805 is actively exploited. Update Windows & Office immediately.
New deVixor Android malware combines banking fraud with ransomware. Targeting Iranian users, it steals credentials and locks devices. Avoid APKs.
Critical Appsmith flaw CVE-2026-22794 (CVSS 9.7) allows account takeover via Host Header Injection. Update to v1.93 immediately to secure your data.
Elastic patches 7 high-severity flaws (CVSS 8.6) in Kibana & Elasticsearch. CVE-2026-0532 allows SSRF & file theft. Update to v8.19.10 now.