Audits for AI systems that keep changing
28
Jan
2026

Audits for AI systems that keep changing

Security and risk teams often rely on documentation and audit artifacts that reflect how an AI system worked months ago….

Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected
28
Jan
2026

Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected

Ravie LakshmananJan 28, 2026Network Security / Zero-Day Fortinet has begun releasing security updates to address a critical flaw impacting FortiOS…

Critical Vulnerability in VM2 Sandbox Library for Node.js Let Attackers run Untrusted Code
28
Jan
2026

Critical Vulnerability in VM2 Sandbox Library for Node.js Let Attackers run Untrusted Code

A critical sandbox escape vulnerability has been identified in vm2. This widely used Node.js library provides sandbox isolation for executing…

Matt Kapko
28
Jan
2026

Cybercriminals and nation-state groups are exploiting a six-month old WinRAR defect

Google Threat Intelligence Group warned that a diverse and growing collection of attackers, including nation-state groups and financially motivated cybercriminals,…

GPT
28
Jan
2026

OpenAI’s ChatGPT ad costs are on par with live NFL broadcasts

OpenAI plans to begin rolling out ads on ChatGPT in the United States if you have a free or $8…

Fortinet starts patching exploited FortiCloud SSO zero-day (CVE-2026-24858)
28
Jan
2026

Fortinet starts patching exploited FortiCloud SSO zero-day (CVE-2026-24858)

Fortinet has begun releasing FortiOS versions that fix CVE-2026-24858, a critical zero-day vulnerability that allowed attackers to log into targeted…

Fortinet
28
Jan
2026

Fortinet blocks exploited FortiCloud SSO zero day until patch is ready

Fortinet has confirmed a new, actively exploited critical FortiCloud single sign-on (SSO) authentication bypass vulnerability, tracked as CVE-2026-24858, and says…

Chinese Mustang Panda hackers deploy infostealers via CoolClient backdoor
28
Jan
2026

Chinese Mustang Panda hackers deploy infostealers via CoolClient backdoor

The Chinese espionage threat group Mustang Panda has updated its CoolClient backdoor to a new variant that can steal login data…

NSW gov to make AI risk assessments less
28
Jan
2026

NSW gov to make AI risk assessments less “subjective”

The NSW government has updated its AI risk assessment framework, requiring departments and agencies to adhere to a more rigid…

Google troubled by EU move to help AI, search rivals access services
28
Jan
2026

Google troubled by EU move to help AI, search rivals access services

Google ​will be ⁠given guidance by European Union antitrust regulators on how to help online search rivals and artificial intelligence…

6000+ Vulnerable SmarterTools SmarterMail Servers Exposed to Actively Exploited RCE Vulnerability
28
Jan
2026

6000+ Vulnerable SmarterTools SmarterMail Servers Exposed to Actively Exploited RCE Vulnerability

Over 6,000 SmarterMail servers exposed on the internet are running vulnerable versions that are at risk of active remote code…

Meta Faces Legal Action Over Claims of Accessing All WhatsApp User Messages
27
Jan
2026

Meta Faces Legal Action Over Claims of Accessing All WhatsApp User Messages

A class-action lawsuit filed in San Francisco federal court accuses Meta Platforms of systematically misleading billions of WhatsApp users about…