Weekly News - Fortinet starts patching exploited FortiCloud SSO zero-​day (CVE-​2026-​24858)

Microsoft reveals actively exploited Office zero-​day, p.​.​.​des emergency fix (CVE-​2026-​21509) - View in browser  Weekly cybersecurity news February 2, 2026 New research: How 1,800+ security pros really feel about AI Get data-backed insight into why AI alone isn't enough, and what teams need to modernize operations for 2026. Download Voice of Security 2026 now. Latest articles: Why prevention-first secrets security will define enterprise scale: Learnings from a leading telecom Microsoft sets new timeline for Sentinel transition to Defender portal Ex-Google engineer found guilty of stealing AI secrets EFF calls out major tech companies on encryption promises Apple's new privacy feature limits how precisely carriers track your location Security work keeps expanding, even with AI in the mix Security teams are carrying more tools with less confidence Wearable tech adoption continues as privacy worries grow New infosec products of the month: January 2026 Ivanti provides temporary patches for actively exploited EPMM zero-day (CVE-2026-1281) Google disrupts proxy network used by 550+ threat groups eScan AV users targeted with malicious updates France Travail fined €5 million for failing to protect job seeker data Conditional Access enforcement change coming to Microsoft Entra Google agrees to pay $135 million over Android data harvesting claims Samsung tackles shoulder surfing on Galaxy devices SolarWinds fixes critical Web Help Desk RCE vulnerabilities, upgrade ASAP! Open-source malware zeroes in on developer environments Hottest cybersecurity open-source tools of the month: January 2026 What motivates hackers and what makes them walk away A fake romance turns into an Android spyware infection OPNsense 26.1 brings updates to open-source firewall management WinRAR vulnerability still a go-to tool for hackers, Mandiant warns n8n adds Chat Hub to centralize AI access inside automation workflows French government abandons Zoom and Microsoft Teams over security concerns WhatsApp rolls out new security feature to protect users from sophisticated attacks Android just got smarter at stopping snatch-and-run phone thefts CERT UEFI Parser: Open-source tool exposes UEFI architecture to uncover vulnerabilities Grammarly and QuillBot are among widely used Chrome extensions facing serious privacy questions Audits for AI systems that keep changing Fortinet starts patching exploited FortiCloud SSO zero-day (CVE-2026-24858) Attackers use Windows App-V scripts to slip infostealer past enterprise defenses Microsoft brings AI-powered investigations to security teams AWS adds IPv6 support to IAM Identity Center through dual-stack endpoints Microsoft reveals actively exploited Office zero-day, provides emergency fix (CVE-2026-21509) When open science meets real-world cybersecurity Waiting for AI superintelligence? Don't hold your breath AI's appetite for data is testing enterprise guardrails Cybersecurity jobs available right now: January 27, 2026 Claude expands tool connections using MCP Apple updates AirTag with expanded range and improved findability EU opens new investigation into Grok on X Poland repels data-wiping malware attack on energy systems Google ties AI Search to Gmail and Photos, raising new privacy questions Microsoft Entra ID will auto-enable passkey profiles, synced passkeys Inside Microsoft's veteran-to-tech workforce pipeline Brakeman: Open-source vulnerability scanner for Ruby on Rails applications AWS releases updated PCI PIN compliance report for payment cryptography Videos: A practical take on cyber resilience for CISOs Incident response lessons learned the hard way Industry news: Arkose Titan Aims to make bot, scraping, and AI fraud economically unviable Virtue AI AgentSuite enables enterprises to test and secure AI agents Druva Threat Watch offers continuous threat monitoring of backup data N-able brings AI to endpoint, security, and recovery Tosi Platform delivers unified connectivity, visibility, and security for OT at scale Sumsub's AI Agent Verification binds automation to verified human identity cside VPN Detection enables control of VPN traffic to prevent fraud and legal exposure Dynatrace RUM delivers end-to-end visibility for cloud-native and AI-powered user experiences ImmuniWeb reports double-digit growth and platform advances Veracode's platform enhancements help prevent software supply chain attacks MIND DLP for Agentic AI protects sensitive data and controls AI access Rein Security launches to provide protection inside application production environments McAfee upgrades Scam Detector to spot QR code scams and suspicious messages Cloudbrink adds AI innovations to its platform to protect agents, apps, and data Fortinet expands FortiCNAPP with network, data, and runtime-aware risk prioritization Teleport's Agentic Identity Framework protects AI agents in production environments Yubico extends hardware passkey deployment options Volante's Multi-cloud Resiliency Service keeps payments running during cloud outages Pondurance RansomSnare blocks file encryption and data exfiltration Tenable One AI Exposure delivers unified visibility and governance across AI, cloud and SaaS NICE Actimize Insights Network combats fraudulent transfers HackerOne brings Agentic PTaaS to continuous, expert-validated pentesting NETSCOUT adds Wi-Fi 7 observability and real-time SSL certificate monitoring Zscaler expands AI security capabilities to deliver visibility, control, and governance Descope introduces dedicated identity infrastructure for AI agents and MCP ecosystems Logitech announces two Rally AI Cameras designed for large spaces Ivanti expands Neurons platform with agentic AI and autonomous endpoint management Upwind secures $250 million to expand runtime-first cloud security for AI workloads Booz Allen's Vellox Reverser accelerates malware analysis and threat intelligence Stellar Cyber expands Autonomous SOC capabilities with agentic AI Quantum computing firm IonQ acquires US semiconductor firm SkyWater for $1.8 billion Firewalla outlines a zero trust approach to fixing flat home networks Copyright © 2026 Help Net Security, All rights reserved. You are receiving Help Net Security daily security news because you opted in at our web site located on www.helpnetsecurity.com. Our mailing address is: Help Net Security Astus d.o.o. Kastav 51215 Croatia Add us to your address book No longer interested in receiving these emails? Unsubscribe Missed an issue? Access our past newsletters here: Archive