// LIVE

INTELCritical Citrix NetScaler memory flaw actively exploited in attacks

INTELTelnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach

INTELStorm Brews Over Critical, No-Click Telegram Flaw

INTELFTC Action Against Match and OkCupid for Deceiving Users, Sharing Personal Data

INTELTeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Com

INTELHealthcare IT Platform CareCloud Probing Potential Data Breach

INTELSecurity updates for Monday

INTEL'When intelligence and trust move together, AI stops being an experiment and sta

INTELRussian APT Star Blizzard Adopts DarkSword iOS Exploit Kit

INTELDisclosure of Replay Attack Vulnerability in Signed References

INTELHackers now exploit critical F5 BIG-IP flaw in attacks, patch now

INTELTelnyx Targeted in Growing TeamPCP Supply Chain Attack

CVE(Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Out-Of-Bounds Write Remote Code

CVEZDI-26-204: Canon imageCLASS MF654Cdw XPS Parser Vulnerability

CVEZDI-26-202: QNAP TS-453E Hyper Data Protector Plugin SQL Injection RCE Vulnerabi

INTELCritical Citrix NetScaler memory flaw actively exploited in attacks

INTELTelnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach

INTELStorm Brews Over Critical, No-Click Telegram Flaw

INTELFTC Action Against Match and OkCupid for Deceiving Users, Sharing Personal Data

INTELTeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Com

INTELHealthcare IT Platform CareCloud Probing Potential Data Breach

INTELSecurity updates for Monday

INTEL'When intelligence and trust move together, AI stops being an experiment and sta

INTELRussian APT Star Blizzard Adopts DarkSword iOS Exploit Kit

INTELDisclosure of Replay Attack Vulnerability in Signed References

INTELHackers now exploit critical F5 BIG-IP flaw in attacks, patch now

INTELTelnyx Targeted in Growing TeamPCP Supply Chain Attack

CVE(Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Out-Of-Bounds Write Remote Code

CVEZDI-26-204: Canon imageCLASS MF654Cdw XPS Parser Vulnerability

CVEZDI-26-202: QNAP TS-453E Hyper Data Protector Plugin SQL Injection RCE Vulnerabi

INTELLIGENCE SOURCE: Krebs on Security · 2026-03-25

January 2026 Patch Tuesday: Critical Updates Released

— min read

GENERATED BY aria-32b

VIA Krebs on Security

#patch-tuesday #security-updates #critical-vulnerabilities

◎

ARIA ANALYSIS aria-32b · 2026-03-25

Microsoft issued a batch of 113 security patches, including eight critical updates, on Patch Tuesday, January 2026.

TL;DR

Microsoft issued a batch of 113 security patches, including eight critical updates, on Patch Tuesday, January 2026.

What happened

On January 14, 2026, Microsoft released a significant set of security patches to address at least 113 vulnerabilities in various Windows OS and supported software. The company highlighted that attackers are exploiting one of the fixed bugs.

Why it matters for ops

The timely application of these critical updates is essential for protecting systems against potential exploitation, especially as attacks on newly patched vulnerabilities may already be underway.

Action items

Apply all January 2026 Patch Tuesday updates immediately to mitigate risks.
Review any dependencies impacted by the patches and adjust deployment schedules if necessary.
Conduct a security audit post-patch application to ensure full protection.

Source link

https://krebsonsecurity.com/2026/01/patch-tuesday-january-2026-edition/

// SOURCES

Krebs on Security — Original article ↗