January 24, 2026 - Red Dot Security

Header image for the Red Dot Weekly Cyber Security News https://reddotsecurity.news

Hello all,

This week’s headliners have a threepeat from Cisco and Fortinet. For three weeks in a row, they’ve managed to top the list of actively exploited items needing fixes. Way to go? And there’s lots more from plenty of others. So, let’s get to it.

Headline NEWS:

Cisco has issued fixes for an actively exploited zero-day vulnerability in their Unified Communications Manager products that can enable remote code execution (RCE). This affects at least six products in that family, along with Webex Calling. Cisco is urging customers to update to patched versions as soon as possible.
Fortinet patched a FortiCloud auth bypass back in December 2025. Apparently, the patch was insufficient since threat actors have been exploiting Fortinet firewalls via this defect since at least January 15. The vendor advises customers to disable FortiCloud SSO and to restrict admin access to mitigate this defect. A forthcoming firmware update is coming that should plug this defect.
Oracle Fusion Middleware has a critical defect in their Oracle HTTP Server and their WebLogic Server Proxy Plug-in that can enable a threat actor to compromise the server. The flaw enables complete bypass of security controls as long as the attacker can access the HTTP server. Admins are urged to apply patches immediately.
TP-Link VIGI Surveillance Camera series has an authentication bypass defect that needs immediate attention. An attacker on the same network as the camera can reset the administrator password without any verification being required, giving an attacker full admin access. TP-Link urges immediate patching to fixed versions.
Zoom and GitLab have released fixes for multiple vulnerabilities. Apparently Zoom makes a Multimedia Router, who knew? That defect is the most severe and should be prioritized since meeting participants could perform remote code execution attacks vis this flaw. Update the to latest patches to fix this vulnerability. GitLab has released patches to fix a Denial of Service and a two-factor authentication (2FA) bypass defect. If you use either of these vendor’s products, update soon.

In Ransomware, Malware, and Vulnerabilities News:

Time to Exploit continues to go down. This week we have a link that shows that just two days after SmarterMail made their authorization bypass flaw public, exploitation began. Threat actors have excellent Open-Source Intelligence (OSINT) for collecting and prioritizing vulnerabilities, flaws, and defects that vendors uncover, or other threat actors share. The race to patch before the bad guys beat you to it is quite real. There’s an excellent article linked this week by VulnCheck that reports on the statistics about the State of Exploitation 2026. It is worth perusing.

In Other News Events of Note and Interest:

Google is offering free SAT practice tests, which should bring a bit of joy to parents and students that are faced with the prospect of paying for tutoring. The practice engine is powered by Gemini, Google’s AI, and has been tuned and vetted by “education firms like The Princeton Review” to ensure that the practice tests are accurate and don’t hallucinate. One very useful feature is the “Explain answer” button, which will help students to learn the concepts being tested.

Musings

As you are likely aware, Microsoft 365 was down for most of North America, and some other parts of the world this past week for almost an entire day. For the impacted businesses and their support organizations, it was a very bad day indeed. This seems to be happening more and more often lately. I think I will start calling Redmond’s service Microsoft 364.5 and start taking off digits for the length of time that the service is unavailable for large swaths of their clients. If memory serves me correctly, I think that they probably would have ended up being known as Microsoft 360 last year.

Headline NEWS

Ransomware, Malware, and Vulnerabilities News

Other News Events of Note and Interest

Like this: