SecurityWeek Briefing

"Nike probing potential security incident as hackers threaten to leak data."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents. Accessed on 25 January 2026, 2236 UTC.

Content and Source provided by email subscription from https://feedly.com.

https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check subscription link or scroll down to read your selections. Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Nike Probing Potential Security Incident as Hackers Threaten to Leak Data

Nike investigates WorldLeaks ransomware breach

•

by Eduard Kovacs / 1d

The WorldLeaks cybercrime group claims to have stolen information from the footwear and apparel giant’s systems. The post appeared first on SecurityWeek .

Fortinet Confirms FortiCloud SSO Exploitation Against Patched Devices

by Ionut Arghire / 2d

Similar to recent FortiCloud single sign-on (SSO) login vulnerabilities, the attacks bypass authentication. The post appeared first on SecurityWeek .

In Other News: €1.2B GDPR Fines, Net-NTLMv1 Rainbow Tables, Rockwell Security Notice

by SecurityWeek News / 2d

Other noteworthy stories that might have slipped under the radar: , abused for malware delivery, Curl terminating bug bounty program The post appeared first on SecurityWeek .

Phishers Abuse SharePoint in New Campaign Targeting Energy Sector

Phishing campaign targets energy sector

•

by Ionut Arghire / 2d

Threat actors are leveraging the file-sharing service for payload delivery in AitM phishing and . The post appeared first on SecurityWeek .

Cyber Insights 2026: Regulations and the Tangled Mess of Compliance Requirements

by Kevin Townsend / 2d

Cyber regulations are where politics meets business – where business becomes subject to political realities. The post appeared first on SecurityWeek .

Under Armour Looking Into Data Breach Affecting Customers’ Email Addresses

3 TTPs

•

by Associated Press / 2d

Under Armour is investigating a recent data breach that purloined customers’ email addresses and other personal information. The post appeared first on SecurityWeek .

Organizations Warned of Exploited Zimbra Collaboration Vulnerability

by Ionut Arghire / 2d

has added the Zimbra flaw to the along with three other bugs exploited in the wild. The post appeared first on SecurityWeek .

Infotainment, EV Charger Exploits Earn Hackers $1M at Pwn2Own Automotive 2026

Pwn2Own Automotive 2026 reveals vulnerabilities

•

by Eduard Kovacs / 2d

Pwn2Own participants disclosed a total of 76 vulnerabilities during the three-day event. The post appeared first on SecurityWeek .

Fresh SmarterMail Flaw Exploited for Admin Access

SmarterMail admin bypass vulnerability exploited

•

by Ionut Arghire / 2d

The exploitation of the authentication bypass vulnerability started two days after patches were released. The post appeared first on SecurityWeek .

Jan 22, 2026

2 Venezuelans Convicted in US for Using Malware to Hack ATMs

by Eduard Kovacs / 2d

Dozens of Venezuelan nationals have been charged by the US for their role in attacks. The post appeared first on SecurityWeek .

The Upside Down is Real: What Stranger Things Teaches Us About Modern Cybersecurity

by Nadir Izrael / 3d

To all those who are fighting the good fight in the world of cyber, keep collaborating to ensure our world never succumbs to the chaos of the Upside Down. The post appeared first on SecurityWeek .

Old Attack, New Speed: Researchers Optimize Page Cache Exploits

by Eduard Kovacs / 3d

A team of researchers from the in Austria has revived page Linux page cache attacks. The post appeared first on SecurityWeek .

Webinar Today: Rethinking Email Security for Mid-Sized Organizations

by SecurityWeek News / 3d

See how modern AI-driven detection can block sophisticated attacks that traditional tools miss The post appeared first on SecurityWeek .

AiStrike Raises $7 Million in Seed Funding

AiStrike raises 7M for cybersecurity

•

by Ionut Arghire / 3d

The startup’s AI-native platform unifies exposure analysis, threat intelligence, investigation, and response. The post appeared first on SecurityWeek .

New Wave of Attacks Targeting FortiGate Firewalls

by Ionut Arghire / 3d

Hackers bypass the FortiCloud SSO login authentication to create new accounts and change device configurations. The post appeared first on SecurityWeek .

Claroty Raises $150 Million in Series F Funding

Claroty raises 150M for cybersecurity

•

by Eduard Kovacs / 3d

Claroty has raised a total of roughly $900 million and its valuation has reportedly reached $3 billion. The post appeared first on SecurityWeek .

Furl Raises $10 Million for Autonomous Vulnerability Remediation

Furl raises 10M for security

•

by Ionut Arghire / 3d

The startup will use the new funding to accelerate product development and deepen remediation capabilities. The post appeared first on SecurityWeek .

Jan 21, 2026

Atlassian, GitLab, Zoom Release Security Patches

GitLab patches critical 2FA vulnerabilities

•

by Ionut Arghire / 3d

Fixes were rolled out for over two dozen vulnerabilities, including critical- and high-severity bugs. The post appeared first on SecurityWeek .

Hackers Targeting Cisco Unified CM Zero-Day

2 TTPs

•

by Eduard Kovacs / 3d

•

CVE-2026-20045

Cisco has released patches for CVE-2026-20045, a critical vulnerability that can be exploited for unauthenticated remote code execution. The post appeared first on SecurityWeek .

CyberNut Closes $5M Growth Capital for K-12 Security Awareness Training

by Eduard Kovacs / 4d

CyberNut emerged from stealth in May 2024 with $800k in pre-seed funding for its cybersecurity platform. The post appeared first on SecurityWeek .

Asymmetric Security Emerges From Stealth With $4.2 Million in Funding

by Ionut Arghire / 4d

The startup’s platform leverages AI to automate forensic investigations, accelerating incident response. The post appeared first on SecurityWeek .

aiFWall Emerges from Stealth With an AI Firewall

by Kevin Townsend / 4d

aiFWall is a firewall protection for AI deployments built to use AI to improve its own performance. The post appeared first on SecurityWeek .

LastPass Users Targeted With Backup-Themed Phishing Emails

2 TTPs

•

by Eduard Kovacs / 4d

•

LastPass warns of phishing campaign

Threat actors may have wanted to take advantage of the holiday weekend in the United States to increase their chances of success. The post appeared first on SecurityWeek .

North Korean Hackers Target macOS Developers via Malicious VS Code Projects

North Korean hackers exploit VS Code

•

by Ionut Arghire / 4d

The hackers trick victims into accessing GitHub or GitLab repositories that are opened using . The post appeared first on SecurityWeek .

Why Identity Security Must Move Beyond MFA

by Torsten George / 4d

By integrating identity threat detection with MFA, organizations can protect sensitive data, maintain operational continuity, and reduce risk exposure. The post appeared first on SecurityWeek .

MITRE Launches New Security Framework for Embedded Systems

by Eduard Kovacs / 4d

The Embedded Systems Threat Matrix (ESTM) aims to help organizations protect critical embedded systems. The post appeared first on SecurityWeek .

Cyber Insights 2026: API Security – Harder to Secure, Impossible to Ignore

by Kevin Townsend / 4d

API cybersecurity will be a ping pong ball, battered between the rackets of AI-assisted attackers and AI-assisted defenders. The post appeared first on SecurityWeek .

Anthropic MCP Server Flaws Lead to Code Execution, Data Exposure

MCP servers vulnerable to RCE

•

by Ionut Arghire / 4d

Impacting Anthropic’s official MCP server, the vulnerabilities can be exploited through prompt injections. The post appeared first on SecurityWeek .

Oracle’s First 2026 CPU Delivers 337 New Security Patches

by Ionut Arghire / 4d

Oracle’s January 2026 CPU resolves roughly 230 unique vulnerabilities across more than 30 products. The post appeared first on SecurityWeek .

Hawaii Cybersecurity Journal