Microsoft released January 2026 software updates and more - Jan 18, 2026

Featured

Microsoft Released January 2026 Software Updates

Microsoft has released software updates as part of its January 2026 Patch Tuesday. The updates fix 114 security vulnerabilities in total, including 3 zero-day vulnerabilities, 1 of which is being actively exploited.

This Week’s Updates

Breaches

Endesa, a Spanish energy provider | Impact: Personal info of unknown number of customers and internal info stolen

Target, an American retailer | Impact: Source code of some internal systems stolen and published for sale

University of Hawaii Cancer Center | Impact: Personal info of study participants and research files were stolen

Betterment, a US digital investment advisor | Impact: Personal info of customers were accessed by the attacker, and used to send crypto scam emails

AZ Monica, a Belgian hospital | Impact: Scheduled procedures were postponed, and critical patients transferred to other hospitals

Central Maine Healthcare | Impact: Sensitive info of over 145k people were exposed

Monroe University, a US university | Impact: Personal info of over 320k people stolen in 2024 breach

Grubhub, a US online food ordering and delivery company | Impact: Customer data on unknown number of customers stolen

Vulnerabilities

A critical vulnerability in ServiceNow AI Platform can allow an unauthenticated user to impersonate another user

A critical vulnerability in Fortinet FortiSIEM can allow an unauthenticated attacker to execute arbitrary code

Palo Alto has released software updates to address a high-severity vulnerability in PAN-OS that could allow an unauthenticated attacker to cause denial of service condition

A critical vulnerability in WordPress plugin Modular DS that can allow an attacker to escalate privileges

Cisco has released software updates to address a critical vulnerability in AsyncOS that allows an attacker to execute arbitrary commands with root privileges