CIRO breached and more - Jan 25, 2026

Featured

The Canadian Investment Regulatory Organization (CIRO) has revealed they were victim of a data breach

The breach happened in August 2025, and personal info on 750k Canadians were compromised

This Week’s Updates

Breaches

Ingram Micro has revealed a ransomware attack in July 2025 resulted in a breach affecting over 42k individuals

Vulnerabilities

A vulnerability was discovered in SmarterMail that allows an attacker to bypass authentication

A critical vulnerability was discovered in GNU InetUtils telnet daemon that allows an attacker to bypass authentication

Cisco has released software updates to address a critical vulnerability in Unified Communications products and Webex

GitLab has released software updates to address a high severity vulnerability that allows attackers to bypass two-factor authentication

A vulnerability has been discovered in the binary-parser npm library that allows an attacker to execute arbitrary code

A critical vulnerability has been discovered in the Advanced Custom Fields: Extended plugin for WordPress that can allow an attacker to gain admin privileges

Threats

Zendesk instances are being compromised and used to send mass spam messages