{"id":206703,"date":"2026-01-26T06:55:00","date_gmt":"2026-01-26T11:55:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/01\/26\/firewall-flaws-ai-built-malware-browser-traps-critical-cves-more\/"},"modified":"2026-01-26T14:20:07","modified_gmt":"2026-01-26T19:20:07","slug":"firewall-flaws-ai-built-malware-browser-traps-critical-cves-more","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/01\/26\/firewall-flaws-ai-built-malware-browser-traps-critical-cves-more\/","title":{"rendered":"Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More"},"content":{"rendered":"

Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More<\/a><\/p>\n

https:\/\/thehackernews.com\/2026\/01\/weekly-recap-firewall-flaws-ai-built.html<\/a><\/p>\n

Publish Date: 2026-01-26 06:55:00<\/a><\/p>\n

Source Domain: thehackernews.com<\/a><\/p>\n

\ue804Ravie Lakshmanan<\/span>\ue802Jan 26, 2026<\/span><\/span>Hacking News \/ Cybersecurity<\/span><\/p>\n

Security failures rarely arrive loudly. They slip in through trusted tools, half-fixed problems, and habits people stop questioning. This week’s recap shows that pattern clearly.<\/p>\n

Attackers are moving faster than defenses, mixing old tricks with new paths. “Patched” no longer means safe, and every day, software keeps becoming the entry point.<\/p>\n

What follows is a set of small but telling signals. Short updates that, together, show how quickly risk is shifting and why details can’t be ignored.<\/p>\n

\u26a1 Threat of the Week<\/strong><\/h2>\n

Improperly Patched Flaw Exploited Again in Fortinet Firewalls <\/strong>\u2014 Fortinet confirmed that it’s working to completely plug a FortiCloud SSO authentication bypass vulnerability following reports of fresh exploitation activity on fully-patched firewalls. “We have identified a number of cases where the exploit was to a device that had been fully upgraded to the latest release at the time of the attack, which suggested a new attack path,” the company said. The activity has been found to exploit an incomplete patch for CVE-2025-59718 and CVE-2025-59719, which could allow unauthenticated bypass of SSO login authentication via crafted SAML messages if the FortiCloud SSO feature is enabled on affected devices. In the absence of a fix, users are advised to restrict administrative access of edge network devices and turn off FortiCloud SSO logins by disabling the “admin-forticloud-sso-login” setting.<\/p>\n

\ud83d\udd14 Top News<\/strong><\/h2>\n