Major Incidents or Breaches

  • Microsoft is investigating reports of Windows 11 devices failing to boot with “UNMOUNTABLE_BOOT_VOLUME” errors following the January 2026 Patch Tuesday security updates.

Newly Discovered Vulnerabilities

  • A critical-severity vulnerability affecting VMware products, disclosed in 2024, is now being actively targeted by attackers. The flaw allows remote code execution via crafted network packets.

Notable Threat Actor Activity

  • ISC has observed scanning activity targeting webservers using “/$(pwd)/” as a starting path. This activity began on 13 January 2026 and has been detected by multiple sensors, indicating ongoing reconnaissance or exploitation attempts.

Trends, Tools, or Tactics of Interest

  • 1Password has added built-in protection against phishing URLs, now providing pop-up warnings to help users identify malicious sites and prevent credential compromise.

Regulatory or Policy Developments Affecting the Security Industry

  • No significant regulatory or policy developments were reported in the provided headlines.