Cyber Daily 1/14: Microsoft Zero-Day Exploit, Gogs Vulnerability Alert, CISA's Expanding KEV List, Adobe's Critical Fixes

Welcome to the January 14th edition of ONSEC Cyber Daily, where we unravel the latest in cybersecurity threats and defenses. Today, we dive into a critical vulnerability that has rocked the tech world: the Desktop Windows Manager flaw, CVE-2026-20805, now spotlighted in CISA's Known Exploited Vulnerabilities catalog. This zero-day bug, actively exploited, underscores the persistent threat landscape as Microsoft rolls out its first Patch Tuesday of 2026, addressing over a hundred vulnerabilities. Meanwhile, the Gogs path traversal vulnerability remains a pressing concern, with no patch in sight, highlighting the relentless nature of cyber threats. Join us as we explore these developments and their implications for cybersecurity resilience.

Get a Quote for Your Next Pentest

Exploits Alert

Hacked: Desktop Windows Manager vulnerability added to CISA's KEV catalogue: The US Cybersecurity and Infrastructure Security Agency (CISA) has added a newly addressed vulnerability, CVE-2026-20805, to its Known Exploited Vulnerabilities (KEV) catalog. This vulnerability in the Desktop Windows Manager is a significant risk as it is a frequent attack vector for malicious actors. The addition highlights the ongoing threat landscape and the need for vigilance in patch management. Source: Cyber Daily.
Windows info-disclosure 0-day bug gets a fix and CISA alert: A critical information disclosure vulnerability in Windows has been patched following an alert from CISA. This zero-day bug posed significant risks to federal enterprises, underlining the importance of timely updates and patches to mitigate potential cyber threats. The fix is part of Microsoft's ongoing efforts to address software defects and enhance cybersecurity defenses. Source: The Register.
Microsoft Patch Tuesday addresses 112 defects, including one actively exploited zero-day: Microsoft's latest Patch Tuesday release includes fixes for 112 defects, with a focus on an actively exploited zero-day vulnerability. This comprehensive update is crucial for maintaining security across Microsoft products, emphasizing the company's commitment to addressing cybercrime and vulnerability management. Users are urged to apply these patches promptly to protect against potential exploits. Source: CyberScoop.
Adobe Patches Critical Apache Tika Bug in ColdFusion: Adobe has released a patch for a critical vulnerability in Apache Tika, used in its ColdFusion product. This flaw could potentially lead to severe security breaches if left unaddressed. Alongside this, Adobe also fixed a medium-severity vulnerability in Substance 3D Designer, highlighting the importance of regular updates to prevent memory leaks and other security issues. Source: SecurityWeek.
CISA Flags Actively Exploited Gogs Vulnerability With No Patch: A high-severity security flaw in the self-hosted Git service Gogs is being actively exploited, prompting a warning from CISA. This path traversal vulnerability, CVE-2025-8110, remains unpatched, posing a significant threat to users of the service. The ongoing malicious activity underscores the critical need for enhanced security measures and monitoring. Source: Infosecurity Magazine.

Vulnerabilities & Patches

Microsoft January 2026 Patch Tuesday Fixes 114 Flaws, Including 3 Zero-Days: Microsoft has released a comprehensive patch addressing 114 vulnerabilities, including three zero-day exploits. Among these, CVE-2026-20805 stands out as an information disclosure flaw in the Desktop Window Manager, allowing unauthorized access to sensitive data. This patch is critical for maintaining system security against active exploitation. Source: GBHackers
Update your iPhone to iOS 18.6 Now to Keep it Safe from Security Threats: Apple has released iOS 18.6 to address several security vulnerabilities, including CVE-2025-6558. This update is crucial for protecting iPhone users from potential breaches and ensuring the integrity of their devices. Users are strongly advised to update immediately to mitigate risks. Source: MSN
January 2026 Microsoft Patch Tuesday: Actively Exploited Zero Day Needs Attention: This month's Patch Tuesday includes a fix for CVE-2026-20843, a vulnerability allowing privilege escalation in Windows services. The patch is vital for preventing unauthorized access and maintaining system security, especially given its active exploitation status. Source: CSO Online
Microsoft Patches Zero-Day, Kills Legacy Windows Drivers: The update addresses CVE-2026-20805, a zero-day vulnerability in the Windows Desktop Window Manager. This flaw has been actively targeted, making the patch essential for safeguarding systems against unauthorized data access. The update also removes outdated Windows drivers, enhancing overall system security. Source: SecurityBrief Australia
Data Theft, SSRF Intrusions Likely with Critical Apache Struts 2 Bug: A critical vulnerability, CVE-2025-68493, in Apache Struts 2 could lead to data theft and SSRF intrusions. This flaw necessitates immediate patching to prevent potential exploitation and protect sensitive information from unauthorized access. Organizations using Apache Struts 2 should prioritize this update. Source: SC Media

Podcasts

Cyber Fraud Takes the Lead: What the Shift Away From Ransomware Signals for Enterprises: This podcast explores the evolving landscape of cyber threats, highlighting a shift from traditional ransomware attacks to more sophisticated cyber fraud schemes. It discusses the implications for enterprises and how they can adapt their security strategies to mitigate these emerging risks. Source: Security Boulevard
Inside the SMB Threat Landscape: AT&T's Senthil Ramakrishnan on Why Small Businesses are Cybercrime's Favorite Target: This episode delves into the unique cybersecurity challenges faced by small and medium businesses (SMBs). Senthil Ramakrishnan from AT&T discusses why SMBs are increasingly targeted by cybercriminals and offers insights into effective defense strategies. Source: CSO Online
N2K CyberWire Network Welcomes W2 Communications' Inside the Media Minds Podcast: This podcast series, now part of the N2K CyberWire Network, offers a deep dive into the intersection of media and cybersecurity. It provides listeners with expert insights and analysis on how media professionals are navigating the evolving cyber threat landscape. Source: The CyberWire
Intezer CEO Shows How AI Revolutionizes Cybersecurity: This podcast episode features the CEO of Intezer discussing the transformative impact of artificial intelligence on cybersecurity. It covers how AI is being leveraged to enhance cyber defense mechanisms and counter cyber espionage activities. Source: The Jerusalem Post
Beyond the Noise: How Next-Generation SIEM Solutions Are Redefining Cybersecurity: This podcast examines the role of next-generation Security Information and Event Management (SIEM) solutions in modern cybersecurity. It highlights how these advanced tools are helping organizations to better detect and respond to threats in real-time. Source: Security Boulevard

Talk to ONSEC Team

Final Words

As we wrap up today's edition of ONSEC Cyber Daily, it's clear that the digital landscape is ever-evolving, with new vulnerabilities like CVE-2026-20805 in the Desktop Windows Manager being added to CISA's KEV catalog. This highlights the critical need for vigilance and proactive measures in cybersecurity. Remember, staying informed is your first line of defense against cyber threats. We hope you found today's insights valuable. If you did, please consider sharing this newsletter with your friends and colleagues. Together, we can build a more secure digital world, one informed reader at a time. Stay safe, stay secure, and see you in the next edition!