Weekly Cyber Security News 22/01/2026

Let’s catch up on the more interesting vulnerability disclosures and cyber security news gathered from articles across the web this week. This is what we have been reading about on our coffee break!

The clue is in the name and complete isolation because, well, it will be breached before you can blink:

• “Damn Vulnerable” Training Apps Leave Vendor’s Clouds Exposed

Not a great bit of news:

• GitLab warns of high-severity 2FA bypass, denial-of-service flaws

I don’t know why companies, and I have to say from experience, government agencies still rely on this. Its not hard to replace:

• Millions of people imperiled through sign-in links sent by SMS