Daily Security Briefing #138

January 18, 2026 | Read Online

Microsoft issues urgent Windows fixes, CIRO data breach impacts 750,000 Canadian investors, Google Chrome advances AI features

Executive Summary

Today’s cybersecurity landscape highlights urgent patching efforts by Microsoft to resolve critical Windows bugs affecting shutdowns and Cloud PC performance. A significant data breach disclosed by the Canadian Investment Regulatory Organization has compromised sensitive information of approximately 750,000 investors, emphasizing ongoing risks to financial sector data security. Meanwhile, Google continues to expand AI capabilities within the Chrome browser, testing Gemini-powered automated task “Skills” and providing users control over the on-device AI models that support scam detection. These developments underscore the dual focus on vulnerability management and the growing integration of AI in cybersecurity tools.

Top Articles

Microsoft releases OOB Windows updates to fix shutdown, Cloud PC bugs
Microsoft has deployed multiple out-of-band updates for Windows 10, Windows 11, and Windows Server platforms to address two critical issues introduced in the January Patch Tuesday cycle. The fixes resolve shutdown failures and performance problems affecting the Cloud PC feature, ensuring system stability and reliability until the next regular update release.
BleepingComputer

CIRO confirms data breach exposed info on 750,000 Canadian investors
The Canadian Investment Regulatory Organization (CIRO) confirmed a data breach affecting roughly 750,000 Canadian investors. The incident, stemming from last year, exposed personally identifiable information and highlights persistent threats targeting financial regulatory bodies. CIRO is continuing investigations and working on enhanced protections to mitigate the impact on affected individuals.
BleepingComputer

Google Chrome tests Gemini-powered AI “Skills”
Google is experimenting with “Skills” powered by Gemini AI within Chrome, a feature designed to automate tasks and streamline user interactions. This initiative positions Google Chrome competitively against AI tools like Perplexity Comet and Microsoft Edge’s Copilot, aiming to embed advanced AI functionality directly in the browser environment.
BleepingComputer

Google Chrome now lets you turn off on-device AI model powering scam detection
Google Chrome introduces a new option allowing users to delete local AI models that enable the browser’s “Enhanced Protection” scam detection feature. This privacy-minded update provides greater user control over on-device AI components implemented in late 2025, balancing protection with user preferences for data and model management.
BleepingComputer

AI Transparency: This newsletter uses AI to curate, rank, and summarize cybersecurity content from leading industry blogs. All articles link directly to original authors. Executive summaries are AI-generated based on article content. I curate the sources and deliver the digest—the original authors deserve the credit for their excellent work.