This week's Risk Radar covers the French refrigeration cyberattack, another record Patch Tuesday, and a 61% rise in Q3 ransomware with triple extortion.
MDR
Solutions
Partners
About
Resources
.svg)
Fortinet and Microsoft Critical Patches, ShinyHunters Targeted Intrusion, and France’s Digital Sovereignty Shift
Published:
January 30, 2026
This week’s Cybersecurity Week in Review highlights a number of high-severity vulnerabilities, an unusually targeted ransomware intrusion, and an interesting move by the French government around digital sovereignty and resilience.
Critical Vulnerabilities: Fortinet and Microsoft
Two patching priorities stood out this week.
Fortinet disclosed a new vulnerability affecting the FortiCloud SSO plugin used with Fortinet firewalls. With a CVSS score of 9.8, this is a critical issue, and organisations using the plugin should upgrade to the latest patch as soon as possible. Where patching cannot be applied immediately, Fortinet has provided workarounds that should be implemented without delay.
Microsoft also released an out-of-band patch for the Microsoft Office suite. This CVE scored 7.8, still firmly high severity, and should be treated as a priority update.
ShinyHunters and a Targeted Attack on Match Group
On the ransomware side, ShinyHunters claimed a number of new victims linked to Match Group, the parent company behind major dating platforms including Tinder and OkCupid.
What makes this case notable is the apparent targeting involved. The group reportedly registered the domain matchinternal.com and used it to trick a contractor into leaking credentials, enabling access into the environment.
At the time of writing, Match Group has not confirmed the full scope of the breach, but reports suggest that personal data and user tracking information may have been exposed.
France Drops US Video Conferencing Platforms
A separate development this week came from France, where the government confirmed it is dropping several US-made video conferencing tools currently in use, including Microsoft Teams, Google Meet, and Zoom.
Instead, France is deploying an internally developed platform called Visio, with an emphasis in official communications on digital sovereignty and resilience. It is a move that reflects a broader European focus on control over critical digital infrastructure.
Cyber Resilience Act Webinar
Finally, a quick note: next week I’ll be hosting a LinkedIn Live session alongside a member of our GRC team, looking at the Cyber Resilience Act and what it means for organisations preparing for compliance and operational impact.
More on that soon, and we’ll be back again next week with the next Cybersecurity Week in Review.
Read Our Latest Blogs
.png)
Ransomware Up 61% in Q3, Microsoft Patches 1,411 Flaws, French Refrigeration Attack
How Silent Ransom Group steals data without encryption, and how to detect it
Silent Ransom Group steals data without encryption. Learn how the attack works and what to ask a 24/7 detection and response provider before you sign.
Citrix NetScaler Mass Exploitation, Cisco's 9.8 CVE & Revolut Breached Again
Citrix NetScaler flaws face mass exploitation within a day of disclosure, Cisco's SD-WAN scores its eighth CVE of the year, and Revolut is breached again via a third-party supplier.
