Cyber Bites - 23 January 2026

Hey Everyone, for today’s Cyber Bites we’ll be covering stories about companies being compromised by their own security training tools, GitLab patching a two-factor authentication bypass, researchers saying that AI-powered browsers might be undoing years of web security progress, Zendesk support systems being turned into spam engines worldwide and a look at the popular passwords still being used in 2025.

* Fortune 500 Companies Compromised Through Vulnerable Security Testing Applications

* GitLab Releases Emergency Patches for Two-Factor Authentication Bypass and Denial-of-Service Vulnerabilities

* AI-Powered Browsers Reverse Decades of Web Security Advances, Researchers Warn

* Attackers Weaponise Zendesk Support Systems in Massive Global Spam Campaign

* Predictable Password Patterns Persist as Billions Continue Using Easily Cracked Credentials

This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com