MSP cybersecurity news digest, January 20, 2026

**Executive summary:** This report summarizes multiple concurrent high-risk cyber incidents: Microsoft issued January 2026 patches for 100+ vulnerabilities including actively exploited zero-days and critical RCEs; Kyowon Group sustained a large ransomware attack impacting ~600 servers with suspected data theft; Grubhub confirmed unauthorized access and data exfiltration tied to credential/ access issues; Free Mobile faced a massive prior breach affecting ~23 million subscribers and resulting in a €42M CNIL fine; and Belgian hospital AZ Monica was forced offline by an attack disrupting medical records and operations.