January 2026
303 posts. Browse all months
- Mandiant details how ShinyHunters abuse SSO to steal cloud data
Mandiant details how threat actors, including ShinyHunters, are exploiting vishing attacks and fake company SSO portals to steal credentials and MFA codes, …
- Kerberos Authentication Relay via DNS CNAME Abuse
A new technique abuses Kerberos TGS requests and DNS CNAME resolution to allow attackers to impersonate users by relaying authentication tickets. This method, …
- 175K Exposed Ollama Hosts Allow Remote Code Execution
175K Exposed Ollama Hosts Allow Remote Code Execution cyberpress.org/175k-expo… A massive global network of 175,000 publicly exposed Ollama AI servers, posing …
- GhostChat Spyware Targets Android Users Via WhatsApp
GhostChat Spyware Targets Android Users Via WhatsApp cyberpress.org/ghostchat… A sophisticated Android spyware campaign targeting individuals through a …
- China-Linked UAT-8099 Targets IIS Servers in Asia with BadIIS SEO Malware
China-Linked UAT-8099 Targets IIS Servers in Asia with BadIIS SEO Malware thehackernews.com/2026/01/c… Cybersecurity researchers have discovered a new campaign …
- Google agrees to $135 million settlement for collecting Android users’ data | The Verge
Google has agreed to a $135 million settlement to resolve a class action lawsuit alleging the company collected Android users’ cellular data without …
- AI Agents Are Rewriting Compliance Controls, Raising New Risks
www.bleepingcomputer.com/news/secu… As AI agents operate autonomously within business processes, traditional compliance frameworks (SOX, PCI DSS, HIPAA) face …
- NVIDIA Releases Security Updates for GPU Driver Vulnerabilities
cyberpress.org/nvidia-gp… NVIDIA published critical patches addressing high-severity code execution and privilege escalation flaws in its GPU display drivers, …
- Ivanti Provides Temporary Patches for Actively Exploited EPMM Zero-Day
www.helpnetsecurity.com/2026/01/3… Ivanti issued provisional patches for two critical EPMM vulnerabilities (including one exploited in the wild). Security teams …
- Wireshark 4.6.3 Released to Address Critical Vulnerabilities
cyberpress.org/wireshark… The Wireshark Foundation released version 4.6.3 to fix four critical security flaws in dissectors and parsers that could be exploited …
- Turning threat reports into detection insights with AI
Turning threat reports into detection insights with AI www.microsoft.com/en-us/sec… Microsoft outlines an AI-assisted workflow designed to help security teams …
- Latvia says Russia remains its top cyber threat as attacks hit record high
Latvia says Russia remains its top cyber threat as attacks hit record high therecord.media/latvia-sa… Latvia’s national security service (SAB) has reported a …
- Can’t stop, won’t stop: TA584 innovates initial access
Can’t stop, won’t stop: TA584 innovates initial access www.proofpoint.com/us/blog/t… Proofpoint reports sustained, high-volume activity from TA584, a prolific …
- Understanding the Russian cyber threat to the 2026 Winter Olympics
Understanding the Russian cyber threat to the 2026 Winter Olympics unit42.paloaltonetworks.com/russian-c… Unit 42 assesses that the 2026 Winter Games in Milano …
- Supply chain attack on eScan antivirus: Detecting and remediating malicious updates
Supply chain attack on eScan antivirus: Detecting and remediating malicious updates securelist.com/escan-sup… A supply chain attack targeting eScan antivirus, …
- Aisuru botnet sets new record with 31.4 Tbps DDoS attack
Aisuru botnet sets new record with 31.4 Tbps DDoS attack www.bleepingcomputer.com/news/secu… The Aisuru, also known as Kimwolf, botnet has set a new benchmark …
- Clawdbot’s rename to Moltbot sparks impersonation campaign
Clawdbot’s rename to Moltbot sparks impersonation campaign www.malwarebytes.com/blog/thre… Following a trademark dispute that forced the viral AI assistant …
- Interlock Ransomware: New techniques, same old tricks
Interlock Ransomware: New techniques, same old tricks www.fortinet.com/blog/thre… The Interlock ransomware group continues to target organizations globally, …
- Dissecting UAT-8099: New persistence mechanisms and regional focus
Dissecting UAT-8099: New persistence mechanisms and regional focus blog.talosintelligence.com/uat-8099-… Cisco Talos has identified renewed activity from threat …
- No Place Like Home Network: Disrupting the world’s largest residential proxy network
No Place Like Home Network: Disrupting the world’s largest residential proxy network cloud.google.com/blog/topi… Google, in coordination with partners, has …
- Ivanti warns of two EPMM flaws exploited in zero-day attacks
Ivanti warns of two EPMM flaws exploited in zero-day attacks www.bleepingcomputer.com/news/secu… Ivanti has disclosed two critical vulnerabilities in Ivanti …
- Operation Bizarre Bazaar: First Attributed LLMjacking Campaign with Commercial Marketplace Monetization
Operation Bizarre Bazaar: First Attributed LLMjacking Campaign with Commercial Marketplace Monetization www.pillar.security/blog/oper… Between December 2025 and …
- Attacks 'Cascade' From IT, OT to Patient Care
Report: Attacks ‘Cascade’ From IT, OT to Patient Care www.databreachtoday.com/report-at… Of the millions of threats detected in healthcare IT environments last …
- SolarWinds warns of critical Web Help Desk RCE, auth bypass flaws
SolarWinds warns of critical Web Help Desk RCE, auth bypass flaws www.bleepingcomputer.com/news/secu… SolarWinds has released security updates to patch critical …
- Malicious PyPI Packages spellcheckpy and spellcheckerpy Deliver Python RAT
Malicious PyPI Packages spellcheckpy and spellcheckerpy Deliver Python RAT www.aikido.dev/blog/mali… On January 20th and 21st, 2026, our malware detection …
- Unveiling the Weaponized Web Shell EncystPHP
Unveiling the Weaponized Web Shell EncystPHP www.fortinet.com/blog/thre… FortiGuard Labs has discovered a web shell that we named “EncystPHP.” It features …
- FBI seizes RAMP cybercrime forum
FBI seizes RAMP cybercrime forum used by ransomware gangs www.bleepingcomputer.com/news/secu… The FBI has seized the notorious RAMP cybercrime forum, a platform …
- AI’s safety features can be circumvented with poetry, research finds | AI (artificial intelligence) | The Guardian
Research from Italys Icaro Lab found that AI safety features can be circumvented using poetry, with models responding to harmful requests in 62% of poetic …
- OpenAI Wants To Use Biometrics To Kill Bots And Create Humans Only Social Network
OpenAI is developing a social network aiming to eliminate bots by potentially using biometric verification like iris scans or Face ID. This initiative seeks to …
- A rash of scam spam is coming from a real Microsoft address
A rash of scam spam is coming from a real Microsoft address Source: Ars Technica arstechnica.com/informati… Reports describe a wave of scam emails originating …
- Cyberattack on Poland’s power grid hit around 30 energy facilities
Cyberattack on Poland’s power grid hit around 30 energy facilities, report says Source: The Record therecord.media/poland-el… A new report said a coordinated …
- Two high-severity n8n flaws allow authenticated remote code execution
Two high-severity n8n flaws allow authenticated remote code execution Source: The Hacker News thehackernews.com/2026/01/t… Researchers disclosed two …
- Critical vm2 Node.js flaw allows sandbox escape and arbitrary code execution
Critical vm2 Node.js flaw allows sandbox escape and arbitrary code execution Source: The Hacker News thehackernews.com/2026/01/c… A critical vulnerability in …
- Hackers hijack exposed LLM endpoints in “Bizarre Bazaar” operation
Hackers hijack exposed LLM endpoints in “Bizarre Bazaar” operation Source: BleepingComputer www.bleepingcomputer.com/news/secu… Researchers reported an active …
- Why Microsoft routed example.com traffic to a company in Japan
Why Microsoft routed example.com traffic to a company in Japan Source: Ars Technica arstechnica.com/informati… Microsoft has remediated an unusual network …
- From cipher to fear: The psychology behind modern ransomware extortion
From cipher to fear: The psychology behind modern ransomware extortion Source: BleepingComputer www.bleepingcomputer.com/news/secu… For years, security teams …
- Russian security systems firm Delta hit by cyberattack, services disrupted
Russian security systems firm Delta hit by cyberattack, services disrupted Source: The Record therecord.media/russia-de… A cyberattack has disrupted operations …
- HoneyMyte updates CoolClient and deploys multiple stealers in recent campaigns
HoneyMyte updates CoolClient and deploys multiple stealers in recent campaigns Source: Securelist (Kaspersky) securelist.com/honeymyte… Over the past several …
- Diverse threat actors exploiting critical WinRAR vulnerability (CVE-2025-8088)
Diverse threat actors exploiting critical WinRAR vulnerability (CVE-2025-8088) Source: Google Cloud Threat Intelligence cloud.google.com/blog/topi… The Google …
- Have I Been Pwned: SoundCloud data breach impacts 29.8 million accounts
Have I Been Pwned: SoundCloud data breach impacts 29.8 million accounts Source: BleepingComputer www.bleepingcomputer.com/news/secu… Hackers have stolen …
- Microsoft Office zero-day (CVE-2026-21509): Emergency patch issued for active exploitation
Microsoft Office zero-day (CVE-2026-21509): Emergency patch issued for active exploitation Source: The Hacker News thehackernews.com/2026/01/m… Microsoft on …
- Over 6,000 SmarterMail servers exposed to automated hijacking attacks
Over 6,000 SmarterMail servers exposed to automated hijacking attacks Source: BleepingComputer www.bleepingcomputer.com/news/secu… Nonprofit security …
- Starbucks Removes $250,000-a-Year Cap for CEO’s Private Jet Use - Bloomberg
Starbucks Removes CEO Jet Expense Cap Following a security review, Starbucks now mandates CEO Brian Niccol use the company jet for all travel—personal and …
- Cloudflare Misconfiguration Behind Recent BGP Route Leak
Cloudflare Misconfiguration Behind Recent BGP Route Leak BleepingComputer www.bleepingcomputer.com/news/secu… Cloudflare has released additional details …
- Who Operates the Badbox 2.0 Botnet?
Who Operates the Badbox 2.0 Botnet? Krebs on Security krebsonsecurity.com/2026/01/w… The operators of Kimwolf, a disruptive botnet that has infected more than …
- APT Attacks Target Indian Government Using GOGITTER, GITSHELLPAD, and GOSHELL
APT Attacks Target Indian Government Using GOGITTER, GITSHELLPAD, and GOSHELL | Part 1 Zscaler ThreatLabz www.zscaler.com/blogs/sec… In September 2025, Zscaler …
- PeckBirdy: A Versatile Script Framework for LOLBins Exploitation
PeckBirdy: A Versatile Script Framework for LOLBins Exploitation Used by China-Aligned Threat Groups Trend Micro Research www.trendmicro.com/en_us/res… Since …
- VulnCheck: State of Exploitation 2026
VulnCheck: State of Exploitation 2026 www.vulncheck.com/blog/stat… In 2025, VulnCheck identified 884 Known Exploited Vulnerabilities (KEVs) for which evidence …
- Europe’s GCVE Raises Concerns Over Fragmentation in Vulnerability Databases
Europe’s GCVE Raises Concerns Over Fragmentation in Vulnerability Databases www.darkreading.com/cyber-ris… In response to continued uncertainty around the …
- ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025
ESET Research attributes the cyberattack on Polands power grid in late 2025 to the Russia-aligned Sandworm APT group, utilizing data-wiping malware named …
- Ransomware.live - Victim: KPMG
The Nova ransomware group has targeted KPMG, a global professional services firm, with an estimated attack date of January 23, 2026. The group claims KPMG …
- New DPRK Interview Campaign Leverages Fake Fonts to Deploy Malware
The Lazarus Group has initiated a Fake Font campaign, a sophisticated supply chain attack targeting software developers through fake job interviews and …
- Thousands of Microsoft Teams users are being targeted in a new phishing campaign | IT Pro
A new phishing campaign is targeting over 6,000 users by abusing Microsoft Teams guest invitations to impersonate billing alerts and trick victims into calling …
- Hands-Free Lockpicking: Critical Vulnerabilities in dormakaba’s Physical Access Control System - SEC Consult
SEC Consult researchers have discovered critical vulnerabilities in dormakaba’s exos 9300 physical access control system, allowing attackers to open arbitrary …
- MITRE Releases New Cybersecurity Framework to Protect the Embedded Systems
MITRE has released the Embedded Systems Threat Matrix™ (ESTM), a new cybersecurity framework developed with the Air Force’s CROWS to protect critical …
- Lazarus Hackers Actively Attacking European Drone Manufacturing Companies
The Lazarus hacking group, also known as HIDDEN COBRA, is actively targeting European drone manufacturing companies with a campaign called Operation DreamJob. …
- ‘Stanley’ Malware Toolkit Enables Phishing via Website Spoofing - SecurityWeek
A new malware toolkit called Stanley, available on underground forums for $2,000 to $6,000, enables phishing attacks by spoofing websites while keeping the …
- CISA says critical VMware RCE flaw now actively exploited
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified a critical VMware vCenter Server vulnerability (CVE-2024-37079) as being …
- Ireland Proposes Giving Police New Digital Surveillance Powers - Schneier on Security
The Irish government is proposing new legislation to grant police enhanced digital surveillance powers, including the ability to intercept communications and a …
- Toronto tech companies are hiring for a bunch of jobs and many pay over $100K
Several Toronto tech companies are actively hiring for various roles, with many positions offering salaries over $100,000 and attractive benefits. Companies …
- Microsoft outage now ‘resolved’ — latest updates as 365, Outlook and Teams return | Tom’s Guide
A widespread Microsoft outage on January 22 impacted services like Outlook, Teams, and Microsoft 365, caused by elevated service load during maintenance. The …
- ShinyHunters Leak Alleged Data of Millions From SoundCloud, Crunchbase and Betterment – Hackread – Cybersecurity News, Data Breaches, AI, and More
The notorious ShinyHunters hackers claim to have leaked millions of records from SoundCloud, Crunchbase, and Betterment after extortion attempts failed. These …
- 149M Credentials Leaked in Massive Unsecured Database Breach | The Tech Buzz
As a security professional, it’s important to look beyond the headlines. Recent reports of 149 million credentials exposed reinforce what our industry observed …
- Nike Probes Potential Breach After Threat From Hacking Group | PCMag
Nike is investigating a potential data breach after the hacking group World Leaks claimed to have targeted the company. World Leaks, which previously operated …
- Cybersecurity bulletin highlights multi-stage SharePoint attacks, AI risks
Cybersecurity bulletin highlights multi-stage SharePoint attacks, AI risks Source: cisoseries.com/cybersecu… A daily security news bulletin reports a …
- SMB cybersecurity checklist
SMB cybersecurity checklist emphasises executive readiness Source: markets.businessinsider.com/news/stoc… Cybersecurity experts published a list of ten actions …
- Cybersecurity stocks drawing investor attention
Cybersecurity stocks drawing investor attention amid heightened threat activity Source: www.marketbeat.com/instant-a… MarketBeat highlights several …
- Under Armour investigates potential customer data breach
Under Armour investigates potential customer data breach Source: www.marketwatch.com/story/und… Under Armour Inc. is investigating claims of a data breach that …
- NIST begins overhaul of SP 800-82
NIST begins overhaul of SP 800-82 to strengthen OT cybersecurity guidance Source: industrialcyber.co/nist/nist… The U.S. National Institute of Standards and …
- ASRock Rack breach exposes server firmware and BIOS files
ASRock Rack breach exposes server firmware and BIOS files Source: www.cybernewscentre.com/23rd-janu… The Everest ransomware group reportedly breached ASRock …
- Dual-stage phishing attack installs LogMeIn RMM for persistent access
Dual-stage phishing attack installs LogMeIn RMM for persistent access Source: thehackernews.com/2026/01/p… Researchers disclosed a new phishing campaign that …
- financial sector failing to implement basic cybersecurity controls
Bank of England: financial sector failing to implement basic cybersecurity controls Source: www.theregister.com/2026/01/2… The Bank of England’s 2025 …
- European Space Agency cybersecurity
European Space Agency cybersecurity in freefall after another breach Source: www.bitdefender.com/en-us/blo… The European Space Agency (ESA) has suffered a …
- Arctic Wolf observes malicious configuration changes on Fortinet FortiGate
Arctic Wolf observes malicious configuration changes on Fortinet FortiGate devices via SSO accounts Source: arcticwolf.com/resources… Arctic Wolf reports a new …
- Android malware uses AI
New Android malware uses AI to click hidden browser ads Source: www.bleepingcomputer.com/news/secu… A new Android click-fraud trojan family uses …
- Finns exposed a North Korean plot
Finns exposed a North Korean plot Source: www.is.fi/digitoday… WithSecure, a Helsinki-based cybersecurity firm (formerly F-Secure’s corporate security …
- New Osiris Ransomware Emerges as New Strain Using POORTRY Driver in BYOVD Attack
A new Osiris ransomware strain has been identified, utilizing a custom POORTRY driver in a BYOVD attack to disable security software, and has been linked to …
- Resilience debt is emerging as a critical enterprise cyber challenge
Resilience debt is emerging as a critical enterprise cyber challenge Source: ITPro www.itpro.com/security/… Dell Technologies research identifies “resilience …
- Major firms leave critical cyber vulnerabilities unpatched
Major firms leave critical cyber vulnerabilities unpatched for extended periods Source: InsuranceBusiness.ca www.insurancebusiness.ca/ca/news/c… A study of more …
- New research exposes critical third-party data exposure gap
New research exposes critical third-party data exposure gap: 64% of apps access sensitive data without authorisation Source: Cybersecurity Insiders via …
- Oracle January 2026 CPU includes critical vulnerabilities
Oracle January 2026 CPU includes critical vulnerabilities requiring urgent fixes Source: SoCRadar / CSA Singapore advisory socradar.io/blog/orac… Oracle’s …
- KYND study finds most large organisations leave critical vulnerabilities unpatched
KYND study finds most large organisations leave critical vulnerabilities unpatched Source: SecurityBrief Asia securitybrief.asia/story/kyn… A study by cyber …
- The internet’s oldest trust mechanism remains a key attack vector
The internet’s oldest trust mechanism remains a key attack vector Source: Help Net Security www.helpnetsecurity.com/2026/01/2… A new domain security study …
- RansomHub claims breach of Apple, Nvidia and LG supplier
RansomHub claims breach of Apple, Nvidia and LG supplier, threatens data leak www.communicationstoday.co.in/cartel-th… The cybercrime group RansomHub claims to …
- ClearFake malware uses proxy execution to run malicious PowerShell commands
ClearFake malware uses proxy execution to run malicious PowerShell commands gbhackers.com/clearfake… An evolved ClearFake malware campaign abuses trusted …
- malware campaign disables Defender
New multi-stage Windows malware campaign disables Defender before payload cybersecuritynews.com/new-multi… Security researchers have identified a sophisticated …
- One in 10 UK firms “unlikely to survive” a serious cyber incident
One in 10 UK firms “unlikely to survive” a serious cyber incident, execs warn www.infosecurity-magazine.com/news/uk-e… A report indicates that many UK …
- Do not click the LastPass “create backup” link
Do not click the LastPass “create backup” link — it is a phishing scam Source: The Register www.theregister.com/2026/01/2… Password managers are attractive …
- Germany and Israel pledge cybersecurity alliance
Germany and Israel pledge cybersecurity alliance Source: DataBreachToday www.databreachtoday.com/germany-i… Germany is seeking to significantly strengthen its …
- Tesla compromised as 37 zero-day vulnerabilities
Tesla compromised as 37 zero-day vulnerabilities are demonstrated at Pwn2Own Automotive 2026 Source: BleepingComputer www.bleepingcomputer.com/news/secu… …
- ACF plugin vulnerability allows attackers to gain administrator access
ACF plugin vulnerability allows attackers to gain administrator access on 50,000 WordPress sites Source: BleepingComputer www.bleepingcomputer.com/news/secu… A …
- A familiar logo on your phone could lead to serious consequences
Finnish police warn: A familiar logo on your phone could lead to serious consequences Source: Ilta-Sanomat (Digitoday) www.is.fi/digitoday… Finnish police are …
- CVE-2026-23754 D-Link D-View 8 API Endpoint authorization
A very critical vulnerability, CVE-2026-23754, has been identified in D-Link D-View 8 up to version 2.0.1.107, specifically within the API Endpoint component. …
- BUG-BOUNTY.md: we stop the bug-bounty end of Jan 2026 by bagder · Pull Request #20312 · curl/curl · GitHub
The curl project is stopping its bug bounty program at the end of January 2026, as indicated by a pull request to remove related documentation and mentions. …
- Carlsberg Event Wristband Leaked PII, Researcher Told Not to Disclose – Hackread – Cybersecurity News, Data Breaches, AI, and More
A Carlsberg event wristband system leaked visitor PII, including photos, videos, and full names, due to a vulnerability with a 7-digit numeric ID. Despite …
- NY union breach: 47K members’ SSNs exposed in May 2025 hack | Cybernews
The Civil Service Employees Association (CSEA) experienced a data breach between May 3rd and May 31st, 2025, potentially exposing the personal information, …
- NightSpire ransomware gang alleges Hyatt breach, leaks data | SC Media
The NightSpire ransomware gang claims to have breached Hyatt and leaked 48.5 GB of data from the Hyatt Place Chelsea New York hotel, including employee …
- Everest Ransomware Claims McDonalds India Breach Involving Customer Data – Hackread – Cybersecurity News, Data Breaches, AI, and More
The Everest ransomware group claims to have breached McDonalds India, alleging the exfiltration of 861 GB of customer data and internal documents. The group …
- Top online mentor site UStrive admits breach exposed data on children | TechRadar
Online mentoring company UStrive experienced a data breach exposing sensitive information of 238,000 users, including minors. While the company claims the …
- Boston Institute of Analytics identifies key threats for the week of Jan. 9–16
Boston Institute of Analytics identifies key threats for the week of Jan. 9–16, 2026 bostoninstituteofanalytics.org/blog/top-… A weekly analysis highlights a …
- Qualys outlines strategic cybersecurity predictions for 2026
Qualys outlines strategic cybersecurity predictions for 2026 blog.qualys.com/qualys-in… Qualys published a comprehensive set of cybersecurity predictions for …
- Identity-based attacks remain the top threat vector in 2026
Identity-based attacks remain the top threat vector in 2026 www.bleepingcomputer.com/news/secu… Industry analysis emphasises that identity-based attacks—ranging …
- VoidLink cloud malware appears AI-generated
VoidLink cloud malware appears AI-generated www.bleepingcomputer.com/news/secu… Security analysts reported the discovery of a new cloud-focused malware …
- Chainlit vulnerabilities expose sensitive information
Chainlit vulnerabilities expose sensitive information www.securityweek.com/chainlit-… Two high-severity security flaws (CVE-2026-22218 and CVE-2026-22219) were …
- EU proposes cybersecurity overhaul to block high-risk suppliers
EU proposes cybersecurity overhaul to block high-risk suppliers www.bleepingcomputer.com/news/secu… The European Commission has proposed new cybersecurity …
- crooks can now rent AI to run cybercrime
For the price of Netflix, crooks can now rent AI to run cybercrime www.theregister.com/2026/01/2… Cybercrime has entered its AI era, with criminals now using …
- Over-the-air software updates pose risks to vehicles
Over-the-air software updates pose risks to vehicles www.databreachtoday.com/over-the-… Over-the-air updates are an essential component of software-defined …
- PDFSider Windows malware deployed on Fortune 100 firm’s network
New PDFSider Windows malware deployed on Fortune 100 firm’s network www.bleepingcomputer.com/news/secu… Ransomware attackers targeting a Fortune 100 company in …
- Disturbance on the Estlink connections between Finland and Estonia
Disturbance on the Estlink connections between Finland and Estonia on Jan. 20, 2026, at 9:36 a.m. www.fingrid.fi/ajankohta… A temporary disturbance occurred in …
- €18.2 million – This crime caused serious damage in Finland
€18.2 million – This crime caused serious damage in Finland www.is.fi/digitoday… Security account scams are estimated to have resulted in losses of €18.2 …
- Microsoft begins blocking work email access for unprepared Intune users - Neowin
As of January 19, Microsoft is blocking access to work email for users who have not updated their Intune mobile applications, including core tools like …
- UK launches landmark ‘Report Fraud’ service to tackle cybercrime and fraud | The Record from Recorded Future News
The UK has launched Report Fraud, a new national service designed to improve how victims of cybercrime and fraud report incidents and how police investigate …
- RansomHouse Claims Data Breach at Major Apple Contractor Luxshare – Hackread – Cybersecurity News, Data Breaches, AI, and More
The RansomHouse group claims to have breached Luxshare, a major Apple contractor, alleging access to sensitive engineering data. However, no evidence has been …
- Hackathon Projects Show AI Wellness Apps Can Leak Sensitive User Info – Hackread – Cybersecurity News, Data Breaches, AI, and More
A hackathon revealed that AI wellness apps can leak sensitive user information through vulnerabilities similar to the Cerebral breach, where marketing pixels …
- Weaponized Invite Enabled Calendar Data Theft via Google Gemini - SecurityWeek
A vulnerability in Google Gemini allowed attackers to steal private meeting data by creating malicious calendar invites with hidden instructions. The attack …
- Russia sought to induce blackout in Poland
Russia sought to induce blackout in Poland, minister says Source: NV.ua english.nv.ua/nation/ru… Poland narrowly avoided a nationwide power outage following a …
- U.K. government warns of ongoing Russian hacktivist attacks
U.K. government warns of ongoing Russian hacktivist attacks Source: BleepingComputer www.bleepingcomputer.com/news/secu… The U.K. government is warning of …
- CrashFix attack hijacks browser failures to deliver ModelRAT malware via fake Chrome extension | CSO Online
The CrashFix attack uses a fake Chrome extension to intentionally crash browsers, then tricks users into running attacker-supplied commands to deploy the …
- Hacker pleads guilty to hacking Supreme Court, AmeriCorps, and VA Systems
Nicholas Moore pleaded guilty to hacking the U.S. Supreme Court’s electronic filing system, AmeriCorps, and the VA Health System, leaking stolen personal data …
- British Army to spend £279 million on permanent cyber regiment base - Help Net Security
The British Army will spend £279 million to establish a permanent cyber regiment base at Duke of Gloucester Barracks in Gloucestershire, enhancing its cyber …
- 42,000 Impacted by Ingram Micro Ransomware Attack - SecurityWeek
An IT giant Ingram Micro is notifying approximately 42,000 people about a ransomware attack that occurred on July 3, 2025, compromising personal information …
- Mastang Panda Uses Venezuela News to Spread LOTUSLITE Malware – Hackread – Cybersecurity News, Data Breaches, AI, and More
The Mustang Panda hacking group is suspected of using news about Venezuela to spread the LOTUSLITE malware through spear-phishing emails targeting US …
- Law enforcement tracks ransomware group blamed for massive financial losses - Help Net Security
Law enforcement agencies in Ukraine and Germany have identified two members of a Russian-affiliated ransomware group responsible for attacks between 2022 and …
- Hackers Exploiting PDF24 App to Deploy Stealthy PDFSIDER Backdoor – Hackread – Cybersecurity News, Data Breaches, AI, and More
The PDFSIDER malware exploits the legitimate PDF24 App through a DLL side-loading technique, enabling stealthy data theft and remote access. This APT-level …
- New Reports Reinforce Cyberattack’s Role in Maduro Capture Blackout - SecurityWeek
New reports suggest that US officials utilized cyberattacks to create power outages and disable air defense radars during the January 3 extraction of …
- Firefox joins Chrome and Edge as sleeper extensions spy on users | Malwarebytes
Malicious browser extensions, including ShadyPanda, GhostPoster, and Zoom Stealer, have been found to spy on users across Firefox, Chrome, and Edge. These …
- Malicious GhostPoster browser extensions found with 840,000 installs
Malicious GhostPoster browser extensions found with 840,000 installs …
- CIRO confirms data breach exposed info on 750,000 Canadian investors
The Canadian Investment Regulatory Organization (CIRO) has confirmed a data breach impacting approximately 750,000 Canadian investors, with compromised …
- Microsoft releases OOB Windows updates to fix shutdown, Cloud PC bugs
Microsoft has released out-of-band updates for Windows 10, Windows 11, and Windows Server to address critical bugs introduced by the January Patch Tuesday …
- Mandiant releases rainbow table that cracks weak admin password in 12 hours - Ars Technica
Mandiant has released a rainbow table that can crack weak admin passwords using the deprecated NTLMv1 hash algorithm in under 12 hours with consumer hardware. …
- Hacktivists hijacked Iran ’s state TV to air anti-regime messages and an appeal to protest from Reza Pahlavi
Hacktivists successfully hijacked Iran’s Badr satellite, briefly broadcasting anti-regime messages and calls for protest from exiled Crown Prince Reza Pahlavi …
- Germany seeks more hacking and surveillance powers for its intel service
Germany is proposing a new law to grant its intelligence service, the BND, expanded hacking and surveillance powers, enabling them to intercept full internet …
- Broadcom chip software flaw affecting ASUS routers enables DoS | SC Media
A Broadcom chip software flaw affecting certain ASUS routers allows an unauthenticated attacker to cause a denial-of-service (DoS), requiring a manual router …
- China-linked hackers exploited Sitecore zero-day for initial access
A China-linked hacker group, UAT-8837, has been exploiting a Sitecore zero-day vulnerability (CVE-2025-53690) for initial access to North American critical …
- AMD SEV-SNP CVMs on Zen1–5 can have their stack pointer warped
New CVE-2025-29943: StackWarp shows AMD SEV-SNP CVMs on Zen1–5 can have their stack pointer warped cross-hyperthread via an undocumented MSR, enabling RSA key …
- Metasploit Wrap-Up
This week’s Metasploit Framework update includes new modules for dMSA Abuse to escalate privileges in Windows Active Directory, and unauthenticated RCE modules …
- Jordanian initial access broker pleads guilty to helping target 50 companies | The Record from Recorded Future News
A Jordanian initial access broker, Feras Albashiti, operating as “r1z,” has pleaded guilty to selling network access to at least 50 companies and malware …
- Gootloader now uses 1,000-part ZIP archives for stealthy delivery
The Gootloader malware is now employing a stealthy delivery method using 1,000-part ZIP archives that are malformed to evade detection by analysis tools, while …
- European States Spin Wheels on Cybersecurity Directive
The NIS2 Directive, intended to enhance cybersecurity across the EU, faces slow adoption, with fewer than two-thirds of member states fully implementing it 15 …
- StealC hackers hacked as researchers hijack malware control panels
Researchers exploited a cross-site scripting (XSS) flaw in the StealC info-stealing malware’s control panel to gather intelligence on attackers, observing …
- ISP Sinkholes Kimwolf Servers Amid Eruption of Bot Traffic
An ISP has sinkholed over 550 command and control servers for the Kimwolf and Aisuru botnets, which have grown to infect millions of devices, primarily by …
- Epic Lawsuit Targets Alleged ‘Sham’ Providers in Data HIE
Epic Systems has filed a lawsuit accusing rival vendor Health Gorilla of enabling “sham” entities to improperly access patient data through national health …
- Anatomy of an Attack: The Payroll Pirates and the Power of Social Engineering
This article details how attackers used social engineering to bypass help desk authentication, reset passwords, and re-enroll MFA devices, ultimately …
- China-linked APT UAT-8837 targets North American critical infrastructure
A China-linked Advanced Persistent Threat (APT) group, tracked as UAT-8837, has been targeting North American critical infrastructure since at least 2025, …
- Introducing ChatGPT Go, now available worldwide | OpenAI
OpenAI is launching ChatGPT Go globally, an $8/month subscription offering 10x more messages, file uploads, and image creation than the free tier, with …
- Black Basta boss makes it onto Interpol’s ‘Red Notice’ list
Oleg Evgenievich Nefedov, identified as the leader of the Black Basta ransomware gang, has been placed on Interpol’s ‘Red Notice’ list, with Ukrainian and …
- Grubhub says hackers stole company data in recent breach - here’s what we know | TechRadar
Grubhub confirmed a data breach where hackers stole company information, but stated sensitive financial or order history data was not affected. The infamous …
- New China Linked VoidLink Linux Malware Targets Major Cloud Providers – Hackread – Cybersecurity News, Data Breaches, AI, and More
VoidLink is a new, sophisticated Linux malware framework developed by a Chinese-affiliated group, specifically targeting major cloud providers like AWS, Google …
- Supreme Court Hacked, Proving Its Cybersecurity Is As Robust As Its Ethical Code - Above the Law
Nicholas Moore will plead guilty to hacking the Supreme Court’s electronic filing system 25 times, highlighting the judiciary’s ongoing cybersecurity …
- Website that leaked thousands of ICE agents’ personal information is down after DDoS attack – DataBreaches.Net
A website called ICE List, which published personal information of ICE and Border Patrol agents, went offline after a DDoS attack that its founder suspects …
- Over 9M estimated to be impacted by Kyowon Group hack | SC Media
A ransomware attack on Kyowon Group is estimated to have impacted nearly 9.6 million accounts, affecting 75% of the company’s servers and potentially …
- Massive breach leaks 45 million French records: demographic, healthcare, and financial data all leaked, here’s what we know | TechRadar
A massive data breach has exposed tens of millions of French citizens' records, combining voter, healthcare, financial, and vehicle information, likely by a …
- Closing the Door on Net-NTLMv1
Closing the Door on Net-NTLMv1: Releasing Rainbow Tables to Accelerate Protocol Deprecation cloud.google.com/blog/topi… Mandiant is publicly releasing a …
- A simple CodeBuild flaw put every AWS environment at risk
A simple CodeBuild flaw put every AWS environment at risk – and pwned ‘the central nervous system of the cloud’ www.theregister.com/2026/01/1… A critical …
- Active Exploitation Underway for Critical HPE OneView
Patch Now: Active Exploitation Underway for Critical HPE OneView Vulnerability blog.checkpoint.com/research/… Check Point Research has identified an active, …
- UAT-8837 targets critical infrastructure sectors in North America
UAT-8837 targets critical infrastructure sectors in North America https://blog.talosintelligence.com/uat-8837/ Cisco Talos is closely tracking UAT-8837, a …
- New Remcos Campaign
New Remcos Campaign Distributed Through Fake Shipping Document www.fortinet.com/blog/thre… FortiGuard Labs discovered a new phishing campaign in the wild. The …
- ChatGPT is now more reliable at finding and remembering your past chat
OpenAI is enhancing ChatGPT with improved chat history search and personalization options for Plus and Pro subscribers, alongside better dictation accuracy for …
- Palo Alto Networks patches firewalls after discovery of a new denial-of-service flaw | CSO Online
Palo Alto Networks has released patches for a high-severity denial-of-service vulnerability (CVE-2026-0227) affecting its PAN-OS firewalls, which could cause …
- New intelligence is moving faster than enterprise controls - Help Net Security
A global study by NTT reveals that enterprises are rapidly adopting AI, but infrastructure readiness, data integrity, and governance frameworks are lagging, …
- China-Linked APT Exploits Sitecore Zero-Day in Attacks on American Critical Infrastructure
A China-linked APT group, UAT-8837, is exploiting a Sitecore zero-day vulnerability (CVE-2025-53690) to target American critical infrastructure, deploying …
- Ransomware Attacks and Supply Chain Threats in 2025
Ransomware and supply chain attacks significantly increased in 2025, with ransomware attacks up 52% and supply chain attacks nearly doubling, indicating a …
- Dutch police sell fake tickets to show how easily scams work | Malwarebytes
The Dutch police created a fake ticket website to demonstrate how easily ticket fraud occurs, successfully tricking thousands of people into trying to buy …
- China-linked APT UAT-9686 abused now patched maximum severity AsyncOS bug
Cisco has patched a critical AsyncOS vulnerability (CVE-2025-20393) that was exploited as a zero-day by the China-linked APT group UAT-9686 to gain root access …
- LOTUSLITE Backdoor Targets U.S. Policy Entities Using Venezuela-Themed Spear Phishing
A new LOTUSLITE backdoor campaign, attributed to China-linked Mustang Panda, targets U.S. policy entities with Venezuela-themed spear phishing, using DLL …
- Breach Roundup: Software Update Caused Verizon Outage
This week’s breach roundup includes a Verizon outage caused by a software update, a U.S. cyberattack in Venezuela, a data leak from BreachForums, a claimed …
- WhisperPair Attack Leaves Millions of Audio Accessories Open to Hijacking - SecurityWeek
A critical vulnerability (CVE-2025-36911) in Google Fast Pair lets attackers forcibly connect to Bluetooth accessories like earbuds without consent, dubbed …
- Microsoft: Windows 11 update causes Outlook freezes for POP users
A recent Windows 11 security update (KB5074109) is causing classic Outlook to freeze for users with POP email accounts on versions 25H2 and 24H2. Microsoft is …
- TranslateGemma: A new family of open translation models
Google has introduced TranslateGemma, a new suite of open translation models built on Gemma 3, supporting 55 languages and outperforming models twice its size. …
- AI-powered sextortion: a new threat to privacy | Kaspersky official blog
Recent discoveries of open databases from AI image-generation tools reveal a new threat: AI-powered sextortion, where innocent photos can be manipulated into …
- CVE-2026-20965: Tenant-Wide RCE via Azure Windows Admin Center
Cymulate Research Labs discovered a critical vulnerability, CVE-2026-20965, in Azure Windows Admin Center (WAC) that allows an attacker with local …
- Microsoft explains why Windows 11 25H2 got twice as heavy due to a key security update - Neowin
Microsoft’s November 2025 Patch Tuesday update hardens the Common Log File System (CLFS) in Windows 11 25H2 and Windows Server 2025 by adding hash-based …
- Amazon launches its ‘sovereign’ cloud in Europe and plots expansion
Amazon has launched its AWS European Sovereign Cloud in Europe, a physically and logically separate offering designed to comply with EU data regulations. This …
- Microsoft Says This Free App Speeds Up Your PC With One Click. I Put It to the Test | PCMag
Microsoft PC Manager is a free utility that offers one-click PC optimization, health checks, storage management, and pop-up blocking, simplifying system …
- UK Data Centre Planning Hits Record High Amid Scramble for AI Infrastructure | OilPrice.com
Data centre planning applications in England and Wales surged by 63% in 2025, reaching a record high driven by AI infrastructure demand and innovative site …
- Mitigating Denial-of-Service Vulnerability from Unrecoverable Stack Space Exhaustion for React, Next.js, and APM Users
Mitigating Denial-of-Service Vulnerability from Unrecoverable Stack Space Exhaustion for React, Next.js, and APM Users nodejs.org/en/blog/v… Node.js and V8 …
- Exploit Code Public for Critical FortiSIEM Command Injection Flaw
Exploit Code Public for Critical FortiSIEM Command Injection Flaw www.bleepingcomputer.com/news/secu… Technical details and public exploit code have been …
- France Fines Telcos €42 Million
France Fines Telcos €42 Million for Sub-Par Security Ahead of 24 Million-Customer Breach www.theregister.com/2026/01/1… France’s data protection regulator, …
- Reprompt: The Single-Click Microsoft Copilot Attack That Silently Steals Personal Data
Reprompt: The Single-Click Microsoft Copilot Attack That Silently Steals Personal Data www.varonis.com/blog/repr… Varonis Threat Labs has identified a new …
- Inside RedVDS: How a Single Virtual Desktop Provider Fueled Worldwide Cybercriminal Operations
Inside RedVDS: How a Single Virtual Desktop Provider Fueled Worldwide Cybercriminal Operations www.microsoft.com/en-us/sec… Over the past year, Microsoft Threat …
- Beijing Tells Chinese Firms to Stop Using U.S. and Israeli Cybersecurity Software
Beijing Tells Chinese Firms to Stop Using U.S. and Israeli Cybersecurity Software, Sources Say www.yahoo.com/news/arti… Chinese authorities have instructed …
- More Than 40 Countries Impacted by North Korea IT Worker Scams
More Than 40 Countries Impacted by North Korea IT Worker Scams, Crypto Thefts therecord.media/40-countr… The United States on Monday urged United Nations member …
- Eurail Passengers Taken for a Ride
Eurail Passengers Taken for a Ride as Data Breach Spills Passports, Bank Details www.theregister.com/2026/01/1… Eurail has confirmed that customer information …
- Output from vibe coding tools prone to critical security flaws, study finds | CSO Online
A new study by Tenzai reveals that popular AI coding tools consistently generate code with critical security flaws, particularly in areas requiring contextual …
- DeadLock Ransomware Group Utilizes Polygon Smart Contracts
The DeadLock ransomware group is employing “EtherHiding” tactics, using Polygon blockchain smart contracts to store proxy server addresses for facilitating …
- Flaw in AI Libraries Exposes Models to Remote Code Execution
Vulnerabilities in three AI libraries (NeMo, Uni2TS, FlexTok) from Apple, Salesforce, and Nvidia allow remote code execution via compromised model files loaded …
- LEANN: Shrinking Vector Search by 97% Without Losing Accuracy | by Tattva Tarang | Coding Nexus | Jan, 2026 | Medium
LEANN is a new vector index that reduces storage by 97% for vector search, enabling personal laptops to perform Retrieval-Augmented Generation (RAG) on …
- Cyber Threat Intelligence Briefing – Jan. 14, 2026
Incident: Microsoft Windows users impacted by CVE-2026-20805 causing memory information disclosure Date of Incident (ET): Unknown Date of Disclosure (ET): Jan. …
- Convincing LinkedIn comment-reply tactic used in new phishing
A new phishing tactic on LinkedIn involves fake “reply” comments impersonating the platform, warning of policy violations and directing users to malicious …
- Staples Caught Reselling Laptops Without Wiping Them—Again | iPhone in Canada
Staples Canada has again failed to properly wipe personal data from returned laptops before reselling them, according to a recent investigation by the Office …
- FBI warns of North Korean QR code phishing.
The FBI has issued a warning about North Korean threat actors using QR codes for phishing attacks targeting various institutions and government entities, while …
- Robo-Advisor Betterment Discloses Data Breach - SecurityWeek
A 2026 research report reveals that 64% of third-party applications access sensitive data without justification, a significant increase from 2024, with the …
- New Research: 64% of 3rd-Party Applications Access Sensitive Data Without Justification
A 2026 research report reveals that 64% of third-party applications access sensitive data without justification, a significant increase from 2024, with the …
- How real software downloads can hide remote backdoors | Malwarebytes
A campaign uses a fake RustDesk download site (rustdesk[.]work) to trick users into installing legitimate RustDesk alongside the Winos4.0 backdoor malware, …
- Victorian Department of Education says hackers stole students’ data
Hackers accessed a database of the Victorian Department of Education, stealing personal information and email addresses of current and former students, leading …
- Cloud marketplace Pax8 accidentally exposes data on 1,800 MSP partners
Cloud marketplace Pax8 accidentally emailed a spreadsheet with internal business and licensing data for approximately 1,800 MSP partners to fewer than 40 …
- Online shoppers at risk as Magecart skimming hits major payment networks | Malwarebytes
A Magecart campaign is targeting major payment networks like American Express and Mastercard, using web skimming to steal online shoppers' payment and personal …
- Direct and reverse NFC relay attacks being used to steal money | Kaspersky official blog
Kaspersky’s official blog details how criminals exploit NFC relay attacks, including direct and reverse methods, to steal money by tricking users into …
- Belgian hospital AZ Monica shuts down servers after cyberattack
Belgian hospital AZ Monica shut down servers and canceled procedures due to a cyberattack, transferring critical patients to other facilities while continuing …
- Analyzing a Multi-Stage AsyncRAT Campaign
Analyzing a Multi-Stage AsyncRAT Campaign via Managed Detection and Response www.trendmicro.com/en_us/res… AsyncRAT has emerged as a notable remote access …
- Sweden detains ex-military IT consultant suspected of spying for Russia
Sweden detains ex-military IT consultant suspected of spying for Russia therecord.media/sweden-de… A 33-year-old former IT consultant for Sweden’s Armed Forces …
- Hungary grants asylum to former Polish minister
Hungary grants asylum to former Polish minister implicated in spyware probe therecord.media/hungary-a… Hungary has granted political asylum to Poland’s former …
- Executives worry most about cyber-enabled fraud, geopolitics and AI | Cybersecurity Dive
A World Economic Forum report reveals executives are most concerned about cyber-enabled fraud, followed by AI-related vulnerabilities and geopolitics, with …
- US prepares for cyber war with Iran
The US is considering cyber warfare options against Iran in response to the regime’s crackdown on protesters, including amplifying anti-government messages …
- 1Password Focuses on Identity Security in Agentic AI Era
1Password is enhancing its identity security platform to manage machine identities for agentic AI, appointing former AWS exec Nancy Wang as CTO to lead this …
- Cybersecurity jobs available right now: January 13, 2026 - Help Net Security
This article lists current cybersecurity job openings as of January 13, 2026, including roles like CISO, Cyber Defense Specialist, and various Cybersecurity …
- Rakuten Viber CISO/CTO on balancing encryption, abuse prevention, and platform resilience - Help Net Security
Liad Shnell, CISO and CTO at Rakuten Viber, discusses the challenges of balancing end-to-end encryption with abuse prevention and platform resilience, …
- DeVixor: An Evolving Android Banking RAT With Ransomware Capabilities Targeting Iran - Cyble
Cyble has analyzed deVixor, an evolving Android banking RAT targeting Iranian users with capabilities including SMS harvesting, credential theft via JavaScript …
- New Malware Campaign Delivers Remcos RAT Through Multi-Stage Windows Attack
A new malware campaign named SHADOW#REACTOR uses a multi-stage Windows attack to deliver the Remcos RAT, employing evasive techniques like text-only stagers …
- Spanish Energy Company Endesa Hacked - SecurityWeek
Spanish energy company Endesa confirmed a data breach affecting customer information, including contact details and payment information, after unauthorized …
- Remote Code Execution With Modern AI/ML Formats and Libraries
Vulnerabilities in three AI/ML Python libraries (NeMo, Uni2TS, FlexTok) from NVIDIA, Salesforce, and Apple allow for remote code execution when loading …
- XDR * eBPF = CADR - by Andrew Green - Green Abstracts
Article claims: XDR, an extension of EDR, is critiqued for its user-space limitations, suggesting eBPF as a superior alternative for enhanced kernel-level …
- For application security: SCA, SAST, DAST and MAST. What next? | CSO Online
The article argues that traditional application security tools like SCA, SAST, and DAST are no longer sufficient and that the future lies in Application …
- SAP’s January 2026 Security Updates Patch Critical Vulnerabilities - SecurityWeek
SAP’s January 2026 Security Patch Day addresses 17 new security notes, including four critical vulnerabilities related to SQL injection and code execution in …
- Artificial brains could point the way to ultra-efficient supercomputers
Artificial brains could point the way to ultra-efficient supercomputers www.theregister.com/2026/01/0… New research from Sandia National Laboratories suggests …
- Brussels plots open source push
Brussels plots open source push to pry Europe off Big Tech www.theregister.com/2026/01/1… The European Commission has launched a fresh consultation into open …
- Instagram denies breach
Instagram denies breach amid claims of 17 million account data leak www.bleepingcomputer.com/news/secu… Instagram says it fixed a bug that allowed threat actors …
- Why attackers are phishing on LinkedIn
Why attackers are phishing on LinkedIn (and how to stop it) www.pandasecurity.com/en/mediac… Phishing isn’t just an email problem anymore. Attackers now use …
- Ireland recalls almost 13,000 passports
Ireland recalls almost 13,000 passports over missing ‘IRL’ code www.bleepingcomputer.com/news/secu… Ireland’s Department of Foreign Affairs has recalled nearly …
- Reborn in Rust: Muddy Water Evolves Tooling with RustyWater Implant
Reborn in Rust: Muddy Water Evolves Tooling with RustyWater Implant www.cloudsek.com/blog/rebo… CloudSEK’s TRIAD recently identified a spearphishing campaign …
- Spain arrests 34 suspects linked to Black Axe cyber crime
Authorities in Spain have arrested 34 suspects linked to the Black Axe criminal network, believed to be involved in cyber fraud, including Business Email …
- North Korea–linked APT Kimsuky behind quishing attacks, FBI warns
The FBI has issued a warning that the North Korea-linked APT group Kimsuky is conducting quishing attacks targeting governments, think tanks, and academic …
- BreachForums hacking forum database leaked, exposing 324,000 accounts
The BreachForums hacking forum experienced a data leak exposing a database with 324,000 accounts, including usernames, registration dates, and IP addresses. …
- Largest Outages of 2025: A Downdetector Analysis | Ookla®
In his latest Ookla analysis, Perry Haghighi details how 2025 became a year of “Logic Layer” failures rather than hardware crashes. For Security and IT …
- Microsoft may soon allow IT admins to uninstall Copilot
Microsoft may soon allow IT admins to uninstall Copilot www.bleepingcomputer.com/news/micr… Microsoft is testing a new policy that allows IT administrators to …
- Illicit crypto economy surges as nation-states join in the fray
Illicit crypto economy surges as nation-states join in the fray www.darkreading.com/cyber-ris… Illicit cryptocurrency transactions grew more than 160 per cent …
- FBI warns North Korean hackers using malicious QR codes
FBI warns North Korean hackers using malicious QR codes in spear-phishing thehackernews.com/2026/01/f… The U.S. Federal Bureau of Investigation (FBI) on …
- Hackers target misconfigured proxies
Hackers target misconfigured proxies to access paid LLM services www.bleepingcomputer.com/news/secu… Threat actors are systematically hunting for misconfigured …
- organizations recruiting teenagers to do the dirty work
Are criminal hacking organizations recruiting teenagers to do the dirty work? www.pandasecurity.com/en/mediac… Yes, they are. It has been confirmed that many of …
- First Federal Data Breach Claims Investigated by Lynch
Lynch Carpenter is investigating claims against First Federal Savings & Loan Association following a cybersecurity incident that may have exposed individuals' …
- Iranian Hack Turns Leaked Israeli Contacts Into Intelligence Windfall – Sri Lanka Guardian
An Iranian-backed hacking operation has compromised the personal devices and messaging accounts of senior Israeli political figures, including former prime …
- Tailwind lays off 75% employees as AI kills majority of its revenue - Neowin
Tailwind CSS, a popular open-source framework, laid off 75% of its team due to a 40% decline in website traffic and 80% drop in revenue. The decline is …
- Inside GoBruteforcer: AI-Generated Server Defaults, Weak Passwords, and Crypto-Focused Campaigns
research.checkpoint.com/2026/insi… Check Point Research has detailed GoBruteforcer (also known as GoBrut), a modular botnet written in Go that brute-forces user …
- UAT-7290 Targets High-Value Telecommunications Infrastructure in South Asia
blog.talosintelligence.com/uat-7290/ Cisco Talos has disclosed a sophisticated threat actor tracked as UAT-7290, which has been active since at least 2022. …
- Phishing Campaign Abuses Google Cloud Services to Steal Microsoft 365 Logins
www.malwarebytes.com/blog/news… Attackers are sending highly convincing fake “Google” emails that bypass spam filters, route victims through multiple trusted …
- VMware ESXi Zero-Days Likely Exploited a Year Before Disclosure
www.bleepingcomputer.com/news/secu… Chinese-speaking threat actors used a compromised SonicWall VPN appliance to deliver a VMware ESXi exploit toolkit that …
- China Hacked Email Systems of U.S. Congressional Committee Staffers, FT Reports
www.reuters.com/world/asi… A Chinese hacking group has compromised email systems used by staff members of powerful committees in the U.S. House of …
- ChatGPT’s Memory Feature Supercharges Prompt Injection
www.darkreading.com/endpoint-… Some of the latest features of ChatGPT can be manipulated to make indirect prompt injection (IPI) attacks more severe than …
- Cyber Retaliation Risks Rise After U.S.-Venezuela Operation
Cyber Retaliation Risks Rise After U.S.-Venezuela Operation www.databreachtoday.com/cyber-ret… Cybersecurity and national security officials are warning that …
- Last year’s SK Telecom USIM hacking and data breach incident has been infamously recorded as one of .. - MK
The SK Telecom USIM hacking and data breach incident of last year has been identified by the Cyber Management Alliance (CMA) as a significant structural …
- Researchers Uncover NodeCordRAT Hidden in npm Bitcoin-Themed Packages
Researchers have identified three malicious npm packages containing a new malware called NodeCordRAT, which steals credentials and cryptocurrency seed phrases …
- Fake WinRAR downloads hide malware behind a real installer | Malwarebytes
A campaign is distributing fake WinRAR installers that hide malware, using a multi-layered approach to evade detection. These fake installers, downloaded from …
- UAT-7290 targets high value telecommunications infrastructure in South Asia
Cisco Talos has disclosed UAT-7290, a sophisticated China-nexus APT actor active since at least 2022, targeting telecommunications infrastructure in South Asia …
- Securing Vibe Coding Tools: Scaling Productivity Without Scaling Risk
The article discusses the risks associated with vibe coding (AI-assisted development), where AI tools can generate functional code rapidly but often neglect …
- Critical jsPDF vulnerability enables arbitrary file read in Node.js deployments | CSO Online
A critical jsPDF vulnerability (CVE-2025-68428) in Node.js deployments allowed attackers to read arbitrary files and embed them into PDFs. The path traversal …
- PoC released for unauthenticated RCE in Trend Micro Apex Central (CVE-2025-69258) - Help Net Security
A Proof of Concept (PoC) has been released for CVE-2025-69258, an unauthenticated Remote Code Execution (RCE) vulnerability in Trend Micro Apex Central …
- Microsoft to enforce MFA for Microsoft 365 admin center sign-ins
Starting February 9th, 2026, Microsoft will enforce multi-factor authentication (MFA) for all users accessing the Microsoft 365 admin center to enhance …
- Cisco warns of Identity Service Engine flaw with exploit code
Cisco has released a patch for a critical Identity Services Engine (ISE) vulnerability (CVE-2026-20029) that allows authenticated attackers to read arbitrary …
- Researchers Expose WHILL Wheelchair Safety Risks via Remote Hacking - SecurityWeek
Security researchers have exposed a critical vulnerability in WHILL electric wheelchairs (Model C2 and Model F) that allows for remote hacking and unauthorized …
- Microsoft Exchange Online outage blocks access to mailboxes via IMAP4
A Microsoft Exchange Online outage is intermittently preventing users from accessing their mailboxes via IMAP4 due to a code conflict causing an authentication …
- ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More Stories
The ThreatsDay Bulletin highlights recent cybersecurity incidents, including a critical flaw in RustFS due to a hard-coded token, exploitation of a GeoServer …
- Australia & NZ Initial Access Threat Landscape 2025
The Australia & New Zealand Initial Access Threat Landscape 2025 report reveals an escalation in cyber threats, driven by increased initial access sales, …
- Dell admits consumers do not care about AI PCs
Dell admits consumers do not care about AI PCs Source: www.theverge.com/news/8577… Dell has acknowledged that consumers are not currently purchasing personal …
- GRU-linked BlueDelta evolves credential-harvesting operations
GRU-linked BlueDelta evolves credential-harvesting operations Source: https://www.recordedfuture.com/research/gru-linked-bluedelta-evolves-credential-harvesting …
- Poison pill defence protects proprietary AI data
Poison pill defence protects proprietary AI data from theft Source: www.databreachtoday.com/poison-pi… Chinese and Singaporean researchers have developed a …
- IBM’s AI agent Bob easily duped
IBM’s AI agent Bob easily duped into running malware, researchers say Source: www.theregister.com/2026/01/0… Security researchers have demonstrated that IBM’s …
- Alleged cyber scam kingpin arrested, extradited to China
Alleged cyber scam kingpin arrested, extradited to China Source: therecord.media/alleged-c… Cambodian authorities on Tuesday arrested and extradited to China …
- ESA calls police
ESA calls police as criminals lift 500 GB of files; security gap reportedly still open Source: www.theregister.com/2026/01/0… The European Space Agency on …
- Inside the Telegram Channel Jailbreaking Grok Over and Over Again
A Telegram community has been actively jailbreaking Grok, Elon Musk’s AI model, to generate nonconsensual sexual images and videos of real people, using …
- Who are the hackers behind Manage My Health’s cyber attack? | RNZ News
The ransomware group Kazu, responsible for the Manage My Health cyber attack, has a history of targeting institutions worldwide, including the Nepali Ministry …
- Hacking Incidents at 21 Sites Including Universities and Hospitals: Dormitory and Plastic Surgery Data Also Compromised - 아시아경제
A recent cyberattack has targeted 21 organizations in South Korea, including universities and hospitals, with hackers stealing and selling internal data. The …
- Canadian fugitive arrested in Spain over major Desjardins data leak | Globalnews.ca
A Canadian fugitive, wanted in connection with the massive Desjardins data breach affecting nearly 10 million clients, has been arrested in Spain. Juan Pablo …
- n8n Warns of CVSS 10.0 RCE Vulnerability Affecting Self-Hosted and Cloud Versions
The workflow automation platform n8n has issued a warning about a critical CVSS 10.0 vulnerability (CVE-2026-21877) that allows for remote code execution (RCE) …
- Microsoft warns of a surge in phishing attacks exploiting email routing gaps | CSO Online
Microsoft warns of a surge in phishing attacks that exploit email routing gaps by abusing misconfigured MX records and weak DMARC/SPF policies to make messages …
- The Wegman’s Supermarket Chain Is Probably Using Facial Recognition - Schneier on Security
The Wegmans supermarket chain is likely employing facial recognition technology in its New York City stores, collecting biometric information about customers. …
- Hackers Exploit Zero-Day in Discontinued D-Link Devices - SecurityWeek
A zero-day OS command injection vulnerability (CVE-2026-0625) has been exploited in discontinued D-Link gateway devices, allowing remote attackers to execute …
- Inside SafePay: Analyzing the New Centralized Ransomware Group
SafePay is a centralized ransomware group that emerged in late 2024, distinguishing itself from RaaS models by maintaining strict control over operations and …
- UK announces grand plan to secure online public services - Help Net Security
The UK has launched a Government Cyber Action Plan, backed by £210 million, to enhance the security and resilience of online public services. This initiative …
- Several Code Execution Flaws Patched in Veeam Backup & Replication - SecurityWeek
Veeam has released an update for its Backup & Replication solution to patch several remote code execution vulnerabilities (CVE-2025-59470, CVE-2025-55125, …
- Vulnerability in Totolink Range Extender Allows Device Takeover - SecurityWeek
A security flaw in the discontinued Totolink EX200 wireless range extender (CVE-2025-65606) allows attackers to gain full system access by triggering an …
- DDoSia Powers Affiliate-Driven Hacktivist Attacks
The pro-Russian hacktivist group NoName057(16) utilizes a custom DDoS tool called DDoSia to recruit volunteers for denial-of-service attacks against Ukrainian …
- Vessel Impersonation and Supply Chain Report / December 2025 - X-Industry - Red Sky Alliance
Red Sky Alliance’s December 2025 report highlights the growing threat of vessel impersonation and supply chain attacks in the maritime industry. Malicious …
- Taiwan says China’s attacks on its energy sector increased tenfold
Taiwan’s National Security Bureau reported a tenfold increase in cyberattacks targeting the energy sector in 2025, with a 6% overall rise in incidents linked …
- Threat Actors Hacked Global Companies via Leaked Cloud Credentials from Infostealer Infections
Threat actors, operating under the alias Zestix, have breached approximately 50 global companies by exploiting leaked cloud credentials obtained from …
- US broadband provider Brightspeed investigates breach claims
US broadband provider Brightspeed is investigating claims by the Crimson Collective extortion gang that they have stolen sensitive information, including …
- AWS raises GPU prices 15 per cent
AWS raises GPU prices 15 per cent on a Saturday, hopes you weren’t paying attention Source: https://www.theregister.com/2026/01/05/aws_price_increase/ The …
- VSCode IDE forks expose users to “recommended extension” attacks
VSCode IDE forks expose users to “recommended extension” attacks Source: www.bleepingcomputer.com/news/secu… Popular AI-powered integrated development …
- NordVPN denies breach claims
NordVPN denies breach claims, says attackers have “dummy data” Source: …
- Russian hackers target European hospitality industry
Russian hackers target European hospitality industry with “Blue Screen of Death” malware Source: …
- How Microsoft is betting on AI agents in Windows
How Microsoft is betting on AI agents in Windows, dusting off a winning playbook from the past www.geekwire.com/2025/how-… A new framework called Agent …
- Palo Alto Networks security-intel boss calls AI agents 2026's biggest insider threat
Palo Alto Networks security-intel boss calls AI agents 2026’s biggest insider threat www.theregister.com/2026/01/0… AI agents represent the new insider threat …
- Trump suggests US used cyberattacks to turn off lights in Venezuela during strikes
Trump suggests US used cyberattacks to turn off lights in Venezuela during strikes www.politico.com/news/2026… President Donald Trump suggested Saturday that …
- Pakistan-linked hackers target Indian government, universities in new spying campaign
Pakistan-linked hackers target Indian government, universities in new spying campaign therecord.media/pakistan-… A Pakistan-aligned hacker group has launched a …
- The Kimwolf Botnet is Stalking Your Local Network
The Kimwolf Botnet is Stalking Your Local Network krebsonsecurity.com/2026/01/t… The past few months have witnessed the explosive growth of a new botnet dubbed …
- F5, Inc. Securities Fraud Class Action Result of Data
Investors who purchased F5, Inc. securities between October 28, 2024, and October 27, 2025, and suffered losses due to a data breach and subsequent stock …
- VVS Discord Stealer Using Pyarmor for Obfuscation and Detection Evasion
The VVS stealer, a Python-based malware, utilizes Pyarmor for obfuscation to evade detection while targeting Discord users for credential and token …
- Phishing campaign abuses Google Cloud Application to impersonate legitimate Google emails
A phishing campaign is abusing Google Cloud Application Integration to send emails that impersonate legitimate Google messages, utilizing layered redirection …
- Covenant Health data breach after ransomware attack impacted over 478,000 people
The Qilin ransomware group claimed responsibility for a data breach at Covenant Health in May 2025, impacting over 478,000 individuals. The compromised data …
- GitHub - DNSZLSK/muad-dib: Supply-chain threat detection & response for npm. Detects Shai-Hulud, typosquatting, credential theft, and more.
MUAD’DIB is an open-source tool designed for supply-chain threat detection and response specifically for npm packages. It offers advanced features like AST …
- Why 47-Day TLS and SSL Certificate Renewal Cycles Alarm CIOs
The shift to 47-day TLS/SSL certificate renewal cycles by 2029 presents a significant operational risk for CIOs, as manual processes and lack of automation and …
- Sony faces an unfixable PS5 vulnerability as BootROM keys are dumped and shared publicly - NotebookCheck.net News
A leaked set of PlayStation 5 BootROM keys has exposed core security vulnerabilities that Sony cannot easily patch on existing consoles. While not enabling an …
- Risky Bulletin: US lifts sanctions on three Intellexa execs
The US lifted sanctions on three Intellexa executives, citing their distance from the company. Additionally, the US charged a New York man for social …
- Everest Ransomware Leaks 1TB of Stolen ASUS Data – Hackread – Cybersecurity News, Data Breaches, AI, and More
The Everest ransomware group has leaked 1TB of stolen ASUS data, including information on AI models, memory dumps, and calibration files, after ASUS failed to …
- Handala Hack: Telegram Breach of Israeli Officials
The Handala Hack targeted Israeli officials by compromising their Telegram accounts, not their devices, likely through session hijacking and social …
- The “AI will replace 10 per cent of jobs” headline is engineered for clicks, not clarity.
When you audit the primary sources, that number is exposure, not unemployment—and the real story is adoption speed, not doomsday. If you want a grounded view of …
- RondoDox botnet exploits React2Shell
RondoDox botnet exploits React2Shell flaw to breach Next.js servers www.bleepingcomputer.com/news/secu… The RondoDox botnet has been observed exploiting the …
- Finland seizes ship suspected of damaging subsea cable
Finland seizes ship suspected of damaging subsea cable in Baltic Sea therecord.media/finland-s… Finnish authorities said Wednesday they had seized a ship …
- New GlassWorm malware
New GlassWorm malware wave targets Macs with trojanized crypto wallets www.bleepingcomputer.com/news/secu… A fourth wave of the “GlassWorm” campaign is …