Port 22

~ 30 Jan 2026 ~

Java developers want container security, just not the job that comes with it

Researchers Find 175,000 Publicly Exposed Ollama AI Servers Across 130 Countries

~ 29 Jan 2026 ~

Maybe CISA should take its own advice about insider threats hmmm?

Turning threat reports into detection insights with AI

ThreatsDay Bulletin: New RCEs, Darknet Busts, Kernel Bugs & 25+ More Stories

ICE Pretends Its a Military Force. Its Tactics Would Get Real Soldiers Killed

Survey of 100+ Energy Systems Reveals Critical OT Cybersecurity Gaps

To stop crims, Google starts dismantling residential proxy network they use to hide

New Microsoft Data Security Index report explores secure AI adoption to protect sensitive data

An AI Toy Exposed 50,000 Logs of Its Chats With Kids to Anyone With a Gmail Account

AV vendor goes to war with security shop over update server scare

Seven habits that help security teams reduce risk without slowing delivery

3 Decisions CISOs Need to Make to Prevent Downtime Risk in 2026

Supply chain attack on eScan antivirus: detecting and remediating malicious updates

ShinyHunters swipes right on 10M records in alleged dating app data grab

SolarWinds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth Bypass

Patch or perish: Vulnerability exploits now dominate intrusions

Google Disrupts IPIDEA One of the Worlds Largest Residential Proxy Networks

Cyberattack on Poland's power grid could have turned deadly in winter cold

~ 28 Jan 2026 ~

Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware

ICE Is Using Palantirs AI Tools to Sort Through Tips

Russian ELECTRUM Tied to December 2025 Cyber Attack on Polish Power Grid

Ransomware crims forced to take off-RAMP as FBI seizes forum

Want the Federal Government to Hear Your Thoughts on AI?: New Consultation Launched

Here's the Company That Sold DHS ICE's Notorious Face Recognition App

Critical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code Execution

Everybody is WinRAR phishing, dropping RATs as fast as lightning

Two High-Severity n8n Flaws Allow Authenticated Remote Code Execution

From Triage to Threat Hunts: How AI Accelerates SecOps

Mustang Panda Deploys Updated COOLCLIENT Backdoor in Government Cyber Attacks

Fortinet unearths another critical bug as SSO accounts borked post-patch

Password Reuse in Disguise: An Often-Missed Risky Workaround

Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025-8088

Fake Python Spellchecker Packages on PyPI Delivered Hidden Remote Access Trojan

Old Windows quirks help punch through new admin defenses

Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected

Love? Actually: Fake dating app used as lure in targeted spyware campaign in Pakistan

~ 27 Jan 2026 ~

WhatsApp Rolls Out Lockdown-Style Security Mode to Protect Targeted Users From Spyware

Paranoid WhatsApp users rejoice: Encrypted app gets one-click privacy toggle

Experts Detect Pakistan-Linked Cyber Campaigns Aimed at Indian Government Entities

ClickFix Attacks Expand Using Fake CAPTCHAs, Microsoft Scripts, and Trusted Web Services

Let them eat sourdough: ShinyHunters claims Panera Bread as stolen credentials victim

CTEM in Practice: Prioritization, Validation, and Outcomes That Matter

Microsoft announces the 2026 Security Excellence Awards winners

Critical Grist-Core Vulnerability Allows RCE Attacks via Spreadsheet Formulas

China-linked group accused of spying on phones of UK prime ministers' aides for years

China-Linked Hackers Have Used the PeckBirdy JavaScript C2 Framework Since 2023

France to replace US videoconferencing wares with unfortunately named sovereign alternative

Microsoft Office Zero-Day (CVE-2026-21509) - Emergency Patch Issued for Active Exploitation

Microsoft illegally installed cookies on schoolkid's tech, data protection ruling finds

The Constitutionality of Geofence Warrants

High Court to grill London cops over live facial recognition creep

Revealed: Leaked Chats Expose the Daily Life of a Scam Compounds Enslaved Workforce

He Leaked the Secrets of a Southeast Asian Scam Compound. Then He Had to Get Out Alive

Office zero-day exploited in the wild forces Microsoft OOB patch

Drowning in spam or scam emails? Heres probably why

HoneyMyte updates CoolClient and deploys multiple stealers in recent campaigns

~ 26 Jan 2026 ~

Judge Delays Minnesota ICE Decision While Weighing Whether State Was Being Illegally Punished

Canva among ~100 targets of ShinyHunters Okta identity-theft campaign

Indian Users Targeted in Tax Phishing Campaign Delivering Blackmoon Malware

Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code

Peoples Consultation on AI Now Accepting Submissions

Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More

Winning Against AI-Based Attacks Requires a Combined Defensive Approach

Security strategies for safeguarding governmental data

Perpetrators and Methods of Transnational Repression and Possible Counter Strategies

Who Operates the Badbox 2.0 Botnet?

Konni Hackers Deploy AI-Generated PowerShell Backdoor Against Blockchain Developers

EU looking into Elon Musk's X after Grok produces deepfake sex images

Data thieves borrow Nike's 'Just Do It' mantra, claim they ran off with 1.4TB

Ireland Proposes Giving Police New Digital Surveillance Powers

Moscow likely behind wiper attack on Polands power grid, experts say

Deepfake Nudify Technology Is Getting Darkerand More Dangerous

Oracle AI sailed the world on Royal Navy flagship via cloud-at-the-edge kit

UK digital ID goes in-house, government swears it isn't an ID card

~ 25 Jan 2026 ~

Pwn2Own Automotive 2026 uncovers 76 zero-days, pays out more than $1M

The Instant Smear Campaign Against Border Patrol Shooting Victim Alex Pretti

~ 24 Jan 2026 ~

ICE Asks Companies About Ad Tech and Big Data Tools It Could Use in Investigations

Multi-Stage Phishing Campaign Targets Russia with Amnesia RAT and Ransomware

New DynoWiper Malware Used in Attempted Sandworm Attack on Polish Power Sector

Who Approved This Agent? Rethinking Access, Accountability, and Risk in the Age of AI Agents

CISA Adds Actively Exploited VMware vCenter Flaw CVE-2024-37079 to KEV Catalog

DOGE May Have Misused Social Security Data, DOJ Admits

UK border tech budget swells by 100M as Home Office targets small boat crossings

CISA won't attend infosec industry's biggest conference this year

~ 23 Jan 2026 ~

US Judge Rules ICE Raids Require Judicial Warrants, Contradicting Secret ICE Memo

Patch or die: VMware vCenter Server bug fixed in 2024 under attack today

Friday Squid Blogging: Giant Squid in the Star Trek Universe

What Carney didnt say in Davos is what the world needed to hear most

From runtime risk to realtime defense: Securing AI agents

CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities

Surrender as a service: Microsoft unlocks BitLocker for feds

Evan Solomon Wants Canada to Trust AI. Can We Trust Evan Solomon?

ShinyHunters claims Okta customer breaches, leaks data belonging to 3 orgs

Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate Firewalls

AI-powered cyberattack kits are 'just a matter of time,' warns Google exec

CBP Wants AI-Powered Quantum Sensors for Finding Fentanyl in Cars

TikTok Forms U.S. Joint Venture to Continue Operations Under 2025 Executive Order

ESET Research: Sandworm behind cyberattack on Polands power grid in late 2025

Phishing Attack Uses Stolen Credentials to Install LogMeIn RMM for Persistent Access