Port 22

~ 13 Jan 2026 ~

Mandiant open sources tool to prevent leaky Salesforce misconfigs

Court tosses appeal by hacker who opened port to coke smugglers with malware

1980s Hacker Manifesto

What to Do If ICE Invades Your Neighborhood

Britain goes shopping for a rapid-fire missile to help Ukraine hit back

Your personal information is on the dark web. What happens next?

India demands crypto outfits geolocate customers, get a selfie to prove theyre real

~ 12 Jan 2026 ~

Minnesota Sues to Stop ICE Invasion

No fire sale for firewalls as memory shortages could push prices higher

'Violence-as-a-service' suspect arrested in Iraq, extradition underway

FBI Agents Sworn Testimony Contradicts Claims ICEs Jonathan Ross Made Under Oath

n8n Supply Chain Attack Abuses Community Nodes to Steal OAuth Tokens

Weekly Recap: AI Automation Exploits, Telecom Espionage, Prompt Poaching & More

GoFundMe Ignores Own Rules by Hosting a Legal-Defense Fund for the ICE Agent Who Killed Renee Good

Businesses in 2026: Maybe we should finally look into that AI security stuff

Block CISO: We red-teamed our own AI agent to run an infostealer on an employee laptop

GoBruteforcer Botnet Targets Crypto Project Databases by Exploiting Weak Credentials

Anthropic Launches Claude AI for Healthcare with Secure Health Record Access

Infamous BreachForums forum breached, spilling data on 325K users

Researchers Uncover Service Providers Fueling Industrial-Scale Pig Butchering Fraud

Ofcom officially investigating X as Grok's nudify button stays switched on

Corrupting LLMs Through Weird Generalizations

Tories vow to boot under-16s off social media and ban phones in schools

Indias government denies it plans to demand smartphone source code

Malaysia and Indonesia block X over failure to curb deepfake smut

~ 11 Jan 2026 ~

Meta admits to Instagram password reset mess, denies data leak

~ 10 Jan 2026 ~

MuddyWater Launches RustyWater RAT via Spear-Phishing Across Middle East Sectors

Europol Arrests 34 Black Axe Members in Spain Over 5.9M Fraud and Organized Crime

Security News This Week: ICE Can Now Spy on Every Phone in Your Neighborhood

UK government exempting itself from flagship cyber law inspires little confidence

~ 9 Jan 2026 ~

China-Linked Hackers Exploit VMware ESXi Zero-Days to Escape Virtual Machines

Friday Squid Blogging: The Chinese Squid-Fishing Fleet off the Argentine Coast

How hackers are fighting back against ICE surveillance tech

Russian APT28 Runs Credential-Stealing Campaign Targeting Energy and Policy Organizations

Cybersecurity Predictions 2026: The Hype We Can Ignore (And the Risks We Can't)

Putinswap: France trades alleged ransomware crook for conflict researcher

QR codes a powerful new phishing weapon in hands of Pyongyang cyberspies

Trend Micro Apex Central RCE Flaw Scores 9.8 CVSS in On-Prem Windows Versions

X Didn't Fix Grok's Undressing Problem. It Just Makes People Pay for It

CISA Retires 10 Emergency Cybersecurity Directives Issued Between 2019 and 2024

China-linked cybercrims abused VMware ESXi zero-days a year before disclosure

Palo Alto Crosswalk Signals Had Default Passwords

FBI Warns North Korean Hackers Using Malicious QR Codes in Spear-Phishing

Grok told to cover up as UK weighs action over AI 'undressing'

Help desk read irrelevant script, so techies found and fixed their own problem

ICE Agent Who Reportedly Shot Renee Good Was a Firearms Trainer, Per Testimony

~ 8 Jan 2026 ~

Who Benefited from the Aisuru and Kimwolf Botnets?

WhatsApp Worm Spreads Astaroth Banking Trojan Across Brazil via Contact Auto-Messaging

As agents run amok, CrowdStrike's $740M SGNL deal aims to help get a grip on identity security

China-Linked UAT-7290 Targets Telecoms with Linux Malware and ORB Nodes

Patch Cisco ISE bug now before attackers abuse proof-of-concept exploit

ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More Stories

The State of Trusted Open Source

Cisco Patches ISE Security Vulnerability After Public PoC Exploit Release

Researchers Uncover NodeCordRAT Hidden in npm Bitcoin-Themed Packages

Coolify Discloses 11 Critical Flaws Enabling Full Server Compromise on Self-Hosted Instances

Ransomware attacks kept climbing in 2025 as gangs refused to stay dead

CISA flags actively exploited Office relic alongside fresh HPE flaw

UK regulators swarm X after Grok generated nudes from photos

OpenAI Launches ChatGPT Health with Isolated, Encrypted Health Data Controls

AI & Humans: Making the Relationship Work

Maximum-severity n8n flaw lets randos run your automation server

OpenAI putting bandaids on bandaids as prompt injection problems keep festering

Are criminals vibe coding malware? All signs point to yes

CISA Flags Microsoft Office and HPE OneView Bugs as Actively Exploited

Credential stuffing: What it is and how to protect yourself

Logitech macOS mouse mayhem traced to expired dev certificate

Cloudflare pours cold water on BGP weirdness preceded US attack on Venezuela theory

~ 7 Jan 2026 ~

Black Cat Behind SEO Poisoning Malware Campaign Targeting Popular Software Searches

IBM's AI agent Bob easily duped to run malware, researchers show

Grok Is Generating Sexual Content Far More Graphic Than What's on X

Job Opportunity: Citizen Lab Research Officer in the Area of Spyware and Digital Targeted Threats

Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full Control

ESA calls cops as crims lift off 500 GB of files, say security black hole still open

Stalkerware slinger pleads guilty for selling snooper software to suspicious spouses

Webinar: Learn How AI-Powered Zero Trust Detects Attacks with No Files or Indicators

Explore the latest Microsoft Incident Response proactive services for enhanced resilience

n8n Warns of CVSS 10.0 RCE Vulnerability Affecting Self-Hosted and Cloud Versions

The Future of Cybersecurity Includes Non-Human Employees

Veeam Patches Critical RCE Vulnerability with CVSS 9.0 in Backup & Replication

Microsoft scraps Exchange Online spam clamp after customers cry foul

Microsoft Warns Misconfigured Email Routing Can Enable Internal Domain Phishing

Ministry of Justice splurged 50M on security still missed Legal Aid Agency cyberattack

The Wegmans Supermarket Chain Is Probably Using Facial Recognition

Jaguar Land Rover wholesale volumes plummet 43% in cyberattack aftermath

HSBC app takes a dim view of sideloaded Bitwarden installations

Ongoing Attacks Exploiting Critical RCE Vulnerability in Legacy D-Link DSL Routers

HackerOne 'ghosted' me for months over $8,500 bug bounty, says researcher

~ 6 Jan 2026 ~

Two Chrome Extensions Caught Stealing ChatGPT and DeepSeek Chats from 900,000 Users

Grok Is Pushing AI Undressing Mainstream

Unpatched Firmware Flaw Exposes TOTOLINK EX200 to Full Remote Device Takeover

Brightspeed investigates breach as crims post stolen data for sale

Phishing actors exploit complex routing and misconfigurations to spoof domains

Civil Society and Access to Justice: Challenges of Seeking Remedy in the Global Fight Against Spyware

Fake Booking Emails Redirect Hotel Staff to Fake BSoD Pages Delivering DCRat

Meet the Man Hunting Spies in Your Smartphone

Meet the Man Hunting Spies in Your Smartphone: MIT Tech Review

What is Identity Dark Matter?

Introducing the Microsoft Defender Experts Suite: Elevate your security with expert-led services

VS Code Forks Recommend Missing Extensions, Creating Supply Chain Risk in Open VSX