Port 22

~ 26 Jan 2026 ~

Canva among ~100 targets of ShinyHunters Okta identity-theft campaign

Indian Users Targeted in Tax Phishing Campaign Delivering Blackmoon Malware

Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code

Peoples Consultation on AI Now Accepting Submissions

Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More

Winning Against AI-Based Attacks Requires a Combined Defensive Approach

Security strategies for safeguarding governmental data

Perpetrators and Methods of Transnational Repression and Possible Counter Strategies

Who Operates the Badbox 2.0 Botnet?

Konni Hackers Deploy AI-Generated PowerShell Backdoor Against Blockchain Developers

EU looking into Elon Musk's X after Grok produces deepfake sex images

Data thieves borrow Nike's 'Just Do It' mantra, claim they ran off with 1.4TB

Ireland Proposes Giving Police New Digital Surveillance Powers

Moscow likely behind wiper attack on Polands power grid, experts say

Deepfake Nudify Technology Is Getting Darkerand More Dangerous

Oracle AI sailed the world on Royal Navy flagship via cloud-at-the-edge kit

UK digital ID goes in-house, government swears it isn't an ID card

~ 25 Jan 2026 ~

Pwn2Own Automotive 2026 uncovers 76 zero-days, pays out more than $1M

The Instant Smear Campaign Against Border Patrol Shooting Victim Alex Pretti

~ 24 Jan 2026 ~

ICE Asks Companies About Ad Tech and Big Data Tools It Could Use in Investigations

Multi-Stage Phishing Campaign Targets Russia with Amnesia RAT and Ransomware

New DynoWiper Malware Used in Attempted Sandworm Attack on Polish Power Sector

Who Approved This Agent? Rethinking Access, Accountability, and Risk in the Age of AI Agents

CISA Adds Actively Exploited VMware vCenter Flaw CVE-2024-37079 to KEV Catalog

DOGE May Have Misused Social Security Data, DOJ Admits

UK border tech budget swells by 100M as Home Office targets small boat crossings

CISA won't attend infosec industry's biggest conference this year

~ 23 Jan 2026 ~

US Judge Rules ICE Raids Require Judicial Warrants, Contradicting Secret ICE Memo

Patch or die: VMware vCenter Server bug fixed in 2024 under attack today

Friday Squid Blogging: Giant Squid in the Star Trek Universe

What Carney didnt say in Davos is what the world needed to hear most

From runtime risk to realtime defense: Securing AI agents

CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities

Surrender as a service: Microsoft unlocks BitLocker for feds

Evan Solomon Wants Canada to Trust AI. Can We Trust Evan Solomon?

ShinyHunters claims Okta customer breaches, leaks data belonging to 3 orgs

Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate Firewalls

AI-powered cyberattack kits are 'just a matter of time,' warns Google exec

CBP Wants AI-Powered Quantum Sensors for Finding Fentanyl in Cars

TikTok Forms U.S. Joint Venture to Continue Operations Under 2025 Executive Order

ESET Research: Sandworm behind cyberattack on Polands power grid in late 2025

Phishing Attack Uses Stolen Credentials to Install LogMeIn RMM for Persistent Access

Microsoft Flags Multi-Stage AitM Phishing and BEC Attacks Targeting Energy Firms

Fortinet admits FortiGate SSO bug still exploitable despite December patch

AIs are Getting Better at Finding and Exploiting Internet Vulnerabilities

149 Million Usernames and Passwords Exposed by Unsecured Database

London boroughs limping back online months after cyberattack

Children and chatbots: What parents should know

Marching orders delayed: Veterans' Digital ID off to a slow start

~ 22 Jan 2026 ~

New Osiris Ransomware Emerges as New Strain Using POORTRY Driver in BYOVD Attack

Crims hit the easy button for Scattered-Spider style helpdesk scams

Critical GNU InetUtils telnetd Flaw Lets Attackers Bypass Login and Gain Root Access

ThreatsDay Bulletin: Pixel Zero-Click, Redis RCE, China C2s, RAT Ads, Crypto Scams & 15+ Stories

Crims compromised energy firms' Microsoft accounts, sent 600 phishing emails

ICE Agents Are Doxing Themselves

Microsoft Security success stories: Why integrated security is the foundation of AI transformation

Filling the Most Common Gaps in Google Workspace Security

FortiGate firewalls hit by silent SSO intrusions and config theft

Malicious PyPI Package Impersonates SymPy, Deploys XMRig Miner on Linux Hosts

SmarterMail Auth Bypass Exploited in the Wild Two Days After Patch Release

Europe's GDPR cops dished out 1.2B in fines last year as data breaches piled up

Bank of England: Financial sector failing to implement basic cybersecurity controls

Why AI Keeps Falling for Prompt Injection Attacks

Ancient telnet bug happily hands out root to attackers

Automated FortiGate Attacks Exploit FortiCloud SSO to Alter Firewall Configurations

Another week, another emergency patch as Cisco plugs Unified Comms zero-day

Common Apple Pay scams, and how to stay safe

Cisco Fixes Actively Exploited Zero-Day CVE-2026-20045 in Unified CM and Webex

Resurgence of a multistage AiTM phishing and BEC campaign abusing SharePoint

~ 21 Jan 2026 ~

Davos discussion mulls how to keep AI agents from running wild

North Korean PurpleBravo Campaign Targeted 3,136 IP Addresses via Fake Job Interviews

Zoom and GitLab Release Security Updates Fixing RCE, DoS, and 2FA Bypass Flaws

Don't click on the LastPass 'create backup' link - it's a scam

Surveillance and ICE Are Driving Patients Away From Medical Care, Report Warns

Webinar: How Smart MSSPs Using AI to Boost Margins with Half the Staff

Exposure Assessment Platforms Signal a Shift in Focus

Everest ransomware gang said to be sitting on mountain of Under Armour data

Chainlit AI Framework Flaws Enable Data Theft via File Read and SSRF Bugs

A new era of agents, a new era of posture

VoidLink Linux Malware Framework Built with AI Assistance Reaches 88,000 Lines of Code

EU considers whether there's Huawei of axing Chinese kit from networks within 3 years

Ireland wants to give its cops spyware, ability to crack encrypted messages

Best of British: UK's infosec envoys include Cisco, Palo Alto, and Accenture

LastPass Warns of Fake Maintenance Messages Targeting Users Master Passwords

Internet Voting is Too Insecure for Use in Elections

CERT/CC Warns binary-parser Bug Allows Node.js Privilege-Level Code Execution

Curl shutters bug bounty program to remove incentive for submitting AI slop

North Korea-Linked Hackers Target Developers via Malicious VS Code Projects

~ 20 Jan 2026 ~

Cloudflare whacks WAF bypass bug that opened side door for attackers

Chasing Shadows Out Now in Paperback

Three Flaws in Anthropic MCP Git Server Enable File Access and Code Execution

Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading

ICE Details a New Minnesota-Based Detention Network That Spans 5 States

Remember VoidLink, the cloud-targeting Linux malware? An AI agent wrote it

Kimwolf Botnet Lurking in Corporate, Govt. Networks

The Hidden Risk of Orphan Accounts

Evelyn Stealer Malware Abuses VS Code Extensions to Steal Developer Credentials and Crypto

Four priorities for AI-powered identity and network access security in 2026

Cloudflare Fixes ACME Validation Bug Allowing WAF Bypass to Origin Servers

Why Secrets in JavaScript Bundles are Still Being Missed