Port 22

~ 2 Feb 2026 ~

Infostealers without borders: macOS, Python stealers, and platform abuse

StopICE hacked to send alarming text messages, admins accuse border patrol agent of sabotage

Russia-linked APT28 attackers already abusing new Microsoft Office zero-day

Weekly Recap: Proxy Botnet, Office Zero-Day, MongoDB Ransoms, AI Hijacks & New Threats

Securing the Mid-Market Across the Complete Threat Lifecycle

McDonald's is not lovin' your bigmac, happymeal, and mcnuggets passwords

Please Dont Feed the Scattered Lapsus Shiny Hunters

Saudi Arabia Ordered to Pay 3m to London Dissident Over Pegasus Spying

Notepad++ Official Update Mechanism Hijacked to Deliver Malware to Select Users

OpenClaw patches one-click RCE as security Whac-A-Mole continues

Notepad++ update service hijacked in targeted state-linked attack

AI Coding Assistants Secretly Copying All Code to China

eScan Antivirus Update Servers Compromised to Deliver Multi-Stage Malware

ICE and Qatari Security Forces at the Winter Olympics Put Italians on Edge

Open VSX Supply Chain Attack Used Compromised Dev Account to Spread GlassWorm

Infrastructure cyberattacks are suddenly in fashion. We can buck the trend

A slippery slope: Beware of Winter Olympics scams and other cyberthreats

Why native cloud security falls short

I have a new blog: Traces of Humanity!

~ 1 Feb 2026 ~

Open-source AI is a global security nightmare waiting to happen, say researchers

AI security startup CEO posts a job. Deepfake candidate applies, inner turmoil ensues.

~ 31 Jan 2026 ~

Iran-Linked RedKitten Cyber Campaign Targets Human Rights NGOs and Activists

Mandiant Finds ShinyHunters-Style Vishing Attacks Stealing MFA to Breach SaaS Platforms

CERT Polska Details Coordinated Cyber Attacks on 30+ Wind and Solar Farms

Jeffrey Epstein Had a Personal Hacker, Informant Claims

How to Film ICE

~ 30 Jan 2026 ~

Friday Squid Blogging: New Squid Species Discovered

January blues return as Ivanti coughs up exploited EPMM zero-days

Researchers Uncover Chrome Extensions Abusing Affiliate Links and Stealing ChatGPT Access

Case study: Securing AI application supply chains

Thousands more Oregon residents learn their health data was stolen in TriZetto breach

China-Linked UAT-8099 Targets IIS Servers in Asia with BadIIS SEO Malware

Badges, Bytes and Blackmail

AIs Are Getting Better at Finding and Exploiting Security Vulnerabilities

This month in security with Tony Anscombe January 2026 edition

Ex-Google Engineer Convicted for Stealing 2,000 AI Trade Secrets for China Startup

SmarterMail Fixes Critical Unauthenticated RCE Flaw with CVSS 9.3 Score

DynoWiper update: Technical analysis and attribution

Two Ivanti EPMM Zero-Day RCE Flaws Actively Exploited, Security Updates Released

Java developers want container security, just not the job that comes with it

Researchers Find 175,000 Publicly Exposed Ollama AI Servers Across 130 Countries

~ 29 Jan 2026 ~

Maybe CISA should take its own advice about insider threats hmmm?

Turning threat reports into detection insights with AI

ThreatsDay Bulletin: New RCEs, Darknet Busts, Kernel Bugs & 25+ More Stories

ICE Pretends Its a Military Force. Its Tactics Would Get Real Soldiers Killed

Survey of 100+ Energy Systems Reveals Critical OT Cybersecurity Gaps

To stop crims, Google starts dismantling residential proxy network they use to hide

New Microsoft Data Security Index report explores secure AI adoption to protect sensitive data

An AI Toy Exposed 50,000 Logs of Its Chats With Kids to Anyone With a Gmail Account

AV vendor goes to war with security shop over update server scare

Seven habits that help security teams reduce risk without slowing delivery

3 Decisions CISOs Need to Make to Prevent Downtime Risk in 2026

Supply chain attack on eScan antivirus: detecting and remediating malicious updates

ShinyHunters swipes right on 10M records in alleged dating app data grab

SolarWinds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth Bypass

Patch or perish: Vulnerability exploits now dominate intrusions

Google Disrupts IPIDEA One of the Worlds Largest Residential Proxy Networks

Cyberattack on Poland's power grid could have turned deadly in winter cold

~ 28 Jan 2026 ~

Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware

ICE Is Using Palantirs AI Tools to Sort Through Tips

Russian ELECTRUM Tied to December 2025 Cyber Attack on Polish Power Grid

Ransomware crims forced to take off-RAMP as FBI seizes forum

Want the Federal Government to Hear Your Thoughts on AI?: New Consultation Launched

Here's the Company That Sold DHS ICE's Notorious Face Recognition App

Critical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code Execution

Everybody is WinRAR phishing, dropping RATs as fast as lightning

Two High-Severity n8n Flaws Allow Authenticated Remote Code Execution

From Triage to Threat Hunts: How AI Accelerates SecOps

Mustang Panda Deploys Updated COOLCLIENT Backdoor in Government Cyber Attacks

Fortinet unearths another critical bug as SSO accounts borked post-patch

Password Reuse in Disguise: An Often-Missed Risky Workaround

Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025-8088

Fake Python Spellchecker Packages on PyPI Delivered Hidden Remote Access Trojan

Old Windows quirks help punch through new admin defenses

Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected

Love? Actually: Fake dating app used as lure in targeted spyware campaign in Pakistan

~ 27 Jan 2026 ~

WhatsApp Rolls Out Lockdown-Style Security Mode to Protect Targeted Users From Spyware

Paranoid WhatsApp users rejoice: Encrypted app gets one-click privacy toggle

Experts Detect Pakistan-Linked Cyber Campaigns Aimed at Indian Government Entities

ClickFix Attacks Expand Using Fake CAPTCHAs, Microsoft Scripts, and Trusted Web Services

Let them eat sourdough: ShinyHunters claims Panera Bread as stolen credentials victim

CTEM in Practice: Prioritization, Validation, and Outcomes That Matter

Microsoft announces the 2026 Security Excellence Awards winners

Critical Grist-Core Vulnerability Allows RCE Attacks via Spreadsheet Formulas

China-linked group accused of spying on phones of UK prime ministers' aides for years

China-Linked Hackers Have Used the PeckBirdy JavaScript C2 Framework Since 2023

France to replace US videoconferencing wares with unfortunately named sovereign alternative

Microsoft Office Zero-Day (CVE-2026-21509) - Emergency Patch Issued for Active Exploitation

Microsoft illegally installed cookies on schoolkid's tech, data protection ruling finds

The Constitutionality of Geofence Warrants

High Court to grill London cops over live facial recognition creep

Revealed: Leaked Chats Expose the Daily Life of a Scam Compounds Enslaved Workforce

He Leaked the Secrets of a Southeast Asian Scam Compound. Then He Had to Get Out Alive

Office zero-day exploited in the wild forces Microsoft OOB patch

Drowning in spam or scam emails? Heres probably why

HoneyMyte updates CoolClient and deploys multiple stealers in recent campaigns

~ 26 Jan 2026 ~

Judge Delays Minnesota ICE Decision While Weighing Whether State Was Being Illegally Punished

Canva among ~100 targets of ShinyHunters Okta identity-theft campaign

Indian Users Targeted in Tax Phishing Campaign Delivering Blackmoon Malware

Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code