Port 22

~ 28 Jan 2026 ~

Old Windows quirks help punch through new admin defenses

Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected

Love? Actually: Fake dating app used as lure in targeted spyware campaign in Pakistan

~ 27 Jan 2026 ~

WhatsApp Rolls Out Lockdown-Style Security Mode to Protect Targeted Users From Spyware

Paranoid WhatsApp users rejoice: Encrypted app gets one-click privacy toggle

Experts Detect Pakistan-Linked Cyber Campaigns Aimed at Indian Government Entities

ClickFix Attacks Expand Using Fake CAPTCHAs, Microsoft Scripts, and Trusted Web Services

Let them eat sourdough: ShinyHunters claims Panera Bread as stolen credentials victim

CTEM in Practice: Prioritization, Validation, and Outcomes That Matter

Microsoft announces the 2026 Security Excellence Awards winners

Critical Grist-Core Vulnerability Allows RCE Attacks via Spreadsheet Formulas

China-linked group accused of spying on phones of UK prime ministers' aides for years

China-Linked Hackers Have Used the PeckBirdy JavaScript C2 Framework Since 2023

France to replace US videoconferencing wares with unfortunately named sovereign alternative

Microsoft Office Zero-Day (CVE-2026-21509) - Emergency Patch Issued for Active Exploitation

Microsoft illegally installed cookies on schoolkid's tech, data protection ruling finds

The Constitutionality of Geofence Warrants

Schneider Electric Zigbee Products

Johnson Controls Metasys Products

iba Systems ibaPDA

Festo Didactic SE MES PC

High Court to grill London cops over live facial recognition creep

Revealed: Leaked Chats Expose the Daily Life of a Scam Compounds Enslaved Workforce

He Leaked the Secrets of a Southeast Asian Scam Compound. Then He Had to Get Out Alive

Office zero-day exploited in the wild forces Microsoft OOB patch

Drowning in spam or scam emails? Heres probably why

HoneyMyte updates CoolClient and deploys multiple stealers in recent campaigns

~ 26 Jan 2026 ~

Judge Delays Minnesota ICE Decision While Weighing Whether State Was Being Illegally Punished

Canva among ~100 targets of ShinyHunters Okta identity-theft campaign

Indian Users Targeted in Tax Phishing Campaign Delivering Blackmoon Malware

Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code

Peoples Consultation on AI Now Accepting Submissions

Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More

Winning Against AI-Based Attacks Requires a Combined Defensive Approach

Security strategies for safeguarding governmental data

Perpetrators and Methods of Transnational Repression and Possible Counter Strategies

Who Operates the Badbox 2.0 Botnet?

Konni Hackers Deploy AI-Generated PowerShell Backdoor Against Blockchain Developers

EU looking into Elon Musk's X after Grok produces deepfake sex images

Data thieves borrow Nike's 'Just Do It' mantra, claim they ran off with 1.4TB

Ireland Proposes Giving Police New Digital Surveillance Powers

Moscow likely behind wiper attack on Polands power grid, experts say

Deepfake Nudify Technology Is Getting Darkerand More Dangerous

Oracle AI sailed the world on Royal Navy flagship via cloud-at-the-edge kit

UK digital ID goes in-house, government swears it isn't an ID card

~ 25 Jan 2026 ~

Pwn2Own Automotive 2026 uncovers 76 zero-days, pays out more than $1M

The Instant Smear Campaign Against Border Patrol Shooting Victim Alex Pretti

~ 24 Jan 2026 ~

ICE Asks Companies About Ad Tech and Big Data Tools It Could Use in Investigations

Multi-Stage Phishing Campaign Targets Russia with Amnesia RAT and Ransomware

New DynoWiper Malware Used in Attempted Sandworm Attack on Polish Power Sector

Who Approved This Agent? Rethinking Access, Accountability, and Risk in the Age of AI Agents

CISA Adds Actively Exploited VMware vCenter Flaw CVE-2024-37079 to KEV Catalog

DOGE May Have Misused Social Security Data, DOJ Admits

UK border tech budget swells by 100M as Home Office targets small boat crossings

CISA won't attend infosec industry's biggest conference this year

~ 23 Jan 2026 ~

US Judge Rules ICE Raids Require Judicial Warrants, Contradicting Secret ICE Memo

Patch or die: VMware vCenter Server bug fixed in 2024 under attack today

Friday Squid Blogging: Giant Squid in the Star Trek Universe

What Carney didnt say in Davos is what the world needed to hear most

From runtime risk to realtime defense: Securing AI agents

CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities

Surrender as a service: Microsoft unlocks BitLocker for feds

Evan Solomon Wants Canada to Trust AI. Can We Trust Evan Solomon?

ShinyHunters claims Okta customer breaches, leaks data belonging to 3 orgs

Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate Firewalls

AI-powered cyberattack kits are 'just a matter of time,' warns Google exec

CBP Wants AI-Powered Quantum Sensors for Finding Fentanyl in Cars

TikTok Forms U.S. Joint Venture to Continue Operations Under 2025 Executive Order

ESET Research: Sandworm behind cyberattack on Polands power grid in late 2025

Phishing Attack Uses Stolen Credentials to Install LogMeIn RMM for Persistent Access

Microsoft Flags Multi-Stage AitM Phishing and BEC Attacks Targeting Energy Firms

Fortinet admits FortiGate SSO bug still exploitable despite December patch

AIs are Getting Better at Finding and Exploiting Internet Vulnerabilities

149 Million Usernames and Passwords Exposed by Unsecured Database

London boroughs limping back online months after cyberattack

Children and chatbots: What parents should know

Marching orders delayed: Veterans' Digital ID off to a slow start

~ 22 Jan 2026 ~

New Osiris Ransomware Emerges as New Strain Using POORTRY Driver in BYOVD Attack

Crims hit the easy button for Scattered-Spider style helpdesk scams

Critical GNU InetUtils telnetd Flaw Lets Attackers Bypass Login and Gain Root Access

ThreatsDay Bulletin: Pixel Zero-Click, Redis RCE, China C2s, RAT Ads, Crypto Scams & 15+ Stories

Crims compromised energy firms' Microsoft accounts, sent 600 phishing emails

ICE Agents Are Doxing Themselves

Microsoft Security success stories: Why integrated security is the foundation of AI transformation

Filling the Most Common Gaps in Google Workspace Security

FortiGate firewalls hit by silent SSO intrusions and config theft

Malicious PyPI Package Impersonates SymPy, Deploys XMRig Miner on Linux Hosts

SmarterMail Auth Bypass Exploited in the Wild Two Days After Patch Release

Europe's GDPR cops dished out 1.2B in fines last year as data breaches piled up

Bank of England: Financial sector failing to implement basic cybersecurity controls

Why AI Keeps Falling for Prompt Injection Attacks

Ancient telnet bug happily hands out root to attackers

Weintek cMT X Series HMI EasyWeb Service

Schneider Electric EcoStruxure Process Expert

Rockwell Automation CompactLogix 5370

Johnson Controls Inc. iSTAR Configuration Utility (ICU) tool

Hubitat Elevation Hubs

EVMAPA

Delta Electronics DIAView

AutomationDirect CLICK Programmable Logic Controller