Port 22

~ 22 Jan 2026 ~

Automated FortiGate Attacks Exploit FortiCloud SSO to Alter Firewall Configurations

Another week, another emergency patch as Cisco plugs Unified Comms zero-day

Common Apple Pay scams, and how to stay safe

Cisco Fixes Actively Exploited Zero-Day CVE-2026-20045 in Unified CM and Webex

Resurgence of a multistage AiTM phishing and BEC campaign abusing SharePoint

~ 21 Jan 2026 ~

Davos discussion mulls how to keep AI agents from running wild

North Korean PurpleBravo Campaign Targeted 3,136 IP Addresses via Fake Job Interviews

Zoom and GitLab Release Security Updates Fixing RCE, DoS, and 2FA Bypass Flaws

Don't click on the LastPass 'create backup' link - it's a scam

Surveillance and ICE Are Driving Patients Away From Medical Care, Report Warns

Webinar: How Smart MSSPs Using AI to Boost Margins with Half the Staff

Exposure Assessment Platforms Signal a Shift in Focus

Everest ransomware gang said to be sitting on mountain of Under Armour data

Chainlit AI Framework Flaws Enable Data Theft via File Read and SSRF Bugs

A new era of agents, a new era of posture

VoidLink Linux Malware Framework Built with AI Assistance Reaches 88,000 Lines of Code

EU considers whether there's Huawei of axing Chinese kit from networks within 3 years

Ireland wants to give its cops spyware, ability to crack encrypted messages

Best of British: UK's infosec envoys include Cisco, Palo Alto, and Accenture

LastPass Warns of Fake Maintenance Messages Targeting Users Master Passwords

Internet Voting is Too Insecure for Use in Elections

CERT/CC Warns binary-parser Bug Allows Node.js Privilege-Level Code Execution

Curl shutters bug bounty program to remove incentive for submitting AI slop

North Korea-Linked Hackers Target Developers via Malicious VS Code Projects

~ 20 Jan 2026 ~

Cloudflare whacks WAF bypass bug that opened side door for attackers

Chasing Shadows Out Now in Paperback

Three Flaws in Anthropic MCP Git Server Enable File Access and Code Execution

Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading

ICE Details a New Minnesota-Based Detention Network That Spans 5 States

Remember VoidLink, the cloud-targeting Linux malware? An AI agent wrote it

Kimwolf Botnet Lurking in Corporate, Govt. Networks

The Hidden Risk of Orphan Accounts

Evelyn Stealer Malware Abuses VS Code Extensions to Steal Developer Credentials and Crypto

Four priorities for AI-powered identity and network access security in 2026

Cloudflare Fixes ACME Validation Bug Allowing WAF Bypass to Origin Servers

Why Secrets in JavaScript Bundles are Still Being Missed

The Right to Remember: Memorializing in Syria

AI framework flaws put enterprise clouds at risk of takeover

Tudou Guarantee Marketplace Halts Telegram Transactions After Processing Over $12 Billion

Anthropic quietly fixed flaws in its Git MCP server that allowed for remote code execution

For the price of Netflix, crooks can now rent AI to run cybercrime

Could ChatGPT Convince You to Buy Something?

Schneider Electric EcoStruxure Foxboro DCS

Old habits die hard: 2025s most common passwords were as predictable as ever

Akamai CEO wants help to defeat piracy, reckons he can handle edge AI alone

~ 19 Jan 2026 ~

Google Gemini Prompt Injection Flaw Exposed Private Calendar Data via Malicious Invites

London PR Firm Rewrites Wikipedia for Governments and Billionaires

Weekly Recap: Fortinet Exploits, RedLine Clipjack, NTLM Crack, Copilot Attack & More

DevOps & SaaS Downtime: The High (and Hidden) Costs for Cloud-First Businesses

Job Posting: Citizen Lab Research Officer in the Area of Spyware and Digital Targeted Threats

New StackWarp Hardware Flaw Breaks AMD SEV-SNP Protections on Zen 15 CPUs

Broker who sold malware to the FBI set for sentencing

CrashFix Chrome Extension Delivers ModeloRAT Using ClickFix-Style Browser Crash Lures

Don't underestimate pro-Russia hacktivists, warns UK's cyber crew

Windows 11 shutdown bug forces Microsoft into out-of-band damage control

Ingram Micro admits summer ransomware raid exposed thousands of staff records

Security Bug in StealC Malware Panel Let Researchers Spy on Threat Actor Operations

AI-Powered Surveillance in Schools

UK prime minister stares down barrel of ban on social media for kids

Warwickshire school to reopen after cyberattack crippled IT

Royal Navy's helicopter drone makes its first autonomous flight

ATM maintenance tech broke the bank by forgetting to return a key

Microsoft hiring energy strategists to power its Asian datacenters

~ 18 Jan 2026 ~

Mandiant releases quick credential cracker, to hasten the death of a bad protocol

~ 17 Jan 2026 ~

Black Basta Ransomware Leader Added to EU Most Wanted and INTERPOL Red Notice

OpenAI to Show Ads in ChatGPT for Logged-In U.S. Adults on Free and Go Plans

Fast Pair, loose security: Bluetooth accessories open to silent hijack

US Hackers Reportedly Caused a Blackout in Venezuela

~ 16 Jan 2026 ~

GootLoader Malware Uses 5001,000 Concatenated ZIP Archives to Evade Detection

Five Malicious Chrome Extensions Impersonate Workday and NetSuite to Hijack Accounts

Sorry Dave, Im afraid I cant do that! PCs refuse to shut down after Microsoft patch

Your Digital Footprint Can Lead Right to Your Front Door

LOTUSLITE Backdoor Targets U.S. Policy Entities Using Venezuela-Themed Spear Phishing

German cops add Black Basta boss to EU most-wanted list

AI and the Corporate Capture of Knowledge

RondoDox botnet linked to large-scale exploit of critical HPE OneView bug

China-Linked APT Exploits Sitecore Zero-Day in Attacks on American Critical Infrastructure

Bankrupt scooter startup left one private key to rule them all

Cisco Patches Zero-Day RCE Exploited by China-Linked APT in Secure Email Gateways

Probably not the best security in the world: Carlsberg wristbands spill visitor pics

Why LinkedIn is a hunting ground for threat actors and how to protect yourself

AWS CodeBuild Misconfiguration Exposed GitHub Repos to Potential Supply Chain Attacks

~ 15 Jan 2026 ~

Cisco finally fixes max-severity bug under active attack for weeks

Hearing on the Human Rights Policy of the German Government

Chinese spies used Maduro's capture as a lure to phish US govt agencies

Flipping one bit leaves AMD CPUs open to VM vuln

Critical WordPress Modular DS Plugin Flaw Actively Exploited to Gain Admin Access

Researchers Reveal Reprompt Attack Allowing Single-Click Data Exfiltration From Microsoft Copilot

Elon Musks Grok Undressing Problem Isnt Fixed

ThreatsDay Bulletin: AI Voice Cloning Exploit, Wi-Fi Kill Switch, PLC Vulns, and 14 More Stories

Contagious Claude Code bug Anthropic ignored promptly spreads to Cowork

Why ICE Can Kill With Impunity

Model Security Is the Wrong Frame The Real Risk Is Workflow Security

4 Outdated Habits Destroying Your SOC's MTTR in 2026

Microsoft Legal Action Disrupts RedVDS Cybercrime Infrastructure Used for Online Fraud

A simple CodeBuild flaw put every AWS environment at risk and pwned 'the central nervous system of the cloud'

Palo Alto Fixes GlobalProtect DoS Flaw That Can Crash Firewalls Without Login

US regulator tells GM to hit the brakes on customer tracking

Woman bailed as cops probe doctor's surgery data breach

Former CISA Director Jen Easterly Will Lead RSA Conference