Port 22

~ 21 Jan 2026 ~

North Korea-Linked Hackers Target Developers via Malicious VS Code Projects

~ 20 Jan 2026 ~

Cloudflare whacks WAF bypass bug that opened side door for attackers

Chasing Shadows Out Now in Paperback

Three Flaws in Anthropic MCP Git Server Enable File Access and Code Execution

Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading

ICE Details a New Minnesota-Based Detention Network That Spans 5 States

Remember VoidLink, the cloud-targeting Linux malware? An AI agent wrote it

Kimwolf Botnet Lurking in Corporate, Govt. Networks

The Hidden Risk of Orphan Accounts

Evelyn Stealer Malware Abuses VS Code Extensions to Steal Developer Credentials and Crypto

Four priorities for AI-powered identity and network access security in 2026

Cloudflare Fixes ACME Validation Bug Allowing WAF Bypass to Origin Servers

Why Secrets in JavaScript Bundles are Still Being Missed

The Right to Remember: Memorializing in Syria

AI framework flaws put enterprise clouds at risk of takeover

Tudou Guarantee Marketplace Halts Telegram Transactions After Processing Over $12 Billion

Anthropic quietly fixed flaws in its Git MCP server that allowed for remote code execution

For the price of Netflix, crooks can now rent AI to run cybercrime

Could ChatGPT Convince You to Buy Something?

Schneider Electric EcoStruxure Foxboro DCS

Old habits die hard: 2025s most common passwords were as predictable as ever

Akamai CEO wants help to defeat piracy, reckons he can handle edge AI alone

~ 19 Jan 2026 ~

Google Gemini Prompt Injection Flaw Exposed Private Calendar Data via Malicious Invites

London PR Firm Rewrites Wikipedia for Governments and Billionaires

Weekly Recap: Fortinet Exploits, RedLine Clipjack, NTLM Crack, Copilot Attack & More

DevOps & SaaS Downtime: The High (and Hidden) Costs for Cloud-First Businesses

Job Posting: Citizen Lab Research Officer in the Area of Spyware and Digital Targeted Threats

New StackWarp Hardware Flaw Breaks AMD SEV-SNP Protections on Zen 15 CPUs

Broker who sold malware to the FBI set for sentencing

CrashFix Chrome Extension Delivers ModeloRAT Using ClickFix-Style Browser Crash Lures

Don't underestimate pro-Russia hacktivists, warns UK's cyber crew

Windows 11 shutdown bug forces Microsoft into out-of-band damage control

Ingram Micro admits summer ransomware raid exposed thousands of staff records

Security Bug in StealC Malware Panel Let Researchers Spy on Threat Actor Operations

AI-Powered Surveillance in Schools

UK prime minister stares down barrel of ban on social media for kids

Warwickshire school to reopen after cyberattack crippled IT

Royal Navy's helicopter drone makes its first autonomous flight

ATM maintenance tech broke the bank by forgetting to return a key

Microsoft hiring energy strategists to power its Asian datacenters

~ 18 Jan 2026 ~

Mandiant releases quick credential cracker, to hasten the death of a bad protocol

~ 17 Jan 2026 ~

Black Basta Ransomware Leader Added to EU Most Wanted and INTERPOL Red Notice

OpenAI to Show Ads in ChatGPT for Logged-In U.S. Adults on Free and Go Plans

Fast Pair, loose security: Bluetooth accessories open to silent hijack

US Hackers Reportedly Caused a Blackout in Venezuela

~ 16 Jan 2026 ~

GootLoader Malware Uses 5001,000 Concatenated ZIP Archives to Evade Detection

Five Malicious Chrome Extensions Impersonate Workday and NetSuite to Hijack Accounts

Sorry Dave, Im afraid I cant do that! PCs refuse to shut down after Microsoft patch

Your Digital Footprint Can Lead Right to Your Front Door

LOTUSLITE Backdoor Targets U.S. Policy Entities Using Venezuela-Themed Spear Phishing

German cops add Black Basta boss to EU most-wanted list

AI and the Corporate Capture of Knowledge

RondoDox botnet linked to large-scale exploit of critical HPE OneView bug

China-Linked APT Exploits Sitecore Zero-Day in Attacks on American Critical Infrastructure

Bankrupt scooter startup left one private key to rule them all

Cisco Patches Zero-Day RCE Exploited by China-Linked APT in Secure Email Gateways

Probably not the best security in the world: Carlsberg wristbands spill visitor pics

Why LinkedIn is a hunting ground for threat actors and how to protect yourself

AWS CodeBuild Misconfiguration Exposed GitHub Repos to Potential Supply Chain Attacks

~ 15 Jan 2026 ~

Cisco finally fixes max-severity bug under active attack for weeks

Hearing on the Human Rights Policy of the German Government

Chinese spies used Maduro's capture as a lure to phish US govt agencies

Flipping one bit leaves AMD CPUs open to VM vuln

Critical WordPress Modular DS Plugin Flaw Actively Exploited to Gain Admin Access

Researchers Reveal Reprompt Attack Allowing Single-Click Data Exfiltration From Microsoft Copilot

Elon Musks Grok Undressing Problem Isnt Fixed

ThreatsDay Bulletin: AI Voice Cloning Exploit, Wi-Fi Kill Switch, PLC Vulns, and 14 More Stories

Contagious Claude Code bug Anthropic ignored promptly spreads to Cowork

Why ICE Can Kill With Impunity

Model Security Is the Wrong Frame The Real Risk Is Workflow Security

4 Outdated Habits Destroying Your SOC's MTTR in 2026

Microsoft Legal Action Disrupts RedVDS Cybercrime Infrastructure Used for Online Fraud

A simple CodeBuild flaw put every AWS environment at risk and pwned 'the central nervous system of the cloud'

Palo Alto Fixes GlobalProtect DoS Flaw That Can Crash Firewalls Without Login

US regulator tells GM to hit the brakes on customer tracking

Woman bailed as cops probe doctor's surgery data breach

Former CISA Director Jen Easterly Will Lead RSA Conference

New Vulnerability in n8n

Hundreds of Millions of Audio Devices Need a Patch to Prevent Wireless Hacking and Tracking

Microsoft taps UK courts to dismantle cybercrime host RedVDS

Ofcom keeps X under the microscope despite Grok 'nudify' fix

AWS flips switch on Euro cloud as customers fret about digital sovereignty

Researchers Null-Route Over 550 Kimwolf and Aisuru Botnet Command Servers

~ 14 Jan 2026 ~

CrowdStrike shareholders lose battle to recoup losses from 2024 outage

New Linux malware targets the cloud, steals creds, and then vanishes

AI Agents Are Becoming Privilege Escalation Paths

Hackers Exploit c-ares DLL Side-Loading to Bypass Security and Deploy Malware

Hacking Wheelchairs over Bluetooth

Verizon Outage Knocks Out US Mobile Service, Including Some 911 Calls

Fortinet Fixes Critical FortiSIEM Flaw Allowing Unauthenticated Remote Code Execution

Upcoming Speaking Engagements

Microsoft named a Leader in IDC MarketScape for Unified AI Governance Platforms

New Research: 64% of 3rd-Party Applications Access Sensitive Data Without Justification

Trump Warned of a Tren de Aragua Invasion. US Intel Told a Different Story

France fines telcos 42M for sub-par security prior to 24M customer breach

Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively Exploited

Inside RedVDS: How a single virtual desktop provider fueled worldwide cybercriminal operations

'Imagination the limit': DeadLock ransomware gang using smart contracts to hide their work

Cyber-stricken Belgian hospitals refuse ambulances, transfer critical patients

Eurail passengers taken for a ride as data breach spills passports, bank details