Port 22

~ 15 Jan 2026 ~

New Vulnerability in n8n

Hundreds of Millions of Audio Devices Need a Patch to Prevent Wireless Hacking and Tracking

Microsoft taps UK courts to dismantle cybercrime host RedVDS

Ofcom keeps X under the microscope despite Grok 'nudify' fix

AWS flips switch on Euro cloud as customers fret about digital sovereignty

Researchers Null-Route Over 550 Kimwolf and Aisuru Botnet Command Servers

~ 14 Jan 2026 ~

CrowdStrike shareholders lose battle to recoup losses from 2024 outage

New Linux malware targets the cloud, steals creds, and then vanishes

AI Agents Are Becoming Privilege Escalation Paths

Hackers Exploit c-ares DLL Side-Loading to Bypass Security and Deploy Malware

Hacking Wheelchairs over Bluetooth

Verizon Outage Knocks Out US Mobile Service, Including Some 911 Calls

Fortinet Fixes Critical FortiSIEM Flaw Allowing Unauthenticated Remote Code Execution

Upcoming Speaking Engagements

Microsoft named a Leader in IDC MarketScape for Unified AI Governance Platforms

New Research: 64% of 3rd-Party Applications Access Sensitive Data Without Justification

Trump Warned of a Tren de Aragua Invasion. US Intel Told a Different Story

France fines telcos 42M for sub-par security prior to 24M customer breach

Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively Exploited

Inside RedVDS: How a single virtual desktop provider fueled worldwide cybercriminal operations

'Imagination the limit': DeadLock ransomware gang using smart contracts to hide their work

Cyber-stricken Belgian hospitals refuse ambulances, transfer critical patients

Eurail passengers taken for a ride as data breach spills passports, bank details

Critical Node.js Vulnerability Can Cause Server Crashes via async_hooks Stack Overflow

UK backtracks on digital ID requirement for right to work

PLUGGYAPE Malware Uses Signal and WhatsApp to Target Ukrainian Defense Forces

Spanish power giant sparks breach probe amid claims of massive data grab

Is it time for internet services to adopt identity verification?

Anthropic finds $1.5 million to help Python Foundation improve security

Patch Tuesday, January 2026 Edition

Windows info-disclosure 0-day bug gets a fix as CISA sounds alarm

~ 13 Jan 2026 ~

Long-Running Web Skimming Campaign Steals Credit Cards From Online Checkout Pages

Malicious Chrome Extension Steals MEXC API Keys by Masquerading as Trading Tool

Popular Python libraries used in Hugging Face models subject to poisoned metadata attack

[Webinar] Securing Agentic AI: From MCPs and Tool Access to Shadow API Key Sprawl

New Advanced Linux VoidLink Malware Targets Cloud and container Environments

What Should We Learn From How Attackers Leveraged AI in 2025?

ServiceNow Patches Critical AI Platform Flaw Allowing Unauthenticated User Impersonation

AI and automation could erase 10.4 million US roles by 2030

How Microsoft builds privacy and security to work hand-in-hand

Dozens of ICE Vehicles in Minnesota Lack Necessary Lights and Sirens

New Malware Campaign Delivers Remcos RAT Through Multi-Stage Windows Attack

Dutch cops cuff alleged AVCheck malware kingpin in Amsterdam

Federal agencies told to fix or ditch Gogs as exploited zero-day lands on CISA hit list

CISA Warns of Active Exploitation of Gogs Vulnerability Enabling Code Execution

Mandiant open sources tool to prevent leaky Salesforce misconfigs

Court tosses appeal by hacker who opened port to coke smugglers with malware

1980s Hacker Manifesto

What to Do If ICE Invades Your Neighborhood

Britain goes shopping for a rapid-fire missile to help Ukraine hit back

Your personal information is on the dark web. What happens next?

India demands crypto outfits geolocate customers, get a selfie to prove theyre real

~ 12 Jan 2026 ~

Minnesota Sues to Stop ICE Invasion

No fire sale for firewalls as memory shortages could push prices higher

'Violence-as-a-service' suspect arrested in Iraq, extradition underway

FBI Agents Sworn Testimony Contradicts Claims ICEs Jonathan Ross Made Under Oath

n8n Supply Chain Attack Abuses Community Nodes to Steal OAuth Tokens

Weekly Recap: AI Automation Exploits, Telecom Espionage, Prompt Poaching & More

GoFundMe Ignores Own Rules by Hosting a Legal-Defense Fund for the ICE Agent Who Killed Renee Good

Businesses in 2026: Maybe we should finally look into that AI security stuff

Block CISO: We red-teamed our own AI agent to run an infostealer on an employee laptop

GoBruteforcer Botnet Targets Crypto Project Databases by Exploiting Weak Credentials

Anthropic Launches Claude AI for Healthcare with Secure Health Record Access

Infamous BreachForums forum breached, spilling data on 325K users

Researchers Uncover Service Providers Fueling Industrial-Scale Pig Butchering Fraud

Ofcom officially investigating X as Grok's nudify button stays switched on

Corrupting LLMs Through Weird Generalizations

Tories vow to boot under-16s off social media and ban phones in schools

Indias government denies it plans to demand smartphone source code

Malaysia and Indonesia block X over failure to curb deepfake smut

~ 11 Jan 2026 ~

Meta admits to Instagram password reset mess, denies data leak

~ 10 Jan 2026 ~

MuddyWater Launches RustyWater RAT via Spear-Phishing Across Middle East Sectors

Europol Arrests 34 Black Axe Members in Spain Over 5.9M Fraud and Organized Crime

Security News This Week: ICE Can Now Spy on Every Phone in Your Neighborhood

UK government exempting itself from flagship cyber law inspires little confidence

~ 9 Jan 2026 ~

China-Linked Hackers Exploit VMware ESXi Zero-Days to Escape Virtual Machines

Friday Squid Blogging: The Chinese Squid-Fishing Fleet off the Argentine Coast

How hackers are fighting back against ICE surveillance tech

Russian APT28 Runs Credential-Stealing Campaign Targeting Energy and Policy Organizations

Cybersecurity Predictions 2026: The Hype We Can Ignore (And the Risks We Can't)

Putinswap: France trades alleged ransomware crook for conflict researcher

QR codes a powerful new phishing weapon in hands of Pyongyang cyberspies

Trend Micro Apex Central RCE Flaw Scores 9.8 CVSS in On-Prem Windows Versions

X Didn't Fix Grok's Undressing Problem. It Just Makes People Pay for It

CISA Retires 10 Emergency Cybersecurity Directives Issued Between 2019 and 2024

China-linked cybercrims abused VMware ESXi zero-days a year before disclosure

Palo Alto Crosswalk Signals Had Default Passwords

FBI Warns North Korean Hackers Using Malicious QR Codes in Spear-Phishing

Grok told to cover up as UK weighs action over AI 'undressing'

Help desk read irrelevant script, so techies found and fixed their own problem

ICE Agent Who Reportedly Shot Renee Good Was a Firearms Trainer, Per Testimony

~ 8 Jan 2026 ~

Who Benefited from the Aisuru and Kimwolf Botnets?

WhatsApp Worm Spreads Astaroth Banking Trojan Across Brazil via Contact Auto-Messaging

As agents run amok, CrowdStrike's $740M SGNL deal aims to help get a grip on identity security

China-Linked UAT-7290 Targets Telecoms with Linux Malware and ORB Nodes

Patch Cisco ISE bug now before attackers abuse proof-of-concept exploit

ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More Stories

The State of Trusted Open Source

Cisco Patches ISE Security Vulnerability After Public PoC Exploit Release

Researchers Uncover NodeCordRAT Hidden in npm Bitcoin-Themed Packages