Latest Cybersecurity News and Alerts

Security Week

• eScan Antivirus Delivers Malware in Supply Chain Attack
  January 31, 2026
• In Other News: Paid for Being Jailed, Google’s $68M Settlement, CISA Chief’s ChatGPT Leak
  January 30, 2026
• Aisy Launches Out of Stealth to Transform Vulnerability Management
  January 30, 2026
• 175,000 Exposed Ollama Hosts Could Enable LLM Abuse
  January 30, 2026
• White House Scraps ‘Burdensome’ Software Security Rules 
  January 30, 2026
• Hugging Face Abused to Deploy Android RAT
  January 30, 2026
• ICS Devices Bricked Following Russia-Linked Intrusion Into Polish Power Grid
  January 30, 2026
• Ivanti Patches Exploited EPMM Zero-Days
  January 30, 2026
• LLMs Hijacked, Monetized in ‘Operation Bizarre Bazaar’
  January 29, 2026
• N8n Vulnerabilities Could Lead to Remote Code Execution
  January 29, 2026

The Hacker News

• Iran-Linked RedKitten Cyber Campaign Targets Human Rights NGOs and Activists
  January 31, 2026
• Mandiant Finds ShinyHunters-Style Vishing Attacks Stealing MFA to Breach SaaS Platforms
  January 31, 2026
• CERT Polska Details Coordinated Cyber Attacks on 30+ Wind and Solar Farms
  January 31, 2026
• Researchers Uncover Chrome Extensions Abusing Affiliate Links and Stealing ChatGPT Access
  January 30, 2026
• China-Linked UAT-8099 Targets IIS Servers in Asia with BadIIS SEO Malware
  January 30, 2026
• Badges, Bytes and Blackmail
  January 30, 2026
• Ex-Google Engineer Convicted for Stealing AI Secrets for China Startup
  January 30, 2026
• SmarterMail Fixes Critical Unauthenticated RCE Flaw with CVSS 9.3 Score
  January 30, 2026
• Two Ivanti EPMM Zero-Day RCE Flaws Actively Exploited, Security Updates Released
  January 29, 2026
• Researchers Find 175,000 Publicly Exposed Ollama AI Servers Across 130 Countries
  January 29, 2026
• ThreatsDay Bulletin: New RCEs, Darknet Busts, Kernel Bugs & 25+ More Stories
  January 29, 2026
• Survey of 100+ Energy Systems Reveals Critical OT Cybersecurity Gaps
  January 29, 2026
• 3 Decisions CISOs Need to Make to Prevent Downtime Risk in 2026
  January 29, 2026
• SolarWinds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth Bypass
  January 29, 2026
• Google Disrupts IPIDEA — One of the World’s Largest Residential Proxy Networks
  January 29, 2026
• Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware
  January 28, 2026
• Russia-Aligned ELECTRUM Tied to December 2025 Cyber Attack on Polish Power Grid
  January 28, 2026
• Two High-Severity n8n Flaws Allow Authenticated Remote Code Execution
  January 28, 2026
• From Triage to Threat Hunts: How AI Accelerates SecOps
  January 28, 2026

Dark Reading

• Torq Moves SOCs Beyond SOAR With AI-Powered Hyper Automation
  January 30, 2026
• 2026: The Year Agentic AI Becomes the Attack-Surface Poster Child
  January 30, 2026
• Out-of-the-Box Expectations for 2026 Reveal a Grab-Bag of Risk
  January 30, 2026
• Tenable Tackles AI Governance, Shadow AI Risks, Data Exposure
  January 30, 2026
• OpenClaw AI Runs Wild in Business Environments
  January 30, 2026
• Chinese APTs Hacking Asian Orgs With High-End Malware
  January 29, 2026
• Trump Administration Rescinds Biden-Era Software Guidance
  January 29, 2026
• Second Round of Critical RCE Bugs in n8n Spikes Corporate Risk
  January 29, 2026
• 'Semantic Chaining' Jailbreak Dupes Gemini Nano Banana, Grok 4
  January 29, 2026
• From Quantum to AI Risks: Preparing for Cybersecurity's Future
  January 29, 2026
• How Can CISOs Respond to Ransomware Getting More Violent?
  January 28, 2026
• Months After Patch, WinRAR Bug Poised to Hit SMBs Hardest
  January 28, 2026
• Fortinet Confirms New Zero-Day Behind Malicious SSO Logins
  January 28, 2026
• Consumers Reluctant to Shop at Stores That Don't Take Security Seriously
  January 28, 2026
• China-Backed 'PeckBirdy' Takes Flight for Cross-Platform Attacks
  January 28, 2026

CSO

• Im Fokus: Emerging Technologies
  January 31, 2026
• Ivanti patches two actively exploited critical vulnerabilities in EPMM
  January 30, 2026
• Startup Amutable plotting Linux security overhaul to counter hacking threats
  January 30, 2026
• NIS2: Lieferketten als Risikofaktor
  January 30, 2026
• Hugging Face infra abused to spread Android RAT in a large-scale malware campaign
  January 30, 2026
• The CSO guide to top security conferences
  January 30, 2026
• Human risk management: CISOs’ solution to the security awareness training paradox
  January 30, 2026
• Roughly half of employees are using unsanctioned AI tools, and enterprise leaders are major culprits
  January 29, 2026
• ShinyHunters ramp up new vishing campaign with 100s in crosshairs
  January 29, 2026
• Identitäten im Fokus von Cyberkriminellen
  January 29, 2026
• Critical RCE bugs expose the n8n automation platform to host‑level compromise
  January 29, 2026
• CISA chief uploaded sensitive government files to public ChatGPT
  January 29, 2026
• EU’s answer to CVE solves dependency issue, adds fragmentation risks
  January 29, 2026
• Reports of GDPR violations have risen sharply
  January 29, 2026
• Kritik am Kritis-Dachgesetz: “Flickenteppich” befürchtet
  January 29, 2026

• Windows Malware Uses Pulsar RAT for Live Chats While Stealing Data
  January 31, 2026
• US Seizes $400 Million Linked to Helix Dark Web Crypto Mixer
  January 31, 2026
• Former Google Engineer Convicted of Stealing AI Secrets for China
  January 30, 2026
• Arsink Spyware Posing as WhatsApp, YouTube, Instagram, TikTok Hits 143 Countries
  January 30, 2026
• Common Cloud Migration Security Mistakes (and How to Avoid Them)
  January 29, 2026
• Op Bizarre Bazaar: New LLMjacking Campaign Targets Unprotected Models
  January 29, 2026
• This startup aims to solve crypto’s broken key management problem
  January 29, 2026
• US Sentences Chinese National for Role in $36.9 Million Crypto Scam
  January 29, 2026
• Malicious Google Ads Target Mac Users with Fake Mac Cleaner Pages
  January 29, 2026
• Russian Cybercrime Platform RAMP Forum Seized by FBI
  January 28, 2026

Krebs On Security

• Kimwolf Botnet Lurking in Corporate, Govt. Networks
  January 20, 2026
• Patch Tuesday, January 2026 Edition
  January 13, 2026
• Who Benefited from the Aisuru and Kimwolf Botnets?
  January 8, 2026
• The Kimwolf Botnet is Stalking Your Local Network
  January 2, 2026
• Happy 16th Birthday, KrebsOnSecurity.com!
  December 29, 2025

CISA Alerts

We Live Security

• This month in security with Tony Anscombe – January 2026 edition
  January 30, 2026
• DynoWiper update: Technical analysis and attribution
  January 30, 2026
• Love? Actually: Fake dating app used as lure in targeted spyware campaign in Pakistan
  January 28, 2026
• Drowning in spam or scam emails? Here’s probably why
  January 27, 2026
• ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025
  January 23, 2026

Securelist Feed

• Supply chain attack on eScan antivirus: detecting and remediating malicious updates
  January 29, 2026
• HoneyMyte updates CoolClient and deploys multiple stealers in recent campaigns
  January 27, 2026
• The HoneyMyte APT evolves with a kernel-mode rootkit and a ToneShell backdoor
  December 29, 2025
• Threat landscape for industrial automation systems in Q3 2025
  December 25, 2025
• Evasive Panda APT poisons DNS requests to deliver MgBot
  December 24, 2025

CIS Security Advisories

• Multiple Vulnerabilities in SolarWinds Web Help Desk Could Allow for Arbitrary Code Execution
  January 28, 2026
• A Vulnerability in Microsoft Office Could Allow for Security Feature Bypass
  January 27, 2026
• A Vulnerability in Cisco Unified Communications Products Could Allow for Remote Code Execution
  January 21, 2026
• Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution
  January 14, 2026
• Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
  January 13, 2026

Deep Website Links