News Summary

FBI Warns of North Korean Spear‑Phishing Campaigns Using Malicious QR Codes A newly disclosed FBI advisory describes an ongoing North Korean spear‑phishing operation that embeds malicious QR codes in highly…

ShadowLeak: Zero‑Click Data Exfiltration via ChatGPT Connectors ShadowLeak is a newly disclosed zero‑click exploitation technique against ChatGPT’s connector ecosystem that enables attackers to exfiltrate sensitive data directly from cloud‑connected services…

Cisco Identity Services Engine Critical Vulnerability: Rapid Exploitation and Defensive Guidance A newly disclosed critical vulnerability in Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector has moved rapidly…

CISA Adds Microsoft PowerPoint And HPE OneView Flaws To Known Exploited Vulnerabilities U.S. federal cybersecurity authorities have formally recognized a legacy Microsoft PowerPoint code injection flaw and a critical Hewlett…

MongoDB Servers Face Widespread Exploitation from Critical Vulnerability Public exploits for a critical MongoDB vulnerability surfaced on December 25, 2025, leading to confirmed widespread exploitation by December 28, with nearly…

MongoDB Servers Face Widespread Exploitation of Critical Vulnerability This summary covers the ongoing exploitation of a critical MongoDB vulnerability discovered late December 2025, where public exploits emerged on December 25,…

LastPass 2022 Breach Continues to Fuel Cryptocurrency Thefts This summary covers a report from January 2, 2026, detailing how the 2022 LastPass data breach is still enabling high-value cryptocurrency thefts…

Expanded Ransomware Exploit List Reaches 1,484 Vulnerabilities This update to the known exploited vulnerabilities catalog adds 24 new flaws actively used by ransomware groups, bringing the total to 1,484 and…

European Space Agency Confirms Breach of External Servers The European Space Agency has acknowledged a cybersecurity incident affecting external servers used for unclassified collaborative engineering, following claims by a threat…

Threat Actors Use Infostealers to Turn Legitimate Businesses into Malware Hosts This emerging cybercrime tactic involves infostealer malware that compromises legitimate businesses, transforming them into hosts for further malware distribution…