1/29/2026 January 29, 2026January 29, 2026 ~ The Cyber Beat ~ Leave a comment Latvia Says Russia Remains Its Top Cyber Threat as Attacks Hit Record HighRussian ELECTRUM Tied to December 2025 Cyber Attack on Polish Power GridOperation Winter SHIELD: FBI Issues Call to Arms for Organizations to Improve CybersecurityGoogle Disrupts Extensive Residential Proxy Networks IPIDEARansomware Victim Numbers Rise, Despite Drop in Active Extortion GroupsHow Can CISOs Respond to Ransomware Getting More Violent?Patch or Perish: Vulnerability Exploits Now Dominate IntrusionsAn AI Toy Exposed 50,000 Logs of Its Chats With Kids to Anyone With a Gmail AccountOpen-Source AI Models Vulnerable to Criminal Misuse, Researchers WarnU.S. Software Stocks Slump as AI Disruption Fears Take OverICE Is Using Palantir’s AI Tools to Sort Through TipsItaly’s Winter Games Security Plan Keeps U.S. ICE in Advisory RoleCybersecurity Teams Embrace AI, Just Not at the Scale Marketing SuggestsAV Vendor eScan Goes to War With Security Shop Morphisec Over Update Server ScareFrance Fines National Employment Agency €5m Over 2024 Data BreachCyberattack on Large Russian Bread Factory The Vladimir Bread Factory Disrupts Supply DeliveriesShinyHunters Swipes Right on 10M Records in Alleged Dating App Match Group Data Grab…Match Group Breach Exposes Data from Hinge, Tinder, OkCupid, and MatchContractor Data Breach at TriZetto Provider Solutions May Have Exposed the Protected Health Info of Thousands of Central OregoniansFintech Marquis Blames Ransomware Breach on SonicWall Cloud Backup HackInitial Access Hackers TA584 Switch to Tsundere Bot for Ransomware AttacksResearchers Find 175,000 Publicly Exposed Ollama AI Servers Across 130 CountriesHugging Face Abused to Spread Thousands of Android Malware VariantsAisuru Botnet Sets New Record with 31.4 Tbps DDoS AttackIvanti Warns of Two EPMM flaws Exploited in Zero-Day AttacksGoogle Rolls Out Android Theft Protection Feature UpdatesNew Apple Feature Will Block Cell Networks From Capturing Precise Location DataNew Microsoft Teams Feature Will Let You Report Suspicious CallsNSA Pick Champions Foreign Spying Law as Nomination Advances
1/28/2026 January 28, 2026January 28, 2026 ~ The Cyber Beat ~ Leave a comment Cyberattack on Polish Energy Grid Impacted Around 30 FacilitiesRansomware Crims Forced to Take Off-RAMP as FBI Seizes ForumVirginia Man & Empire Cybercrime Market Owner, with Partner from Florida, Pleads Guilty to Drug ConspiracyTeen Swatting Suspects Arrested in Hungary and RomaniaSlovakian Man Pleads Guilty to Operating Darknet MarketplaceOpenAI’s ChatGPT’s Ad Costs Are on Par With Live NFL BroadcastsEx-Palantir Engineer Raises $40 Million for Cyber Startup Outtake, With Backing From Microsoft CEO NadellaTrump’s Acting Cybersecurity Chief Madhu Gottumukkala Uploaded Sensitive Government Docs to ChatGPTeScan Confirms Update Server Breached to Push Malicious UpdateEmojis in PureRAT’s Code Point to AI-Generated Malware CampaignHackers Hijack Exposed LLM Endpoints in Bizarre Bazaar OperationFake Moltbot AI Coding Assistant on VS Code Marketplace Drops MalwareAutonomous System Uncovers Long-Standing OpenSSL FlawsSolarWinds Warns of Critical Web Help Desk RCE, Auth Bypass FlawsCritical and High Severity n8n Sandbox Flaws Allow RCEUK Leaders Warned Country Risks ‘Absorbing’ Cyber and Hybrid Attacks Without Offensive DeterrenceFTC Commissioner Says Online Age Verification ‘Offers a Better Way’ to Protect Kids
1/27/2026 January 27, 2026January 27, 2026 ~ The Cyber Beat ~ Leave a comment Chinese Mustang Panda Hackers Deploy Infostealers via CoolClient BackdoorPeckBirdy Framework Tied to China-Aligned Cyber CampaignsExperts Detect Pakistan-Linked Cyber Campaigns Aimed at Indian Government EntitiesOver 80% of Ethical Hackers Now Use AIRevealed: Leaked Chats Expose the Daily Life of a Scam Compound’s Enslaved WorkforceHe Leaked the Secrets of a Southeast Asian Scam Compound. Then He Had to Get Out AliveWhatsApp’s New ‘Lockdown’ Settings Add Another Layer of Protection Against CyberattacksFrance to Replace U.S. Videoconferencing Wares With Unfortunately Named Sovereign AlternativePrivate Equity Firm Audax Group Seeks Over $1.5 Billion for BlueCat NetworksU.S. Charges 31 More Suspects Linked to Tren de Aragua ATM Malware AttacksChinese Money Launderers Moved More Than $16 Billion of Illicit Crypto in 2025, Report FindsLet Them Eat Sourdough: ShinyHunters Claims Panera Bread as Stolen Credentials VictimNike Investigates Data Breach After Extortion Gang Leaks FilesRussian Security Systems Firm Delta Hit by Cyberattack, Services DisruptedRansomware Attacks Hits Winona County (MN)Have I Been Pwned: SoundCloud Data Breach Impacts 29.8 Million AccountsNew Malware Service ‘Stanley’ Guarantees Phishing Extensions on Chrome Web StoreWinRAR Path Traversal Flaw Still Exploited by Numerous HackersFortinet Blocks Exploited FortiCloud SSO Zero Day Until Patch is readyPyodide Sandbox Escape Enables Remote Code Execution in Grist-CoreCritical Sandbox Escape Flaw Found in Popular vm2 NodeJS LibraryCritical Grist-Core Vulnerability Allows RCE Attacks via Spreadsheet FormulasUK Plans Sweeping Overhaul of Policing Amid Surge in Online Crimes
1/26/2026 January 26, 2026January 26, 2026 ~ The Cyber Beat ~ Leave a comment Krebs: Who Operates the Badbox 2.0 Botnet?Deepfake ‘Nudify’ Technology Is Getting Darker—And More DangerousEU Launches Investigation Into X Over Grok-Generated Sexual Images2025 Was a Wake-up Call to Protect Human Decisions, Not Just SystemsCISA Releases List of Post-Quantum Cryptography Product CategoriesUpwind Raises $250 Million to Expand Cloud SecurityLaw Firm Investigates Coupang Security Failures Ahead of Class Action DeadlineGoogle Agrees to Pay $68 Million to Settle Voice Recording LawsuitJudge Awards British Critic of Saudis $4.1 Million, Finds the Regime Hacked His DevicesIndian Users Targeted in Tax Phishing Campaign Delivering Blackmoon MalwareNew ClickFix Attacks Abuse Windows App-V Scripts to Push MalwareeScan Antivirus Supply Chain Breach Delivers Signed MalwareResearchers Uncover “Haxor” SEO Poisoning MarketplaceCloudflare Misconfiguration Behind Recent BGP Route LeakHackers Can Bypass npm’s Shai-Hulud Defenses via Git DependenciesMicrosoft Patches Actively Exploited Office Zero-Day VulnerabilitySupreme Court to Hear Facebook Pixel Tracking CaseRomania Probes Two Suspects Over Alleged Hitman-For-Hire Website
1/23-25/2026 January 25, 2026January 25, 2026 ~ The Cyber Beat ~ Leave a comment New DynoWiper Malware Used in Attempted Sandworm Attack on Polish Power SectorKonni Hackers Target Blockchain Engineers With AI-Built MalwareMillions of People Imperiled Through Sign-in Links Sent by SMSGmail’s Spam Filter and Automatic Sorting Are BrokenRing Can Verify Videos Now, but That Might Not Help You With Most AI FakesTikTok Forms U.S. Joint Venture to Continue Operations Under 2025 Executive OrderU.S. to Deport Venezuelans Who Emptied Bank ATMs Using MalwareUK Border Tech Budget Swells by £100M as Home Office Targets Small Boat CrossingsGermany Expels Russian Diplomat Accused of Spying on Ukraine War EffortChina Investigates Top General Zhang Youxia in Rare Purge of Senior Military LeadersU.S. Storm Leaves 850,000 Without Power, Forces 10,000 Flight CancellationsMulti-Stage Phishing Campaign Targets Russia with Amnesia RAT and RansomwareCyberattack Disrupts Digital Systems at Renowned Dresden Museum Network149 Million Usernames and Passwords Exposed by Unsecured DatabaseShinyHunters Claims Okta Customer Breaches, Leaks Data Belonging to 3 OrgsNike Probing Potential Security Incident as Hackers Threaten to Leak DataPhishing Attack Uses Stolen Credentials to Install LogMeIn RMM for Persistent AccessMalicious AI Extensions on VSCode Marketplace Steal Developer DataFortinet Confirms Critical FortiCloud Auth Bypass Not Fully PatchedCISA Updates KEV Catalog with Four Actively Exploited Software VulnerabilitiesCISA Adds Actively Exploited VMware vCenter Flaw CVE-2024-37079 to KEV CatalogHackers Get $1,047,000 for 76 Zero-Days at Pwn2Own Automotive 2026
1/22/2026 January 22, 2026January 22, 2026 ~ The Cyber Beat ~ Leave a comment From a Whisper to a Scream: Europe Frets About Overreliance on U.S. TechRisky Chinese Electric Buses Spark Aussie Gov’t ReviewSpanish Judge Closes NSO Group Spyware Probe Due to Lack of Cooperation From IsraelClaude’s New AI File-Creation Feature Ships With Security Risks Built InCrims Compromised Energy Firms’ Microsoft Accounts, Sent 600 Phishing EmailsMicrosoft Teams to Add Brand Impersonation Warnings to Calls1Password Is Introducing a New Phishing Prevention FeatureHouse of Lords Backs Legislation to Ban Social Media for Children Under 16Bank of England: Financial Sector Failing to Implement Basic Cybersecurity ControlsOver 160,000 Companies Notify Regulators of GDPR BreachesEurope’s GDPR Cops Dished Out €1.2B in Fines Last Year as Data Breaches Piled UpINC Ransomware Opsec Fail Allowed Data Recovery for 12 U.S. OrgsHackers Breach Fortinet FortiGate Devices, Steal Firewall Configs…Fortinet Firewalls Hit With Malicious Configuration ChangesJordan Used Cellebrite Phone-Hacking Tools Against Activists Critical of Gaza War, Report FindsOkta SSO Accounts Targeted in Vishing-Based Data Theft AttacksNew Osiris Ransomware Emerges as New Strain Using POORTRY Driver in BYOVD AttackCritical GNU InetUtils telnetd Flaw Lets Attackers Bypass Login and Gain Root AccessMalicious PyPI Package Impersonates SymPy, Deploys XMRig Miner on Linux HostsSmarterMail Auth Bypass Exploited in the Wild Two Days After Patch ReleaseRealHomes CRM Plugin Flaw Affected 30,000 WordPress SitesCritical Appsmith Flaw Enables Account TakeoversHackers Exploit 29 Zero-Days on Second Day of Pwn2Own AutomotiveCurl Ending Bug Bounty Program After Flood of AI Slop Reports
1/21/2026 January 21, 2026January 21, 2026 ~ The Cyber Beat ~ Leave a comment North Korean PurpleBravo Campaign Targeted 3,136 IP Addresses via Fake Job InterviewsPhishing and Spoofed Sites Remain Primary Entry Points For OlympicsHackers Exploit Security Testing Apps to Breach Fortune 500 FirmsFortinet Admins Report Patched FortiGate Firewalls Getting HackedNew Android Malware Uses AI to Click on Hidden Browser AdsGreek Police Arrest Scammers Using Fake Cell Tower Hidden in Car TrunkIreland Wants to Give Its Cops Spyware, Ability to Crack Encrypted MessagesEU Unveils Cybersecurity Overhaul with Proposed Update to Cybersecurity ActUK’s NCC Group to Sell Escode for $369.4 MillionEverest Ransomware Gang Said to Be Sitting on Mountain of Under Armour DataOnline Retailer PcComponentes Says Data Breach Claims are FakePeruvian Loan Scam Harvests Cards and PINs via Fake ApplicationsLastPass Warns of Fake Maintenance Messages Targeting Users’ Master PasswordsCERT/CC Warns binary-parser Bug Allows Node.js Privilege-Level Code ExecutionZoom and GitLab Release Security Updates Fixing RCE, DoS, and 2FA Bypass FlawsCisco Fixes Unified Communications RCE Zero Day Exploited in AttacksTesla Hacked, 37 Zero-Days Demoed at Pwn2Own Automotive 2026Experts Welcome Global Cybersecurity Vulnerability Enumeration Launch
1/20/2026 January 20, 2026January 20, 2026 ~ The Cyber Beat ~ Leave a comment North Korea-Linked Hackers Target Developers via Malicious VS Code ProjectsEU Plan to Phase-Out High-Risk Tech Draws Fire From China’s HuaweiGreece, Israel to Cooperate on Anti-Drone Systems, Cybersecurity, Greek Minister SaysKrebs: Kimwolf Botnet Lurking in Corporate, Gov’t NetworksUK Launches Landmark ‘Report Fraud’ Service to Tackle Cybercrime and FraudTudou Guarantee Marketplace Halts Telegram Transactions After Processing Over $12 BillionCyber Risks Among CEOs’ Top Worries Amid Weak Short Term Growth OutlookAI Supercharges Attacks in Cybercrime’s New ‘Fifth Wave’VoidLink Cloud Malware Shows Clear Signs of Being AI-GeneratedTrue Agentic AI Is Years Away – Here’s Why and How We Get ThereSupreme Court to Consider Whether Geofence Warrants Are ConstitutionalUK Says It Will Consider Banning Social Media for ChildrenHackers Target Afghan Government Workers With Fake Correspondence From Senior OfficialsLinkedin Phishing Campaign Exploits Open-Source Pen Testing Tool to Compromise Business ExecsNumerous Mass Spam Attacks Leverage Zendesk InstancesUStrive Security Lapse Exposed Personal Data of Its Users, Including ChildrenMinnesota Department of Human Services Data Breach Affects Over 300K IndividualsEverest Ransomware Claims McDonalds India Breach Involving Customer DataEvelyn Stealer Malware Abuses VS Code Extensions to Steal Developer Credentials and CryptoACF Plugin Bug Gives Hackers Admin on 50,000 WordPress SitesCloudflare Fixes ACME Validation Bug Allowing WAF Bypass to Origin ServersChainlit Security Flaws Highlight Infrastructure Risks in AI AppsPrompt Injection Bugs Found in Official Anthropic Git MCP ServerLawmakers Move to Extend Two Cyber Programs (Again) in Funding Proposal
1/19/2026 January 19, 2026January 19, 2026 ~ The Cyber Beat ~ Leave a comment Iran to Consider Lifting Internet Ban; State TV Hacked to Air Anti-Regime MessagesRussian Hacktivists Intensify Disruptive Cyber Pressure on UK OrgsRead the Texts Between Trump and Norway’s Prime MinisterHow Crypto Criminals Stole $700 Million From People – Often Using Age-Old TricksIngram Micro Admits Summer Ransomware Raid Exposed Thousands of Staff RecordsCrashFix Chrome Extension Delivers ModeloRAT Using ClickFix-Style Browser Crash LuresResearchers Uncover PDFSIDER Malware Built for Long-Term, Covert System AccessGoogle Gemini Prompt Injection Flaw Exposed Private Calendar Data via Malicious Invites
1/16-18/2026 January 18, 2026January 18, 2026 ~ The Cyber Beat ~ Leave a comment China-Linked Hackers Exploited Sitecore Zero-Day for Initial AccessTrump Says Iran Has Told Him ‘Killing Has Stopped’ as He Pulls Back From Strike Threats…Donald Trump Calls off Iran Strikes After Steve Witkoff, Araghchi Texts…By Asking Trump to Delay Iran Attacks, Netanyahu Exposes Israel’s Air Defense Holes…Anti-Regime Activists Hack Iran’s National Broadcaster, Transmit Pahlavi’s Calls to ProtestCanada Will Regret Allowing Chinese EVs Into Their Market, U.S. SaysEU Moves to Force the Phase-Out of Chinese Suppliers From Key InfrastructureA Faceless Hacker Stole My Therapy Notes – Now My Deepest Secrets Are Online ForeverJordanian Initial Access Broker Pleads Guilty to Helping Target 50 CompaniesPolice Raid Homes of Alleged Black Basta Hackers, Hunt Suspected Russian Ringleader…Black Basta Ransomware Leader Added to EU Most Wanted and INTERPOL Red NoticeCanadian Investment Regulatory Organization (CIRO) Confirms Data Breach Exposed Info on 750,000 Canadian InvestorsTens of Millions of French Citizen Records ExposedTamperedChef Malvertising Campaign Drops Malware via Fake PDF ManualsRondoDox Botnet Targets HPE OneView Vulnerability in Exploitation WaveFive Malicious Chrome Extensions Impersonate Workday and NetSuite to Hijack AccountsGootLoader Malware Uses 500–1,000 Concatenated ZIP Archives to Evade DetectionMalicious GhostPoster Browser Extensions Found with 840,000 InstallsHackers Now Exploiting Critical Fortinet FortiSIEM Flaw in AttacksStealC Hackers Hacked as Researchers Hijack Malware Control PanelsCisco Finally Fixes AsyncOS Zero-Day Exploited Since NovemberI’m Sorry Dave, I’m Afraid I Can’t Do That! PCs Refuse to Shut Down After Microsoft Patch
1/15/2026 January 15, 2026January 15, 2026 ~ The Cyber Beat ~ Leave a comment Chinese-Linked Hackers Target U.S. Entities With Venezuelan-Themed MalwareICE Agent Doxxing Site DDoS-ed Via Russian ServersHackers Increasingly Shun Encryption in Favour of Pure Data Theft and ExtortionFormer CISA Director Jen Easterly Will Lead RSAC ConferenceFTC Bans GM From Selling Drivers’ Location Data for Five YearsGoogle to Pay $8.25 Million to Settle Lawsuit Alleging Children’s Privacy ViolationsElon Musk’s X Says It Will Block Grok From Making Sexual ImagesData Privacy Teams Face Staffing Shortages and Budget Constraints, ISACA WarnsCloudflare Acquires AI Data Marketplace Human NativeFormer U.S. Special Forces Officer Is Now a Startup CEO—His Cybersecurity Company Has Raised $22 MillionVerizon’s Hourslong Wireless Outage Tied to Software UpdateGrubhub Confirms Hackers Stole Data in Recent Security BreachAnchorage Police Department Takes Servers Offline After Cyberattack on Service ProviderContagious Claude Code Bug Anthropic Ignored Promptly Spreads to CoworkWhisperPair: Hundreds of Millions of Audio Devices Need a Patch to Prevent Wireless Hacking and TrackingCritical WordPress Modular DS Plugin Flaw Actively Exploited to Gain Admin AccessPalo Alto Fixes GlobalProtect DoS Flaw That Can Crash Firewalls Without LoginTrio of Critical Bugs Spotted in Delta Industrial PLCsCodeBuild Flaw Put AWS Console Supply Chain At RiskGermany Turns to Israel for a ‘Cyber Dome’ Amid Rising Threats
1/14/2026 January 15, 2026January 15, 2026 ~ The Cyber Beat ~ Leave a comment PLUGGYAPE Malware Uses Signal and WhatsApp to Target Ukrainian Defense ForcesUkraine Appoints Digital Chief as Defense Minister to Drive Military ReformWestern Cyber Agencies Warn About Threats to Industrial Operational TechnologyBeijing Tells Chinese Firms to Stop Using U.S. and Israeli Cybersecurity Software, Sources SayLawmakers to Restart Efforts to Revive Lapsed Cyber Intel BillResearchers Null-Route Over 550 Kimwolf and Aisuru Botnet Command ServersCriminal Subscription Service Behind AI-Powered Cyber-Attacks Taken Out By MicrosoftVerizon Outage Knocks Out U.S. Mobile Service, Including Some 911 CallsFrance Fines Telcos €42M for Sub-Par Security Prior to 24M Customer BreachPalantir Is Trying to ‘Destroy’ Percepta Through Legal Action, Startup’s Execs Say in FilingGoogle’s Personal Intelligence links Gmail, Photos and Search to GeminiCalifornia AG to Probe Musk’s Grok for Nonconsensual DeepfakesUgandan Officials Turn Off Internet on Eve of National ElectionsVictorian Department of Education Says Hackers Stole Students’ DataMonroe University Says 2024 Data Breach Affects 320,000 PeopleSouth Korean Giant Kyowon Confirms Data Theft in Ransomware AttackCloud Marketplace Pax8 Accidentally Exposes Data on 1,800 MSP PartnersReprompt Attack Hijacked Microsoft Copilot Sessions for Data TheftHackers Use Fake PayPal Notices to Steal Credentials, Deploy RMMsDeadLock Ransomware Uses Polygon Smart Contracts For Proxy RotationLong-Running Web Skimming Campaign Steals Credit Cards From Online Checkout PagesCritical Node.js Vulnerability Can Cause Server Crashes via async_hooks Stack OverflowFortinet Fixes Critical FortiSIEM Flaw Allowing Unauthenticated Remote Code ExecutionKrebs: Patch Tuesday, January 2026 EditionFederal Agencies Ordered to Patch Microsoft Desktop Windows Manager BugMicrosoft Updates Windows DLL That Triggered Security Alerts
1/13/2026 January 13, 2026January 13, 2026 ~ The Cyber Beat ~ Leave a comment Massive Cyberattack on Polish Power System in December Failed, Minister SaysHill Warning: Don’t Put Cyber Offense Before DefenseTrump Renominates Sean Plankey for CISA DirectorUkraine Parliament Approves Resignation of Security Service Chief in Major ReshuffleKremlin-Linked Hackers Pose as Charities to Spy on Ukraine’s MilitarySenior Military Cyber Operator Removed From Russia Task ForceMore Than 40 Countries Impacted by North Korea IT Worker Scams, Crypto TheftsOracle Hack Still Generating Ransom DemandsIndia’s Smartphone Security Proposal Faces Backlash Over Privacy ConcernsQuantum Software Company Haiqu Raises $11 MillionAI and Automation Could Erase 10.4 Million U.S. Roles by 2030What’s the Deal With Physical AI? Why the Next Frontier of Tech Is Already All Around YouTeen Hackers Recruited Through Fake Job AdsTennessee Man to Plead Guilty to Hacking Supreme Court’s Electronic Case Filing SystemDutch Cops Cuff Alleged AVCheck Malware Kingpin in AmsterdamTarget Employees Confirm Leaked Source Code Is AuthenticSuspected Ransomware Attack Threatens One of South Korea’s Largest Companies, Kyowon GroupEverest Ransomware Group Claims Nissan Breach, Demands ResponseCentral Maine Healthcare Breach Exposed Data of Over 145,000 PeopleBelgian Hospital AZ Monica Shuts Down Servers After CyberattackVoidLink: New Chinese-Made Malware Framework Targets Linux-Based Cloud EnvironmentsGlobal Magecart Campaign Targets Six Card NetworksSHADOW#REACTOR Campaign Uses Text-Only Staging to Deploy Remcos RATConvincing LinkedIn Comment-Reply Tactic Used in New PhishingMalicious Chrome Extension Steals MEXC API Keys by Masquerading as Trading ToolPopular Python Libraries Used in Hugging Face Models Subject to Poisoned Metadata AttackAdobe Patches Critical Apache Tika Bug in ColdFusionMicrosoft January 2026 Patch Tuesday Fixes 3 Zero-Days, 114 Flaws…Microsoft Releases Windows 10 KB5073724 Extended Security Update…New Windows Updates Replace Expiring Secure Boot Certificates
1/12/2026 January 13, 2026January 13, 2026 ~ The Cyber Beat ~ Leave a comment Internet Monitoring Experts Say Iran Blackout Likely to ContinueSweden Detains Ex-Military IT Consultant Suspected of Spying for RussiaHungary Grants Asylum to Former Polish Minister Implicated in Spyware ProbeWorld Economic Forum: Cyber-Fraud Overtakes Ransomware as Business Leaders’ Top Cyber-Security ConcernIllicit Crypto Activity Hits Record $158bn in 2025Researchers Uncover Service Providers Fueling Industrial-Scale Pig Butchering FraudOfcom Officially Investigating X as Grok’s Nudify Button Stays Switched OnPalo Alto Networks Introduces New Vibe Coding Security Governance FrameworkHacker Gets Seven Years for Breaching Rotterdam and Antwerp Ports‘Violence-As-A-Service’ Suspect Arrested in Iraq, Extradition UnderwayKentucky Sues Character.AI, Alleging It Harms Children and Violates Data LawAnthropic Brings Claude to Healthcare with HIPAA-Ready Enterprise ToolsUniversity of Hawaii Cancer Center Hit by Ransomware AttackSpanish Energy Giant Endesa Discloses Data Breach Affecting Customers‘Bad Actor’ Hijacks Apex Legends Characters in Live MatchesTarget’s Dev Server Offline After Hackers Claim to Steal Source CodeArmenia Probes Alleged Sale of 8 Million Government Records on Hacker ForumFintech Firm Betterment Confirms Data Breach After Hackers Send Fake Crypto Scam Notification to UsersInstagram Denies Breach After Many Receive Emails Asking to Reset PasswordFacebook Login Thieves Now Using Browser-In-Browser TrickHidden Telegram Proxy Links Can Reveal Your IP Address in One Clickn8n Supply Chain Attack Abuses Community Nodes to Steal OAuth TokensCISA Orders Feds to Patch Gogs RCE Flaw Exploited in Zero-Day AttacksApple Confirms Google Gemini Will Power Siri, Says Privacy Remains a PriorityTorq Raises $140 Million for Agentic AI-Powered Cybersecurity Platform
1/9-11/2026 January 11, 2026January 11, 2026 ~ The Cyber Beat ~ Leave a comment China-Linked Hackers Exploit VMware ESXi Zero-Days to Escape Virtual MachinesRussian APT28 Runs Credential-Stealing Campaign Targeting Energy and Policy OrganizationsMuddyWater Launches RustyWater RAT via Spear-Phishing Across Middle East SectorsWorld Economic Forum: Deepfake Face-Swapping Tools Are Creating Critical Security RisksKrebs: Who Benefited from the Aisuru and Kimwolf Botnets?Europol Leads Global Crackdown on Black Axe Cybercrime Gang, 34 ArrestedX Didn’t Fix Grok’s ‘Undressing’ Problem. It Just Makes People Pay for It…Lawmakers Call On App Stores to Remove Grok, X Over Sexualized DeepfakesIllinois Man Charged With Hacking Snapchat Accounts to Steal Nude PhotosIreland Recalls Almost 13,000 Passports Over Missing ‘IRL’ CodeCalifornia Bans Data Broker Reselling Health Data of MillionsStellar Gains, Heavy Losses: Cybersecurity Stocks Had a Mixed YearHere’s What Cloud Security’s Future Holds for the Year AheadBreachForums Hacking Forum Database Leaked, Exposing 324,000 AccountsRansomware Attack on Texas Gas Station Firm Gulshan Management Services Leaks 377,000 User RecordsAt Least $26 Million in Crypto Stolen From Truebit Platform as Crypto Crime Landscape EvolvesAI-Powered Truman Show Operation Industrializes Investment FraudBetterment’s Financial App Sends Customers a $10,000 Crypto Scam MessageWarning Over Scams Targeting Manx Email AccountsInstagram Says It Fixed the Issue That Let Someone Send All Those Password Reset EmailsFBI Warns of North Korean QR Phishing CampaignsHackers Target Misconfigured Proxies to Access Paid LLM ServicesTrend Micro Apex Central RCE Flaw Scores 9.8 CVSS in On-Prem Windows VersionsCISA Retires 10 Emergency Cybersecurity Directives Issued Between 2019 and 2024UK Government Exempting Itself From Flagship Cyber Law Inspires Little ConfidenceFormer NSA Insider Kosiba Brought Back as Spy Agency’s No. 2
1/8/2026 January 8, 2026January 8, 2026 ~ The Cyber Beat ~ Leave a comment China Hacked Email Systems of U.S. Congressional Committee StaffU.S. To Leave Global Forum on Cyber ExpertiseNSA Cyber Directorate Gets New Acting LeadershipVenezuela Raid Highlights Cyber Vulnerability of Critical InfrastructureChatGPT Health Feature Draws Concern From Privacy Critics Over Sensitive Medical DataGrok Is Generating Sexual Content Far More Graphic Than What’s on XCrowdStrike Buys Identity Security Startup SGNL for $740 Million in Latest Deal PushCyera Valued at $9 Billion as Data Security Firm Raises $400 MillionEU Antitrust Regulators to Decide on Google’s Wiz Deal by February 10Texas Court Blocks Samsung From Tracking TV Viewing, Then Vacates OrderRansomware Attacks Kept Climbing in 2025 as Gangs Refused to Stay Dead…Two-Fifths of 50% of Breaches Take Two Weeks to Recover FromRussia Frees French Researcher in Prisoner Swap for Alleged Ransomware HackerChina-Linked UAT-7290 Targets Telecom Networks in South AsiaIran-Linked Hacker Group Claims to Have Hacked, Surveilled Senior Mossad AgentMore Than 100,000 Households Warned After Cyber Attack on Kensington and Chelsea CouncilSedgwick Breach Linked to TridentLocker Ransomware AttackWhatsApp Worm Spreads Astaroth Banking Trojan Across Brazil via Contact Auto-MessagingGoBruteforcer Botnet Targets Linux ServersResearchers Uncover NodeCordRAT Hidden in npm Bitcoin-Themed PackagesNew Zero-Click Attack Lets ChatGPT User Steal DataCISA Flags Microsoft Office and HPE OneView Bugs as Actively ExploitedCoolify Discloses 11 Critical Flaws Enabling Full Server Compromise on Self-Hosted InstancesCisco Patches ISE Security Vulnerability After Public PoC Exploit ReleaseCisco Switches Hit by Reboot Loops Due to DNS Client BugMicrosoft to Enforce MFA for Microsoft 365 Admin Center Sign-Ins
1/7/2026 January 7, 2026January 7, 2026 ~ The Cyber Beat ~ Leave a comment Cyberattacks Likely Part of Military Operation in VenezuelaEuropean Space Agency Calls Cops as Crims Lift Off 500 GB of Files, Say Security Black Hole Still OpenTaiwan Says China’s War Games Sought to Undermine Global Support for the IslandChina Intensifies Cyber-Attacks on Taiwan as Energy Sector Sees Tenfold SpikeGrok AI Still Being Used to Digitally Undress Women and Children Despite Suspension PledgeIBM’s AI Agent Bob Easily Duped to Run Malware, Researchers ShowGoogle Search AI Hallucinations Push Google to Hire “AI Answers Quality” EngineersPersonal LLM Accounts Drive Shadow AI Data Leak RisksCloudy Outlook for Cyber Jobs as AI Fills Security GapsStalkerware Operator Pleads Guilty in Rare ProsecutionAlleged Cyber Scam Kingpin Arrested, Extradited to ChinaMFA Failure Enables Infostealer Breach At 50 EnterprisesIllinois Department of Human Services Reports Yearslong Data BreachCyberattack Under Investigation by Coles County School District (IL)Spanish Airline Iberia Attributes Recent Data Breach Claims to November IncidentBlack Cat Behind SEO Poisoning Malware Campaign Targeting Popular Software SearchesGhost Tap Malware Fuels Surge in Remote NFC Payment FraudVersatile Malware Loader pkr_mtsi Delivers Diverse PayloadsMicrosoft Warns Misconfigured Email Routing Can Enable Internal Domain PhishingCritical jsPDF Flaw Lets Hackers Steal Secrets via Generated PDFsVeeam Patches Critical RCE Vulnerability with CVSS 9.0 in Backup & ReplicationCritical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full Control
1/6/2026 January 6, 2026January 6, 2026 ~ The Cyber Beat ~ Leave a comment Russia-Aligned Hackers Abuse Viber to Target Ukrainian Military and GovernmentUK Launches New Cyber Unit to Bolster Defences Against Cyber Threats…UK Government Admits Years of Cyber Policy Have Failed, Announces ResetRing’s Mobile Security Trailer Provides 360-Degree Coverage AnywhereTwo Chrome Extensions Caught Stealing ChatGPT and DeepSeek Chats from 900,000 UsersJaguar Land Rover Wholesale Volumes Down 43% After CyberattackStartup Trends Shaking Up Browsers, SOC Automation, AppSecCybersecurity Predictions 2026: An AI Arms Race and Malware AutonomyFake Booking Emails Redirect Hotel Staff to Fake BSoD Pages Delivering DCRatHospitality Sector Hit By PHALT#BLYX ClickFix Malware CampaignCloud File-Sharing Sites Targeted for Corporate Data Theft AttacksHigh-Severity Flaw in Open WebUI Affects AI ConnectionsNew D-Link Flaw in Legacy DSL Routers Actively Exploited in AttacksNew n8n Vulnerability (9.9 CVSS) Lets Authenticated Users Execute System CommandsCritical AdonisJS Bodyparser Flaw (CVSS 9.2) Enables Arbitrary File Write on ServersUnpatched Firmware Flaw Exposes TOTOLINK EX200 to Full Remote Device Takeover
1/5/2026 January 5, 2026January 5, 2026 ~ The Cyber Beat ~ Leave a comment Russian Hackers Target European Hospitality Industry With ‘Blue Screen of Death’ MalwareThe French University Where Spies Go for TrainingAs Supply-Chain Cyber Risks Mount, Can AI Help?EU Looking ‘Very Seriously’ at Taking Action Against X Over GrokFinland Arrests Two Crew Members of Ship Suspected of Cable BreakPlaying Koi: Palo Alto Isn’t Saying if It Will Buy Security Start-upVSCode IDE Forks Expose Users to “Recommended Extension” AttacksNew Zealand Orders Review Into ManageMyHealth CyberattackAurora College Working to Get Systems Back Up After Cyber AttackCyberattack Forces British High School to CloseLedger Customers Impacted by Third-Party Global-E Data BreachU.S. Broadband Provider Brightspeed Investigates Breach ClaimsNordVPN Denies Breach Claims, Says Attackers Have “Dummy Data”VVS Stealer Uses Advanced Obfuscation to Target Discord Users
1/2-4/2026 January 4, 2026January 4, 2026 ~ The Cyber Beat ~ Leave a comment Inside the Operation: How the U.S. Moved to Capture Nicolás MaduroTrump Suggests U.S. Used Cyberattacks to Turn Off Lights in Venezuela During StrikesKrebs: The Kimwolf Botnet is Stalking Your Local Network8 WhatsApp Features to Boost Your Security and PrivacyHow to Protect Your iPhone or Android Device From SpywareTrump Admin Sends Heart Emoji to Commercial Spyware Makers With Lifted Predator SanctionsBitfinex Crypto Thief Who Was Serving Five Years Thanks Trump for Early ReleasePalo Alto Networks Security-Intel Boss Calls AI Agents 2026’s Biggest Insider ThreatCybersecurity Predictions for 2026: Navigating the Future of Digital ThreatsCybercrook Claims to Be Selling Infrastructure Info About Three Major U.S. UtilitiesHackers Claim to Hack Resecurity, Firm Says It Was a HoneypotSedgwick Confirms Cyber Incident Affecting Its Major Federal Contractor SubsidiaryTrust Wallet Links $8.5 Million Crypto Theft to Shai-Hulud NPM AttackCovenant Health Says May Data Breach Impacted Nearly 478,000 PatientsTransparent Tribe Launches New RAT Attacks Against Indian Government and AcademiaCybercriminals Abuse Google Cloud Email Feature in Multi-Stage Phishing CampaignOver 10K Fortinet Firewalls Exposed to Actively Exploited 2FA Bypass
1/1/2026 January 2, 2026January 2, 2026 ~ The Cyber Beat ~ Leave a comment The Top 10 Cybersecurity Stories of 2025Banner Year: The Biggest Cybersecurity and Cyberattack Stories of 2025New GlassWorm Malware Wave Targets Macs With Trojanized Crypto WalletsBritish Cyber Expert Given Visa After ‘Hacking DFAT Website’
12/30-31/2025 January 1, 2026January 1, 2026 ~ The Cyber Beat ~ Leave a comment Mustang Panda Uses Signed Kernel-Mode Rootkit to Load TONESHELL BackdoorFinland Seizes Ship Suspected of Damaging Subsea Cable in Baltic SeaWashington Wants to Get Tough on Nation-State Hackers. Are Infrastructure Operators Ready?Fears Mount That U.S. Federal Cybersecurity Is Stagnating—Or WorseTwo Cybersecurity Employees Plead Guilty to Carrying Out Ransomware AttacksMeta Created ‘Playbook’ to Fend Off Pressure to Crack Down on Scammers, Documents ShowHong Kong’s Newest Anti-Scam Technology: Over-The-Counter BankingNew York’s Incoming Mayor Zohran Mamdani Bans Raspberry Pi at His Inauguration Party…And Flipper ZeroU.S. Treasury Lifts Sanctions on Three Individuals Linked to Intellexa and Predator SpywareDisney Will Pay $10 Million to Settle Children’s Data Privacy LawsuitCoupang to Split $1.17 Billion Among 33.7 Million Data Breach VictimsSilver Fox Targets Indian Users With Tax-Themed Emails Delivering ValleyRAT MalwareEuropean Space Agency Hit Again as Cybercrims Claim 200 GB Data up for SaleHackers Drain $3.9M From Unleash Protocol After Multisig HijackDarkSpectre Browser Extension Campaigns Exposed After Impacting 8.8 Million Users WorldwideZoom Stealer Browser Extensions Harvest Corporate Meeting IntelligenceNew ERRTraffic Service Enables ClickFix Attacks via Fake Browser GlitchesResearchers Spot Modified Shai-Hulud Worm Testing Payload on npm RegistryRondoDox Botnet Exploits React2Shell Flaw to Breach Next.js ServersUS, Australia Say ‘MongoBleed’ Bug Being ExploitedCSA Issues Alert on Critical SmarterMail Bug Allowing Remote Code ExecutionIBM Warns of Critical API Connect Bug Allowing Remote Authentication Bypass