> TODAY'S SUMMARY (65 articles)
Today's cybersecurity landscape highlights several critical threats and trends. The UK NCSC warns organizations to update systems using PHP due to critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that were leaked prior to an emergency patch release. Ransomware attacks are escalating, with groups like The Gentlemen and Qilin intensifying their tactics in a competitive landscape. Additionally, the CISA reports that the SafePay ransomware gang has breached over 600 critical infrastructure entities globally. Concerns around AI are growing, as its capabilities may empower less skilled attackers to conduct sophisticated exploits. Lastly, a significant flaw in Signal's calling library has emerged, which may allow ongoing eavesdropping after calls end, prompting users to update their apps.
|
// AI-powered summary generated at 12:01
The voluntary framework would provide legal clarity to third-party AI researchers, including those who study safety and other “unexpected” AI behaviors.
The post HackerOne rolls out industry framework to support ‘good faith’ AI research appeared first on CyberScoop.
The revelation comes as part of a series of corrections in a legal case over DOGE’s access to Social Security Administration data.
Airlock Digital, a leader in proactive application control and endpoint security, announced the release of The Total Economic Impact (TEI) of Airlock Digital, an independent study commissioned by Airlock Digital and conducted by Forrester Consulting. The study demonstrates a s...
Check Point dug into the details of VoidLink and found a sophisticated and quickly developed malware that was mostly generated using AI and putting a spotlight on what the future of cyber threats looks like.
The post VoidLink Represents the Future of AI-Developed Malware: Check Point appeared first...
The online mentoring site UStrive exposed email addresses, phone numbers, and other non-public information to other logged-in users. The nonprofit told TechCrunch that the issue is now fixed, but wouldn't commit to alerting affected individuals.
A new tool to help security teams quantify AI risk and prepare for 2026 regulations.
The post Introducing Mend.io’s AI Security Maturity Survey + Compliance Checklist available today appeared first on Security Boulevard.
Atlanta, GA, United States, 20th January 2026, CyberNewsWire
The post Airlock Digital Announces Independent TEI Study Quantifying Measurable ROI & Security Impact appeared first on Security Boulevard.
Under the new rules, measures for 5G cybersecurity would become mandatory.
The post EU Plans Phase Out of High Risk Telecom Suppliers, in Proposals Seen as Targeting China appeared first on SecurityWeek.
Session 9C: Phishing & Fraud 2
Authors, Creators & Presenters: Boladji Vinny Adjibi (Georgia Tech), Athanasios Avgetidis (Georgia Tech), Manos Antonakakis (Georgia Tech), Michael Bailey (Georgia Tech), Fabian Monrose (Georgia Tech)
PAPER
The Guardians of Name Street: Studying the Defensive...
Amazon Web Services (AWS) is pleased to announce that the Fall 2025 System and Organization Controls (SOC) 1, 2, and 3 reports are now available. The reports cover 185 services over the 12-month period from October 1, 2024–September 30, 2025, giving customers a full year of assurance. These reports...
The recently discovered cloud-focused VoidLink malware framework is believed to have been developed by a single person with the help of an artificial intelligence model. [...]
So many data breaches happen throughout the year that it can be pretty easy to gloss over not just if, but how many different breaches compromised your data. We're diving into these data breaches and more with our latest EFFector newsletter.
Since 1990, EFFector has been your guide to understanding...
So many data breaches happen throughout the year that it can be pretty easy to gloss over not just if, but how many different breaches compromised your data. We're diving into these data breaches and more with our latest EFFector newsletter.
Since 1990, EFFector has been your guide to understanding...
Internal ICE planning documents propose spending up to $50 million on a privately run network capable of shipping immigrants in custody hundreds of miles across the Upper Midwest.
In Star Trek, the Kobayashi Maru simulation is an unwinnable test faced by Starfleet cadet captains. The only way to “win” is to accept that you can’t. It’s a test of character — forcing cadet captains to choose between impossible options and live with the consequences. In many ways, our roles as c...
A Jordanian man pleaded guilty in the US to selling illegal access to 50 compromised enterprise networks after an undercover sting. A Jordanian national Feras Khalil Ahmad Albashiti (40), living in Georgia, pleaded guilty in a US court to acting as an access broker, selling unauthorized access to th...
The Supreme Court agreed to hear a case challenging the constitutionality of geofence warrants, which let law enforcement compel companies to provide the location data of cell phones at specific times and places.
The European Commission has proposed new cybersecurity legislation mandating the removal of high-risk suppliers to secure telecommunications networks and strengthening defenses against state-backed and cybercrime groups targeting critical infrastructure. [...]
AI + skilled malware developers = security threat VoidLink, the newly spotted Linux malware that targets victims' clouds with 37 evil plugins, was generated "almost entirely by artificial intelligence" and likely developed by just one person, according to the research team that discovered the do-it-...
The North Korean threat actors associated with the long-running Contagious Interview campaign have been observed using malicious Microsoft Visual Studio Code (VS Code) projects as lures to deliver a backdoor on compromised endpoints.
The latest finding demonstrates continued evolution of the new tac...