> TODAY'S SUMMARY (23 articles)
Today's cybersecurity news highlights several significant threats and trends:
1. A data leak at the State Bank of India exposed 3,897 customer records on the dark web, raising concerns about the source and integrity of the data.
2. The U.S. CISA has added vulnerabilities affecting Plex2Shell, Siemens, and SiteGuard to its Known Exploited Vulnerabilities catalog, urging federal agencies to apply patches promptly.
3. Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619), which could allow unauthenticated remote code execution, have leaked, prompting an emergency patch release.
4. A Belarus-aligned hacktivist group has infiltrated a Russian healthcare organization for nearly two years, utilizing a backdoor hidden in VMware Tools.
5. Stolen keys from UpdraftCentral have been used to backdoor WordPress sites, emphasizing the risks associated with developer account compromises.
Overall, the day reflects ongoing vulnerabilities in software and infrastructure, alongside significant breaches affecting both financial institutions and web services.
|
// AI-powered summary generated at 08:00
A simple payload allowed attackers to create a new event leaking summaries of the victim’s private meetings.
The post Weaponized Invite Enabled Calendar Data Theft via Google Gemini appeared first on SecurityWeek.
Gartner predicts 50% of organizations will adopt zero trust data governance by 2028
Leaked API keys are no longer unusual, nor are the breaches that follow. So why are sensitive tokens still being so easily exposed?
To find out, Intruder’s research team looked at what traditional vulnerability scanners actually cover and built a new secrets detection method to address gaps in exist...
A newly disclosed weakness in Google’s Gemini shows how attackers could exploit routine calendar invitations to influence the model’s behavior, underscoring emerging security risks as enterprises embed generative AI into everyday productivity and decision-making workflows....
Let’s Encrypt says its short-lived TLS certificates with a 6-day lifetime are now generally available. Each certificate is valid for 160 hours from the time it is issued. To request one, operators must select the “shortlived” profile in their ACME client. The option is opt-in and works with clients...
For a long time, cybersecurity was pretty straightforward: Guard the edges, and everything inside should be fine. Firewalls, DMZs, VPNs — these were the go-to tools. Back then, it worked. Apps lived in data centers, and everyone showed up at the office. But that world disappea...
IDNs or “International Domain Names” have been with us for a while now (see RFC3490[1]). They are (ab)used in many attack scenarios because.. it works! Who can immediately spot the difference between:
A notorious marketplace for fraud, Tudou Guarantee, appears to have closed its public Telegram groups
Once again, data shows an uncomfortable truth: the habit of choosing eminently hackable passwords is alive and well
Major Telegram-based illicit marketplace Tudou Guarantee appears to be shutting down its operations, according to Elliptic. Blockchain cybersecurity firm Elliptic reports that Tudou Guarantee, a major Telegram-based illicit marketplace in Southeast Asia, has stopped transactions in its public groups...
Alisa Viejo, United States, 20th January 2026, CyberNewsWire
The post One Identity Unveils Major Upgrade to Identity Manager, Strengthening Enterprise Identity Security appeared first on Security Boulevard.
Key Points Introduction When we first encountered VoidLink, we were struck by its level of maturity, high functionality, efficient architecture, and flexible, dynamic operating model. Employing technologies like eBPF and LKM rootkits and dedicated modules for cloud enumeration and post-exploitation...
Over the course of 2025, we performed several hundred security assessments for our clients. In each of these, security analysts must understand a new environment and often work with unfamiliar technologies. Even for well-known technologies, things change rapidly. Quick learning and adaptability are...
srcset="https://b2b-contenthub.com/wp-content/uploads/2026/01/shutterstock_1476774605.jpg?quality=50&strip=all 2557w, https://b2b-contenthub.com/wp-content/uploads/2026/01/shutterstock_1476774605.jpg?resize=300%2C168&quality=50&strip=all 300w, https://b2b-contenthu...
The UK government warns Russia-linked hacktivists are still carrying out DDoS attacks on critical infrastructure and local government systems The UK government warns that Russia-linked hacktivists are continuing DDoS attacks against critical infrastructure and local government systems. “Today, 19th...
A free, publicly accessible database for IT security vulnerabilities, the db.gcve.eu, has been created by GCVE (Global Cybersecurity Vulnerability Enumeration). The aim is to end dependence on US databases and strengthen digital sovereignty in Europe.
The initiative came to...
A Telegram-based guarantee marketplace known for advertising a broad range of illicit services appears to be winding down its operations, according to new findings from Elliptic.
The blockchain intelligence company said Tudou Guarantee has effectively ceased transactions through its public Telegram...
Digitally signing Java applications improves authenticity, integrity, and trust. DigiCert KeyLocker allows you to sign .jar files securely using keys stored in DigiCert’s cloud-based Hardware Security Modules (HSMs) and the DigiCert KSP Library. This guide explains how to establish your environment...
Kimwolf botnet exploits smart gadgets for DDoS attacks, highlighting security lapses in device protection and supply chains.
The post What’s On the Tube Or Rather in the Tube: Kimwolf Targets Android-based TVs and Streaming Devices appeared first on Security Boulevard.
Web browsers have long been the security sinkhole of enterprise infrastructure. While email is often cited as the most common entry point, malware often enters via the browser and is more difficult to prevent. Phishing, drive-by attacks, ransomware, SQL injections, man-in-the-...