> TODAY'S SUMMARY (117 articles)
Today's cyber news highlights several significant threats and trends:
1. eMudhra's certificate authority private keys were compromised, leading to urgent updates from major browsers to mitigate potential security risks.
2. Development platform Zeabur faced a second breach in two months due to leaked plaintext credentials, resulting in substantial data theft.
3. A data breach at Nikkei exposed over 1.8 million records, prompting concerns about the security of cloud services.
4. Ransomware groups are exploiting vulnerabilities in Palo Alto Networks products and Siemens Software Center, with active attacks reported.
5. ConnectWise's cloud backup service was disrupted due to a supply-chain attack, impacting numerous customers.
6. An increase in malicious calendar invite attacks has been reported, with a staggering 1,216% rise noted by security providers.
Overall, these incidents underscore the need for robust credential management and timely software updates to address emerging vulnerabilities.
|
// AI-powered summary generated at 20:00
It was discovered that Erlang incorrectly validated peer certificates
when incorrect extended key usage was presented. A remote attacker could
possibly use this issue to bypass SSL key usage restrictions.
Originally published at EasyDMARC Expands Executive Team with Armen Najarian as Chief Commercial Officer by Anush Yolyan.
DOVER, DE, UNITED STATES, January 14, 2026 — ...
The post EasyDMARC Expands Executive Team with Armen Najarian as Chief Commercial Officer appeared first on EasyDMARC.
The post E...
CISA is giving civilian agencies until February 3 to fix a Windows vulnerability that can reveal where code resides in memory.
Airia announced the launch of its AI Governance product, the third pillar of its comprehensive enterprise AI management ecosystem. The new offering joins Airia’s established AI Security and Agent Orchestration capabilities to provide enterprises with end-to-end visibility, control, and compliance ac...
Novee provides continuous AI-driven penetration testing to uncover and address novel vulnerabilities.
The post Novee Emerges From Stealth With $51.5 Million in Funding appeared first on SecurityWeek.
The AZ Monica hospital system in Antwerp reported a cyberattack that required the assistance of the Red Cross to send several patients to other facilities.
Cyber-stricken Belgian hospitals refuse ambulances, transfer critical patients A major cyberattack on Belgian healthcare facilities has entered its second day, forcing hospitals to turn away ambulances and transfer critical patients to other facilities. The attack has caused significant disruption t...
Austin, TX / USA, 14th January 2026, CyberNewsWire
The post SpyCloud Launches Supply Chain Solution to Combat Rising Third-Party Identity Threats appeared first on Security Boulevard.
SpyCloud, the leader in identity threat protection, today announced the launch of its Supply Chain Threat Protection solution, an advanced layer of defense that expands identity threat protection across the extended workforce, including organizations’ entire vendor ecosystems....
In today's security landscape, it's easy to get lost in a sea of acronyms. But one layer has become the undisputed foundation for modern application security: API security.
Why? Because APIs are no longer just part of the application, they are the application. They are the connective tissue for micr...
Attack enters second day with major disruption to healthcare provision Two hospitals in Belgium have cancelled surgeries and transferred critical patients to other facilities after shutting down servers following a cyberattack.…
One Identity has unveiled a major upgrade to One Identity Manager, strengthening identity governance as a critical security control for modern enterprise environments. One Identity Manager 10.0 introduces security-driven capabilities for risk-based governance, identity threat detection and response...
Travel biz tells customers to change passwords beyond its own services Eurail has confirmed customer information was stolen in a data breach, according to notification emails sent out this week.…
U-turn leaves questions on costs, funding, and benefits unanswered The UK government has backed down from making digital ID mandatory for proof of a right to work in the country, adding to confusion over the scheme's cost and purpose.…
A Magecart campaign is skimming card data from online checkouts tied to major payment networks, including AmEx, Diners Club, and Mastercard.
CrowdStrike has agreed to acquire Israel-based Seraphic Security, a browser runtime security company, to extend its Falcon platform to browser-native enterprise security.
Expected to close by April, the acquisition will allow CrowdStrike to integrate Seraphic’s browser-nati...
Cloud marketplace and distributor Pax8 has confirmed that it mistakenly sent an email to fewer than 40 UK-based partners containing a spreadsheet with internal business information, including MSP customer and Microsoft licensing data. [...]
Fortinet has released updates to fix a critical security flaw impacting FortiSIEM that could allow an unauthenticated attacker to achieve code execution on susceptible instances.
The operating system (OS) injection vulnerability, tracked as CVE-2025-64155, is rated 9.4 out of 10.0 on the CVSS scorin...
The company will use the fresh investment to accelerate its global go-to-market and product expansion.
The post WitnessAI Raises $58 Million for AI Security Platform appeared first on SecurityWeek.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw impacting Microsoft Windows to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Microsoft Windows vulnerability, tracked as CVE-2026-20805 (CVSS Score of...