> TODAY'S SUMMARY (7 articles)
Today's cyber news highlights several key threats and trends. Hackers are increasingly targeting AI systems, as demonstrated by a recent incident where credentials were stolen, leading to $740,000 in unauthorized compute usage for a cloud provider. Microsoft researchers revealed vulnerabilities in AI models, showing that attackers can create backdoors by manipulating just a few neurons. Additionally, recent updates for Slackware address critical security issues, including remote code execution and memory errors in their httpd and Git packages. The ongoing risk of vehicle hacking is underscored by a podcast discussing how attackers can gain control over car systems. As cyber threats evolve, organizations must prioritize robust security measures against these emerging vulnerabilities.
|
// AI-powered summary generated at 04:00
Key findings Introduction In December 2025, a previously unknown Ransomware-as-a-Service (RaaS) operation calling itself Sicarii began advertising its services across multiple underground platforms. The group’s name references the Sicarii, a 1st-century Jewish assassins group that opposed Roman rule...
Hackers posted online what they said were samples of about 860 GB of internal source code, developer documentation, and other data taken from systems of giant U.S. retailer Target and is reportedly offering to sell the stolen information.
The post Threat Actor Teases Source Code for Sale After Hack...
A new DeadLock ransomware operation uses Polygon blockchain smart contracts to manage proxy server addresses
Security experts have disclosed details of an active malware campaign that's exploiting a DLL side-loading vulnerability in a legitimate binary associated with the open-source c-ares library to bypass security controls and deliver a wide range of commodity trojans and stealers.
"Attackers achieve ev...
New crooks on the block get crafty with blockchain to evade defenses Researchers at Group-IB say the DeadLock ransomware operation is using blockchain-based anti-detection methods to evade defenders' attempts to analyze their tradecraft.…
The Predator spyware is more sophisticated and dangerous than previously realized.
The post Predator Spyware Turns Failed Attacks Into Intelligence for Future Exploits appeared first on SecurityWeek.
Join former Gartner analyst Ravisha Chugh and Abnormal’s Director of Product Marketing, Lane Billings, on January 20th for an exclusive insider look at how email security vendors will be evaluated in 2026. Backed by years of analyst experience and deep market insight, this session equips security le...
Researchers identified an attack method dubbed "Reprompt" that could allow attackers to infiltrate a user's Microsoft Copilot session and issue commands to exfiltrate sensitive data. [...]
SpyCloud has released Supply Chain Threat Protection solution, an advanced layer of defense that expands identity threat protection across the extended workforce, including organizations’ entire vendor ecosystems. SpyCloud Supply Chain Threat Protection provides timely access to identity threats der...
Microsoft a dévoilé une faille de sécurité importante dans WDS : CVE-2026-0386. Le correctif peut impacter le déploiement avec un fichier de réponse unattend.
Le post Serveur WDS – CVE-2026-0386 : le correctif va impacter les fichiers de réponse a été publié sur IT-Connect.
It was discovered that Erlang incorrectly validated peer certificates
when incorrect extended key usage was presented. A remote attacker could
possibly use this issue to bypass SSL key usage restrictions.
Originally published at EasyDMARC Expands Executive Team with Armen Najarian as Chief Commercial Officer by Anush Yolyan.
DOVER, DE, UNITED STATES, January 14, 2026 — ...
The post EasyDMARC Expands Executive Team with Armen Najarian as Chief Commercial Officer appeared first on EasyDMARC.
The post E...
CISA is giving civilian agencies until February 3 to fix a Windows vulnerability that can reveal where code resides in memory.
Airia announced the launch of its AI Governance product, the third pillar of its comprehensive enterprise AI management ecosystem. The new offering joins Airia’s established AI Security and Agent Orchestration capabilities to provide enterprises with end-to-end visibility, control, and compliance ac...
Novee provides continuous AI-driven penetration testing to uncover and address novel vulnerabilities.
The post Novee Emerges From Stealth With $51.5 Million in Funding appeared first on SecurityWeek.
The AZ Monica hospital system in Antwerp reported a cyberattack that required the assistance of the Red Cross to send several patients to other facilities.
Cyber-stricken Belgian hospitals refuse ambulances, transfer critical patients A major cyberattack on Belgian healthcare facilities has entered its second day, forcing hospitals to turn away ambulances and transfer critical patients to other facilities. The attack has caused significant disruption t...
Austin, TX / USA, 14th January 2026, CyberNewsWire
The post SpyCloud Launches Supply Chain Solution to Combat Rising Third-Party Identity Threats appeared first on Security Boulevard.
SpyCloud, the leader in identity threat protection, today announced the launch of its Supply Chain Threat Protection solution, an advanced layer of defense that expands identity threat protection across the extended workforce, including organizations’ entire vendor ecosystems....
In today's security landscape, it's easy to get lost in a sea of acronyms. But one layer has become the undisputed foundation for modern application security: API security.
Why? Because APIs are no longer just part of the application, they are the application. They are the connective tissue for micr...