Weaponized Shipping Documents Spread Remcos RAT in Stealthy Malware Campaign
21
Jan
2026

Weaponized Shipping Documents Spread Remcos RAT in Stealthy Malware Campaign

A sophisticated phishing campaign distributing a fileless variant of Remcos RAT, a commercial remote access tool offering extensive capabilities, including…

Eightfold sued for helping companies secretly score job seekers
21
Jan
2026

Eightfold sued for helping companies secretly score job seekers

Eightfold AI, a venture capital-backed artificial intelligence hiring platform used ​by Microsoft, ⁠PayPal and many other Fortune 500 companies, is…

Alleged Ransomware Attack on Apple's Second-Largest Manufacturer Luxshare
21
Jan
2026

Alleged Ransomware Attack on Apple’s Second-Largest Manufacturer Luxshare

A ransomware attack has reportedly exposed confidential internal documents at a major electronics manufacturer. The breach compromises the company’s critical…

PURELOGS Payload Hidden in Weaponized PNG Images Used in Stealth Attacks
21
Jan
2026

PURELOGS Payload Hidden in Weaponized PNG Images Used in Stealth Attacks

A sophisticated PURELOGS infostealer campaign that weaponizes PNG image files to evade detection.The attack begins with a phishing email disguised…

Fully patched FortiGate firewalls are getting compromised via CVE-2025-59718?
21
Jan
2026

Fully patched FortiGate firewalls are getting compromised via CVE-2025-59718?

CVE-2025-59718, a critical authentication bypass flaw that attackers exploited in December 2025 to compromise FortiGate appliances, appears to persist in…

Zoom patches critical Windows flaw allowing privilege escalation
21
Jan
2026

Zoom fixed critical Node Multimedia Routers flaw

Zoom fixed critical Node Multimedia Routers flaw Pierluigi Paganini January 21, 2026 Zoom addressed a critical security vulnerability, tracked as…

Microsoft Investigating Issue Impacting Exchange Online, Teams, and M365 Suite
21
Jan
2026

Microsoft Investigating Issue Impacting Exchange Online, Teams, and M365 Suite

Microsoft has confirmed it is actively investigating a new service incident affecting multiple core services within the Microsoft 365 ecosystem….

Magecart Hack Injects JavaScript to Steal Online Payment Data
21
Jan
2026

Magecart Hack Injects JavaScript to Steal Online Payment Data

A new Magecart-style campaign is actively targeting e-commerce websites by injecting malicious JavaScript that intercepts and exfiltrates payment card data…

Hackers Weaponized 2,500+ Security Tools to Terminate Endpoint Protection Before Deploying Ransomware
21
Jan
2026

Hackers Weaponized 2,500+ Security Tools to Terminate Endpoint Protection Before Deploying Ransomware

A large-scale campaign is turning a trusted Windows security driver into a weapon that shuts down protection tools before ransomware…

Surveillance and ICE Are Driving Patients Away From Medical Care, Report Warns
21
Jan
2026

Surveillance and ICE Are Driving Patients Away From Medical Care, Report Warns

When immigration agents enter hospitals and private companies are allowed to buy and sell data that reveals who seeks medical…

GNU InetUtils Vulnerability Exploited via “-f root” to Achieve Full System Control
21
Jan
2026

GNU InetUtils Vulnerability Exploited via “-f root” to Achieve Full System Control

A critical authentication bypass vulnerability in GNU InetUtils’ telnetd server allows remote attackers to gain root access without credentials by…

RCE flaw in Cisco enterprise communications products probed by attackers (CVE-2026-20045)
21
Jan
2026

RCE flaw in Cisco enterprise communications products probed by attackers (CVE-2026-20045)

Cisco has fixed a critical remote code execution vulnerability (CVE-2026-20045) in some of its unified communications solutions that’s being targeted…