Do Son ASEC warns of Larva-25012 using fake Notepad++ installers for Proxyjacking. The malware disables Defender and sells your bandwidth. Check your tasks.
Open5GS WebUI vulnerability CVE-2026-0622 uses the default secret "change-me," allowing attackers to forge admin tokens. Patch now or update your keys.
Attackers abuse GitHub, Dropbox, and the "Defendnot" research tool to disable Windows Defender and deploy Amnesia RAT & ransomware in Russia.
cybernewswire
Boston, MA, USA, 21st January 2026, CyberNewsWire
GitLab patches high-severity 2FA bypass (CVE-2026-0723) & DoS flaws. Update to 18.8.2, 18.7.2, or 18.6.4 immediately to secure your instance.
NVIDIA fixes high-severity code injection flaws in Nsight Graphics and Merlin (CVE-2025-33206/33). Update to v2025.5 immediately to prevent compromise.
Oracle patches CVE-2026-21962 (CVSS 10) in Fusion Middleware. This critical flaw allows unauthenticated server takeover. Update immediately.
Urgent: Zoom Node vulnerability CVE-2026-22844 (CVSS 9.9) allows command injection. Update MMR modules to v5.2.1716.0 now to prevent remote attacks.
Does a missing robots.txt delete your site from Google? Discover the truth about Googlebot behavior, 404 errors, and indexing rules in Jan 2026.
Google mandates developer verification for Android sideloading in 2026. Learn how the new digital signature rules and "Advanced Flow" protect your data.
The Meta Oversight Board reviews its first permanent account ban in Jan 2026. Discover how a "strike-less" suspension for harassment is changing platform law.
Critical GNU Inetutils telnetd flaw allows unauthenticated root access via "-f root". Affects v1.9.3-2.7. Disable telnet immediately to stay safe.
libheif flaw CVE-2025-65586 causes app crashes via malformed HEIF images. Update to v1.21.0 now to prevent Denial of Service attacks.
"Contagious Interview" evolves: DPRK hackers now abuse VS Code tasks & npm install to breach developer systems. Jamf warns of new infection vectors.
CVE-2025-13151: A one-byte overflow in GNU libtasn1 risks memory corruption during cert parsing. Patch now to secure your cryptographic applications.
New PURELOGS campaign uses Archive.org images to hide malware. For just $150, this MaaS steals crypto & passwords via fileless attacks. Spot the signs.
CPR reveals VoidLink: the first advanced malware framework architected by AI. Using "Spec Driven Development," it reached functional status in under a week.
Apache Solr patches moderate flaws CVE-2026-22444 & CVE-2026-22022. Vulnerabilities risk NTLM hash leaks and auth bypass. Update to v9.10.1 now.
Google releases Chrome 144 to fix CVE-2026-1220, a high-severity "Race in V8" vulnerability. Update now to prevent memory corruption attacks.
Public exploit disclosed for Redis CVE-2025-62507. Missing stack canaries in Docker allow unauthenticated RCE. Update to v8.3.2 immediately.
High-severity ImageMagick flaw CVE-2026-23876 allows heap buffer overflows via XBM images. Update to v7.1.2-13 to prevent remote attacks.
Trend Micro reveals Evelyn Stealer, a malware campaign weaponizing Visual Studio Code extensions. It uses DLL injection to steal developer secrets & crypto.