Do Son OpenWrt One gets a Debian boost in Jan 2026. Use the M.2 NVMe slot to turn this "unbrickable" WiFi 6 router into a full Linux micro-server for $89.
New malware campaign impersonates Malwarebytes installers. Hackers use DLL sideloading to deploy infostealers targeting crypto & MFA. Verify downloads now.
ConnectWise patches critical Stored XSS (CVE-2026-0695) in PSA Time Entry notes. Vulnerability allows session hijacking. Update to version 2026.1 immediately.
S2W reveals DragonForce is a "cartel" hacking rivals like BlackLock. Built on LockBit 3.0 code, they offer "Ransombay" services. A decryptor was found.
Socket discovers 5 malicious Chrome extensions posing as productivity tools. They steal session tokens & block security teams. 2,300+ enterprise users at risk.
Infoblox researchers hijacked a scam network using the "Sitting Ducks" DNS flaw. 57M logs reveal how abandoned domains fuel global push notification spam.
Unpatched Livewire Filemanager flaw (CVE-2025-14894) allows unauthenticated RCE via malicious uploads. Check storage:link configurations immediately.
KnownSec leak exposes a "vertically integrated espionage stack." See how ZoomEye and GhostX power China's state-aligned cyber operations.
Critical Redmi Buds flaws (CVE-2025-13834) allow data theft and device crashes via Bluetooth. "Heartbleed"-style bug has no patch. Disable Bluetooth now.
New fileless Remcos RAT campaign uses a "[virus detected]" shipping lure to inject malware into memory via process hollowing. See how to spot it.
Deno, CVE-2026-22863, CVE-2026-22864, JavaScript Security, Cryptography, Command Injection, Windows Security, Node.js Compatibility, Patch Alert
Mustang Panda targets US gov with new LOTUSLITE backdoor. Campaign uses Venezuela lures and DLL sideloading to evade detection.
Critical: ABB OPTIMAX flaw CVE-2025-14510 (CVSS 9.2) allows auth bypass via Azure AD. Attackers can shut down systems. Patch or disable SSO now.
CloudSEK exposes "RedLineCyber," an impostor hijacking crypto clipboards on Discord. This stealthy malware drains wallets without a C2 server.
glibc patches CVE-2026-0861 (CVSS 8.4) & CVE-2026-0915. High-severity heap corruption and a 20-year-old leak affect Linux systems. Patch now.
Wiz reveals "CodeBreach": A regex typo in AWS CodeBuild could have let hackers hijack the AWS Console via the JS SDK. Issue is now patched.
Sansec uncovers a keylogger on a major US bank's employee portal. 200,000 staff at risk of credential theft via hidden "side door" malware.
Apache patches bRPC flaw CVE-2025-60021. Vulnerable heap profiler allows remote command injection. Upgrade to v1.15.0 to secure your infrastructure.
OpenAI launches ChatGPT Go at $8/mo in Jan 2026. Get more messages with the new GPT-5.2 Instant model as ads arrive on the Free and Go tiers.
OpenAI launches ChatGPT Go at $8/mo in Jan 2026. Get 10x more messages with the new GPT-5.2 Instant model as ads arrive on the Free and Go tiers.
Wikipedia marks 25 years on Jan 15, 2026, by announcing major AI data deals with Microsoft, Meta, and Amazon to fund its non-profit human knowledge mission.
Microsoft confirms KB5073455 causes Windows 11 23H2 Enterprise PCs to restart instead of shutting down. Use the shutdown /s /t 0 workaround now.