![Cybersecurity News | Daily Recap [13 Jan 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [13 Jan 2026]")
Daily Recap, Attackers are targeting LLMs in a widespread campaign to manipulate model interfaces and access data. Experts warn cyber disruption is now a sovereign risk and outline what CISOs should expect through 2026. #LLMCampaign #APT28 #IranBlackouts #ArmeniaRecords #HungaryAsylum #n8n #GoBruteforcer #GogsRCE #UHCancerCenter #Instagram #Facebook #ApexLegends #PortsBreach #RotterdamPorts #AntwerpPorts
Category: Cyber Security News
A recent Windows 365 update has caused access issues for Microsoft 365 Cloud PC users, leading to sign-in failures and service disruptions. Microsoft is actively investigating the problem and has provided temporary workarounds while analyzing the update to implement a permanent solution. #Windows365 #AzureVirtualDesktop
The Victorian Department of Education experienced a data breach resulting in unauthorized access to student information and email addresses, prompting immediate password resets. While sensitive data remained secure, the incident raises concerns about data protection in school systems. #VictoriaAustralia #StudentDataBreach
Pax8 mistakenly sent a sensitive spreadsheet containing internal business and licensing data to fewer than 40 UK-based partners, leading to potential exposure of partner and customer information. Threat actors are now attempting to purchase the leaked dataset, which could be exploited for targeting or fraud. #Pax8DataLeak #MSPLicensingInformation
Researchers have discovered a new attack method called “Reprompt” that exploits Microsoft’s Copilot to exfiltrate sensitive user data without detection. The vulnerability was addressed by Microsoft in a recent security update, emphasizing the importance of applying the latest patches. #MicrosoftCopilot #RepromptVulnerability
The article discusses the novel ConsentFix attack technique that hijacks Microsoft accounts by exploiting OAuth consent phishing combined with social engineering. It highlights community responses, vulnerabilities in Microsoft apps, and recommended defenses to detect and prevent this emerging threat. #ConsentFix #OAuthPhishing
Research shows a significant increase in third-party applications accessing sensitive data without justification, with government and education sectors experiencing sharp rises in malicious activity. Despite prioritizing web security, most organizations lack implemented solutions to mitigate these risks, emphasizing governance gaps and over-permissioned tracking tools like Facebook Pixel and Google Tag Manager….
Fortinet has issued security updates addressing a critical flaw in FortiSIEM that enables unauthenticated remote code execution through a command injection vulnerability. This flaw, if exploited, can lead to full system compromise, impacting specific FortiSIEM versions. #FortiSIEM #CVE-2025-64155…
Security experts have uncovered an active malware campaign exploiting DLL side-loading vulnerabilities in open-source software to deploy various trojans and stealers, bypassing traditional security defenses. The attackers use trusted, signed utilities like GitKraken’s ahost.exe to gain access, targeting regional organizations with phishing schemes involving fake login pages and cloud infrastructure abuse….
A ransomware attack on AZ Monica hospital in Belgium has caused significant disruptions to medical services, including canceled surgeries and transferred critical care patients. The hospital’s IT systems were shut down to prevent data compromise, severely impacting patient care and emergency response. #Ryuk #BelgiumHealthcare…
U.S. government agencies are mandated to patch a critical Windows vulnerability, CVE-2026-20805, exploited by threat actors, which could lead to information leaks. This flaw affects the Desktop Windows Manager, a core component for visual effects in Windows, and highlights ongoing threats to system security. #CVE-2026-20805 #WindowsDWM…
Novee, an offensive security startup, has emerged from stealth with $51.5 million in funding to develop an AI-driven penetration testing platform that simulates real-world hacking tactics. The platform aims to enhance vulnerability detection and automate security validation, empowering security teams to focus on complex threats. #Novee #AIcybersecurity…
Recent research reveals that Predator spyware, developed by Cytrox and marketed mainly to government agencies, is more advanced and adaptable than previously thought. Its self-diagnostic and anti-analysis features make it a formidable tool for covert surveillance. #PredatorSpyware #Cytrox #Intellexa #NSOGroupPegasus #GovernmentSurveillance…
Microsoft has partnered with law enforcement to target and dismantle the RedVDS cybercrime platform, which has facilitated extensive fraud activities globally. The operation includes seizure of domains, key servers, and efforts to disrupt payment networks, aiming to reduce phishing and account compromise incidents. #RedVDS #Storm-2470…
A cyberattack on Monroe University in December 2024 led to the theft of personal, financial, and health data of over 320,000 individuals. The incident highlights ongoing vulnerabilities in U.S. educational institutions to ransomware and data breaches. #MonroeUniversity #DataBreach #RansomwareAttack