![Cybersecurity News | Daily Recap [09 Jan 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [09 Jan 2026]")
Daily Recap, UK unveils a new national cyber action plan to close public-sector gaps and strengthen defenses across government, while the US signals broad diplomatic shifts by exiting global cyber coalitions and dozens of international treaties. In industry and innovation, CrowdStrike will buy identity-security firm SGNL for $740 million to expand identity threat coverage, Blackbird.AI raises 28 million to grow its narrative-intelligence platform and analytics, and OpenAI launches ChatGPT Health with isolated, encrypted controls for sensitive health data to support HIPAA-style protections. #UKCyberPlan #USExit #CrowdStrike #SGNL #BlackbirdAI #OpenAIHealth #AgenticAI #ChromeExtensions #jsPDF #n8n #CiscoISE #MFA #Taiwan #China #Iberia #Prosura #MicrosoftExchangeOnline #GoBruteforcer #RustFS
Category: Cyber Security News
Ireland’s Department of Foreign Affairs recalled nearly 13,000 passports due to a software update that caused a printing defect, affecting their compliance with international travel standards. This issue could lead to passport rejection at border control systems worldwide and has prompted a global alert through ICAO. #ICAO #IRLpassport
Europol has arrested 34 individuals across Spain involved in the Black Axe criminal organization, which engages in a variety of illegal activities including cyber fraud and human trafficking. The organization has a global presence with thousands of members and has caused significant financial damages and law enforcement actions worldwide.
#BlackAxe #CyberFraud…
MuddyWater, an Iranian threat actor, has launched a spear-phishing campaign using Rust-based implants called RustyWater to target Middle Eastern entities. This evolution in their tactics enhances their malware capabilities with modular, resilient features. #MuddyWater #RustyWater #IranianThreatActor…
This webinar by Bitdefender provides a data-driven analysis of emerging cybersecurity threats for 2026, focusing on real risks rather than speculation. It emphasizes the evolution of ransomware, internal risks from AI adoption, and the skepticism around AI-orchestrated attacks. #RansomwareEvolution #AIInternalThreats #CyberPredictions2026…
Russian state-sponsored hackers, linked to APT28 (BlueDelta), have launched targeted credential-harvesting campaigns against organizations in Turkey, Europe, North Macedonia, and Uzbekistan. These campaigns use sophisticated phishing tactics and legitimate service infrastructures to steal credentials and support Russian intelligence efforts. #APT28 #BlueDelta #GRU #CredentialHarvesting #PhishingAttacks…
A man from Illinois has been charged for running a phishing scheme that compromised nearly 600 Snapchat accounts to steal and sell private photos. This case highlights the dangers of social engineering, account hacking, and online exploitation. #SnapchatHacking #KyleSvara
This article emphasizes the importance of focusing on containment and response metrics in email security rather than just click rates. It discusses the limitations of traditional prevention methods and highlights automated workflows to improve resilience against mailbox breaches. #MaterialSecurity #EmailContainment
The Illinois Department of Human Services accidentally exposed the personal and health data of nearly 700,000 residents due to misconfigured privacy settings on mapping websites. This incident highlights the importance of strict data access controls and ongoing security reviews for sensitive information. #IDHSDataBreach #PrivacySettings
Cybersecurity experts report ongoing campaigns targeting misconfigured proxy servers to access large language model (LLM) services. These activities involve probing dozens of endpoints and using benign queries to avoid detection. #LLMEndpoints #SSRFAttacks
Microsoft is testing a new policy that enables IT admins to uninstall the AI-powered Copilot assistant on managed devices running Windows 11 Insider Preview Builds. This update provides targeted control over Copilot deployment and can be reapplied by users if desired. #MicrosoftCopilot #WindowsInsiderPreview
Hitachi Energy’s Asset Suite versions prior to 9.8 are vulnerable to a Java deserialization flaw exploited through Jasper Report, risking remote code execution. Proper mitigation and network security practices are essential to protect critical energy infrastructure from potential attacks. #JasperReport #DeserializationVulnerability…
Chinese hackers, possibly affiliated with the Salt Typhoon group, targeted email inboxes of House of Representatives committees involved in foreign affairs, intelligence, and armed services. The intrusion highlights ongoing concerns about Chinese state-backed cyber activities aiming to access U.S. government information. #SaltTyphoon #HouseOfRepresentatives #ChineseHackers…
The EEOC experienced a security breach involving contractor employees mishandling sensitive data, potentially exposing personally identifiable information. The agency is working with law enforcement to assess the impact and has taken immediate steps to secure its systems. #EEOC #PublicPortal #LawEnforcement #DataBreach #ContractorSecurity…
Chinese-speaking threat groups exploited a compromised SonicWall VPN to deploy a VMware ESXi zero-day exploit, potentially leading to a hypervisor compromise and a ransomware attack. The sophisticated multi-stage attack used multiple vulnerabilities and advanced evasion techniques, highlighting the importance of securing VPNs and hypervisors. #SonicWallVPN #VMwareESXi #ZeroDayExploit…