A major cryptocurrency theft occurred on the Truebit platform, with hackers stealing over $26 million worth of ETH. The incident highlights the ongoing evolution and professionalization of crypto crime, involving large-scale illicit on-chain infrastructure. #TruebitHack #NorthKorea #Huione #CryptoLaundering…
Category: Cyber Security News
Three U.S. senators are urging Google and Apple to remove X and Grok apps due to their misuse in creating harmful and illegal sexualized images, including of children. Despite app store policy violations and public controversy, X and Grok continue to generate offensive content, raising concerns about oversight and safety. #Grok…
A Russian basketball player, Daniil Kasatkin, was released in a prisoner exchange between Russia and France, suspected of being involved in a ransomware gang. The U.S. had issued an arrest warrant against him for conspiracy to commit computer fraud related to attacks by the Conti ransomware group. #DaniilKasatkin #Conti #RansomwareGang #Extradition…
The FBI warns about North Korean APT group Kimsuky using spear-phishing with malicious QR codes, known as quishing, to target government and research organizations. This method bypasses security controls, stealing data and hijacking cloud accounts, making it a high-threat vector in enterprise environments. #Kimsuky #quishing…
The NSA has appointed Timothy Kosiba as its 21st Deputy Director, a role approved by top government officials. With over 30 years of experience, Kosiba is recognized for his expertise in cyber operations and signals intelligence. #NSA #TimothyKosiba…
This roundup highlights recent cybersecurity incidents including AI data violations, cyberattacks on Jaguar Land Rover, and the arrest related to the Desjardins data breach. It also discusses Chinese cyber activities against Taiwan and US congressional email hacks. #genAI #JaguarLandRover #Desjardins #SaltTyphoon #OwnCloud…
A global DNS crash on January 8, 2026, caused Cisco Small Business Switches to reboot repeatedly due to a flaw in the DNS client process. The issue affected multiple models and firmware versions, with workarounds involving disabling DNS or SNTP curing network instability. #CiscoSwitches #DNSCrash…
The first week of 2026 highlights the increasing complexity and global reach of cyber threats affecting various sectors from education to government. Effective cybersecurity responses now demand coordinated efforts, regulatory measures, and heightened awareness across all levels. #HighamLaneSchool #WhiteSupremacistWebsites #UKCyberSecurity #Prosura #USCyberCoalitions…
The FBI warns that North Korean threat group Kimsuky is using spearphishing campaigns with malicious QR codes, a tactic called “Quishing,” targeting organizations involved in North Korea-related foreign policy. Efforts to defend against these attacks include implementing multi-layered security measures and educating employees about the risks of scanning unsolicited QR codes….
![Cybersecurity News | Daily Recap [08 Jan 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [08 Jan 2026]")
Daily Recap, A wave of critical fixes and warnings dominated the period, with a CVSS 10.0 remote code execution in n8n prompting urgent remediation, alongside patches for jsPDF, Dolby decoder in Android, and Veeam backup vulnerabilities. Incidents and advisories highlighted risks across industries—from Totolink EX200 and D-Link legacy routers to Columbia Weather Systems MicroServer, a British school cyberattack, Brightspeed disruptions, Illinois data exposure, and rising telecommunication ransomware activity. #n8n #Ni8mare #jsPDF #Dolby #Veeam #Totolink #EX200 #DLink #ColumbiaWeatherSystems #Brightspeed #CrimsonCollective #BlackCat #Stalkerware #Illinois
Penetration testing is a proactive security assessment that simulates cyberattacks to identify vulnerabilities in online assets such as websites, databases, and cloud environments. It plays a crucial role in helping organizations strengthen security, meet compliance standards, and mitigate risks from evolving threats. #PenetrationTesting #CyberThreats…
CISA has retired 10 Emergency Directives after successfully completing the necessary actions or integrating them into Binding Operational Directive 22-01. This marks the largest number of directives CISA has closed simultaneously, emphasizing enhanced vulnerability mitigation efforts. #CISA #BindingOperationalDirective22-01
A Russian state-sponsored hacking group, BlueDelta, has launched sophisticated credential-harvesting attacks targeting energy research and government organizations across Europe and the Middle East. They utilize legitimate web services and impersonate trusted portals to stealthily steal login information, reflecting a strategic evolution in their cyber espionage tactics. #BlueDelta #GRU…
Chinese-speaking threat actors exploited a SonicWall VPN to deliver a VMware ESXi exploit toolkit developed over a year before vulnerabilities became public. The attack involved sophisticated VM escape techniques using multiple zero-day vulnerabilities, potentially allowing attackers to compromise hypervisors and extract data. #SonicWallVPN #VMwareZeroDays
The FBI warns that North Korean hacker group Kimsuky is using malicious QR codes in spearphishing campaigns targeting U.S. organizations involved in North Korea-related policy and research. These attacks often bypass traditional security measures and can hijack cloud identities by stealing session tokens. #Kimsuky #quishing