As the standoff between the United States government and Minnesota continues this week over immigration enforcement operations that have essentially occupied the Twin Cities and other parts of the state, a federal judge delayed a decision this week and ordered… Read More "Jeffrey Epstein Had a ‘Personal Hacker,’ Informant Claims"
A Farsi-speaking threat actor aligned with Iranian state interests is suspected to be behind a new campaign targeting non-governmental organizations and individuals involved in documenting recent human rights abuses. The activity, observed by HarfangLab in January 2026, has been codenamed… Read More "Iran-Linked RedKitten Cyber Campaign Targets Human Rights NGOs and Activists"
The year got off to a busy start, with January offering an early snapshot of the challenges that (not just) cybersecurity teams are likely to face in the months ahead. It’s therefore time for ESET Chief Security Evangelist Tony Anscombe… Read More "This month in security with Tony Anscombe – January 2026 edition"
As businesses and organizations scale and grow, their network infrastructure can also grow increasingly large and complex. Using a flat network structure (all devices connected on one server) makes it easier for cybercriminals to roam freely and unimpeded in the… Read More "Top 8 Network Segmentation Best Practices in 2026"
In January 2026, two Americans were killed in the act of watching Immigration and Customs Enforcement operations in Minneapolis. Renee Nicole Good was acting as a legal observer while her wife recorded the federal immigration agents they encountered. Alex Pretti… Read More "How to Film ICE | WIRED"
The Higher Education Community Vendor Assessment Toolkit (HECVAT) helps higher education mitigate the impact of security risks of vendor relationships offering cloud-based services. With supply chain attacks on the rise, and vendor risks ranking in the top three initial attack… Read More "How to Comply with HECVAT in 2026 (Free Checklist)"
Ravie LakshmananJan 31, 2026Social Engineering / SaaS Security Google-owned Mandiant on Friday said it identified an “expansion in threat activity” that uses tradecraft consistent with extortion-themed attacks orchestrated by a financially motivated hacking group known as ShinyHunters. The attacks leverage… Read More "Mandiant Finds ShinyHunters-Style Vishing Attacks Stealing MFA to Breach SaaS Platforms"
Supplier risk is a top contributor to data breaches. On average, a single data breach costs companies $4.9 million, according to the 2024 Cost of a Data Breach Report by IBM. To counteract this growing threat, many organizations are investing… Read More "Best Vendor Risk Management Software for 2026"
Ravie LakshmananJan 31, 2026Network Security / SCADA CERT Polska, the Polish computer emergency response team, revealed that coordinated cyber attacks targeted more than 30 wind and photovoltaic farms, a private company from the manufacturing sector, and a large combined heat… Read More "CERT Polska Details Coordinated Cyber Attacks on 30+ Wind and Solar Farms"
PCI DSS compliance ensures your customer’s credit card data is protected from hackers and compromise attempts. Though complying with this regulation isn’t easy, it is possible. To simplify this essential effort, we’ve compiled a checklist of the key security metrics… Read More "Key Metrics for Tracking PCI DSS Compliance in 2026"
