The crowdfunding platform GoFundMe is allowing a fundraising campaign tied to the potential legal defense of an Immigration and Customs Enforcement (ICE) agent who fatally shot a civilian to remain online, despite company rules barring fundraisers connected to violent crimes… Read More "GoFundMe Ignores Own Rules by Hosting a Legal-Defense Fund for the ICE Agent Who Killed Renee Good"
Jan 12, 2026Ravie LakshmananVulnerability / Workflow Automation Threat actors have been observed uploading a set of eight packages on the npm registry that masqueraded as integrations targeting the n8n workflow automation platform to steal developers’ OAuth credentials. One such package,… Read More "n8n Supply Chain Attack Abuses Community Nodes to Steal OAuth Tokens"
The generalization of vibe coding has already led to major security incidents, according to Palo Alto Networks. This emerging practice, which consists of writing code and developing applications via AI prompts in natural language, is being adopted by both hobbyists… Read More "Palo Alto Networks Introduces New Vibe Coding Security Framework"
California privacy regulators have taken fresh action against companies accused of trading in sensitive personal data without proper authorization. The latest decisions target a marketing firm that sold health-related profiles and a global analytics provider that failed to meet registration… Read More "California Shuts Down Health Data Resales By Unregistered Brokers"
Jan 12, 2026Ravie LakshmananHacking News / Cybersecurity This week made one thing clear: small oversights can spiral fast. Tools meant to save time and reduce friction turned into easy entry points once basic safeguards were ignored. Attackers didn’t need novel… Read More "AI Automation Exploits, Telecom Espionage, Prompt Poaching & More"
Phishing attacks and cyber fraud have overtaken ransomware as the top cybersecurity concern of business leaders, according to the World Economic Forum’s (WEF) Global Cybersecurity Outlook for 2026. Released on January 12, a week before the WEF Annual Davos meeting,… Read More "World Economic Forum: Cyber-fraud overtakes ransomware"
A new wave of GoBruteforcer attacks has targeted databases of cryptocurrency and blockchain projects to co-opt them into a botnet that’s capable of brute-forcing user passwords for services such as FTP, MySQL, PostgreSQL, and phpMyAdmin on Linux servers. “The current… Read More "GoBruteforcer Botnet Targets Crypto Project Databases by Exploiting Weak Credentials"
“According to security researchers at data security company Cyera, there were more than 100,000 n8n servers vulnerable to CVE-2026-21858,” Endor researchers said in the post. “We do not know how many of those install npm packages as community nodes in… Read More "Malicious npm packages target the n8n automation platform in a supply chain attack"
Illicit crypto wallets received an estimated $158bn in currency last year, the highest level observed in five years, according to TRM Labs. The blockchain analytics firm said the figure represents a 145% increase on the previous year ($64.5bn), although admitted… Read More "Illicit Crypto Activity Hits Record $158bn in 2025"
Jan 12, 2026Ravie LakshmananArtificial Intelligence / Healthcare Anthropic has become the latest Artificial intelligence (AI) company to announce a new suite of features that allows users of its Claude platform to better understand their health information. Under an initiative called… Read More "Anthropic Launches Claude AI for Healthcare with Secure Health Record Access"
