It’s set to be a busy month for system administrators after Microsoft released security updates to fix over 100 CVEs yesterday, including one being actively exploited. CVE-2026-20805 is one of three zero-day bugs fixed on the first Patch Tuesday of… Read More "Three Zero-Days Fixed on Busy Patch Tuesday"
Research analyzing 4,700 leading websites reveals that 64% of third-party applications now access sensitive data without business justification, up from 51% in 2024. Government sector malicious activity spiked from 2% to 12.9%, while 1 in 7 Education sites show active… Read More "64% of 3rd-Party Applications Access Sensitive Data Without Justification"
Offenbar haben Cyberkriminelle einen Sirenenalarm in der Stadt Halle ausgelöst. rame435 – shutterstock.com In der Stadt Halle (Saale) ist es am Samstag (10. Januar) zu einem Fehlalarm gekommen. Gegen 22 Uhr heulten alle betriebsfähigen Sirenen auf, begleitet von einer englischsprachigen… Read More "Hackerangriff löst Fehlalarm in Halle aus"
Financial businesses and public entities should have fully transitioned to post-quantum cryptography (PQC) by 2034 at the latest, according to the G7. In a new document published on January 13, the G7 Cyber Expert Group (CEG) set a recommended roadmap… Read More "G7 Sets 2034 Deadline for Finance to Adopt Quantum-Safe Systems"
Congress is right, too. In 2021, it established the State and Local Cybersecurity Grant Program (SLCGP) to “award grants to eligible entities to address cybersecurity risks and cybersecurity threats to information systems owned or operated by, or on behalf of,… Read More "Cybersecurity at the state and local level: Washington has the framework, it’s time to act"
Cryptocurrency-related fraud losses hit record highs last year, thanks in part to AI tooling and sophisticated Asian crime networks, according to Chainalysis. The blockchain analytics company said in a blog post yesterday that it observed at least $14bn in digital… Read More "Impersonation Fraud Drives Record $17bn in Crypto Losses"
Jan 14, 2026Ravie LakshmananApplication Security / Vulnerability Node.js has released updates to fix what it described as a critical security issue impacting “virtually every production Node.js app” that, if successfully exploited, could trigger a denial-of-service (DoS) condition. “Node.js/V8 makes a… Read More "Critical Node.js Vulnerability Can Cause Server Crashes via async_hooks Stack Overflow"
Allianz Commercial ist eine Tochter des Münchner Dax-Konzerns, das Unternehmen publiziert sein “Risikobarometer” alljährlich zu Jahresbeginn. Die Einschätzungen basieren auf der Befragung von 3.338 Fachleuten aus 97 Ländern im vergangenen Herbst. Darunter sind Führungskräfte und Manager anderer Unternehmen, Risiko- und… Read More "Allianz: KI birgt große Gefahr für Unternehmen"
Jan 14, 2026Ravie LakshmananCyber Espionage / Threat Intelligence The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of new cyber attacks targeting its defense forces with malware known as PLUGGYAPE between October and December 2025. The activity has… Read More "PLUGGYAPE Malware Uses Signal and WhatsApp to Target Ukrainian Defense Forces"
The short-term extension seemed to ensure a longer-term renewal of the legislation, as lawmakers, the administration, and industry broadly agree that failure to extend the legal liability protection under CISA 2015 is unacceptable. “It’s very important,” US Representative Garbarino said… Read More "US cybersecurity weakened by congressional delays despite Plankey renomination"
