Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Long-Running Web Skimming Campaign Steals Credit Cards From Online Checkout Pages
Published: 2026-01-13
Cybersecurity researchers have discovered a major web skimming campaign active since January 2022, targeting payment networks like American Express, Mastercard, and UnionPay by injecting malicious JavaScript into e-commerce sites to harvest credit card information during checkout.
2. Malicious Chrome Extension Steals MEXC API Keys by Masquerading as Trading Tool
Published: 2026-01-13
A malicious Google Chrome extension named MEXC API Automator, still available on the Chrome Web Store, steals API keys from the MEXC cryptocurrency exchange by creating new keys with withdrawal permissions and exfiltrating them to a Telegram bot while posing as an automation tool.
3. New Advanced Linux VoidLink Malware Targets Cloud and Container Environments
Published: 2026-01-13
Cybersecurity researchers have uncovered VoidLink, a previously undocumented Linux malware framework designed for stealthy access to cloud environments, featuring custom loaders, implants, rootkits, and modular plugins inspired by Cobalt Strike.
4. ServiceNow Patches Critical AI Platform Flaw Allowing Unauthenticated User Impersonation
Published: 2026-01-13
ServiceNow has patched a critical vulnerability (CVE-2025-12420, CVSS 9.3) in its AI Platform that allowed unauthenticated users to impersonate others and perform actions, with fixes deployed on October 30, 2025, for versions like Now Assist AI Agents 5.1.18 and later.
5. Adobe Patches Critical Apache Tika Bug in ColdFusion
Published: 2026-01-13
Adobe has released patches for 25 vulnerabilities across its products, including a critical Apache Tika flaw in ColdFusion.
6. Microsoft Patches Exploited Windows Zero-Day, 111 Other Vulnerabilities
Published: 2026-01-13
Two vulnerabilities patched this month by Microsoft were disclosed publicly before fixes were released.
7. SAP’s January 2026 Security Updates Patch Critical Vulnerabilities
Published: 2026-01-13
SAP has released 17 security notes, including four that address critical SQL injection, RCE, and code injection vulnerabilities.
8. Attackers Abuse Python, Cloudflare to Deliver AsyncRAT
Published: 2026-01-13
The phishing campaign shows how attackers continue to weaponize legitimate cloud services and open source tools to evade detection and gain trust.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using tools like vulnerability scanners to monitor your systems for threats and automate security patches. Stay safe online!