Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Black Basta Ransomware Leader Added to EU Most Wanted and INTERPOL Red Notice
Published: 2026-01-17
Ukrainian and German law enforcement authorities have identified two Ukrainians suspected of working for the Russia-linked ransomware-as-a-service (RaaS) group Black Basta. In addition, the group’s alleged leader, a 35-year-old Russian national named Oleg Evgenievich Nefedov, has been added to the European Union’s Most Wanted and INTERPOL’s Red Notice lists.
2. Tennessee Man Pleads Guilty to Repeatedly Hacking Supreme Court’s Filing System
Published: 2026-01-17
Nicholas Moore pleaded guilty to repeatedly hacking the U.S. Supreme Court’s filing system and illegally accessing computer systems belonging to AmeriCorps and the Department of Veterans Affairs.
3. Chinese-Linked Hackers Target US Entities with Venezuelan-Themed Malware
Published: 2026-01-15
Chinese-linked hackers are targeting US entities using Venezuelan-themed malware in recent cyberattacks.
4. Reasons to Believe Russia Behind Cyberattack on Polish Power System, PM Says
Published: 2026-01-15
Poland’s Prime Minister stated there are reasons to believe Russia is behind a recent cyberattack on the Polish power system.
5. More Problems for Fortinet: Critical FortiSIEM Flaw Exploited
Published: 2026-01-16
CVE-2025-64155, a command injection vulnerability in FortiSIEM, was disclosed earlier this week and quickly came under attack from a variety of IP addresses.
6. Privilege Escalation Bug in Google Vertex AI Grants Service Agent Access to Low-Privilege Users
Published: 2026-01-17
Security researchers have uncovered two critical privilege escalation vulnerabilities in Google’s Vertex AI platform that allow low-privileged users to hijack high-privilege Service Agent roles.
7. China-Linked APT Exploits Sitecore Zero-Day in Attacks on American Critical Infrastructure
Published: 2026-01-17
A China-linked advanced persistent threat (APT) group, identified as UAT-8837, has been exploiting a critical zero-day vulnerability in Sitecore (CVE-2025-53690, CVSS score: 9.0) to target critical infrastructure sectors in North America.
8. RondoDox Botnet Exploits Critical HPE OneView Bug
Published: 2026-01-17
A critical vulnerability in HPE OneView, identified as CVE-2025-37164, is being exploited at scale by the RondoDox botnet.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your systems. Stay safe online!