Stay updated with the latest cybersecurity news! This daily roundup highlights critical vulnerabilities, data breaches, emerging threats, state-sponsored activities, and key patches to help you stay ahead in the fast-changing cyber landscape.
1. Raaga Data Breach Exposes Personal Data of 10.2 Million Users
Published: 2026-01-20
Indian music streaming platform Raaga confirmed a major breach from December 2025, leaking personal information of over 10.2 million users. The stolen data was later offered for sale on underground forums.
2. NCSC Warns of Pro-Russian Hacktivist Groups Targeting UK Organizations
Published: 2026-01-20
The UK’s National Cyber Security Centre (NCSC) issued an alert about sustained attacks by Russian-aligned hacktivists on UK critical infrastructure, local government, and online services.
3. Google Gemini Prompt Injection Flaw Exposed Private Calendar Data
Published: 2026-01-19
Researchers revealed an indirect prompt injection vulnerability in Google Gemini that bypassed privacy controls via malicious calendar invites, enabling unauthorized access to private meeting data.
Read more Wait, correction from sources: Read more
4. Chainlit Vulnerabilities Allow Leak of Sensitive Information
Published: Recent (January 2026)
Two bugs in Chainlit (arbitrary file read and SSRF) can be exploited without interaction to leak credentials, databases, and other sensitive data.
5. Ingram Micro Ransomware Attack Affected 42,000 Individuals
Published: 2026-01-19
IT distributor Ingram Micro disclosed that its July 2025 ransomware incident exposed personal data of over 42,000 employees and individuals.
6. Critical WordPress Plugin Vulnerability in Advanced Custom Fields: Extended
Published: 2026-01-20
A flaw in the Advanced Custom Fields: Extended plugin puts over 100,000 WordPress sites at risk of privilege escalation and potential full site takeover.
7. TP-Link Patches Authentication Bypass in VIGI Cameras
Published: 2026-01-20
A vulnerability in TP-Link’s VIGI surveillance cameras allowed local attackers to bypass authentication via the password recovery feature, exposing devices to remote hacking risks.
8. New Study: GPT-5.2 Can Reliably Develop Zero-Day Exploits at Scale
Published: 2026-01-20
Experiments show advanced AI models like GPT-5.2 can generate functional zero-day exploits for unknown vulnerabilities, raising concerns about AI-powered cyber threats.
Stay Vigilant
Cyber threats continue to evolve with AI integration, state-aligned hacktivism, and rapid exploitation of flaws. Patch promptly, monitor for anomalies, and consider multi-layered defenses. For more daily insights, follow trusted sources like The Hacker News, SecurityWeek, and BleepingComputer. Stay safe!