Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Indian Users Targeted in Tax Phishing Campaign Delivering Blackmoon Malware
Published: 2026-01-26
Cybersecurity researchers have discovered an ongoing campaign targeting Indian users with a multi-stage backdoor as part of a suspected cyber espionage effort, using phishing emails impersonating the Income Tax Department to deliver a malicious archive that deploys the Blackmoon banking trojan and repurposes a legitimate Chinese enterprise tool for persistent access and data exfiltration.
2. Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code
Published: 2026-01-26
Two malicious Microsoft Visual Studio Code extensions advertised as AI-powered coding assistants, with a combined 1.5 million installs from the official marketplace, secretly capture and send developer-opened files and source code modifications to servers in China without user consent.
3. New DynoWiper Malware Used in Attempted Sandworm Attack on Polish Power Sector
Published: 2026-01-24
The Russian nation-state group Sandworm deployed the previously undocumented DynoWiper malware in an unsuccessful cyber attack on Poland’s power infrastructure in late December 2025, marking the largest such attempt in years based on overlaps with prior wiper activities.
4. Upwind Raises $250 Million at $1.5 Billion Valuation
Published: 2026-01-26
The CNAPP company will use the fresh investment to scale its runtime-first cloud security offering across data, AI and code.
5. Crunchbase Confirms Data Breach After Hacking Claims
Published: 2026-01-26
Crunchbase was targeted alongside SoundCloud and Betterment in a ShinyHunters campaign.
6. Exploited Zero-Day Flaw in Cisco UC Could Affect Millions
Published: 2026-01-23
A zero-day vulnerability in Cisco Unified Communications has been exploited, potentially impacting millions of users.
7. Microsoft Patches Actively Exploited Office Zero-Day Vulnerability
Published: 2026-01-26
Microsoft has released emergency security updates to patch a high-severity Office zero-day vulnerability exploited in attacks.
8. CISA Says Critical VMware RCE Flaw Now Actively Exploited
Published: 2026-01-26
CISA has flagged a critical VMware vCenter Server vulnerability as actively exploited and ordered U.S. federal agencies to secure their servers within three weeks.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using tools like advanced threat detection systems to monitor your networks for vulnerabilities and automate security patches. Stay safe online!