Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. WhatsApp Rolls Out Lockdown-Style Security Mode to Protect Targeted Users From Spyware
Published: 2026-01-27
Meta has introduced Strict Account Settings on WhatsApp to enhance security for users like journalists against advanced spyware, similar to Apple’s Lockdown Mode, by locking settings to restrictive options and blocking attachments from unknown senders. This feature aims to bolster protection with minimal user effort by automatically restricting calls and media from non-contacts.
2. Experts Detect Pakistan-Linked Cyber Campaigns Aimed at Indian Government Entities
Published: 2026-01-27
Zscaler ThreatLabz identified two campaigns, Gopher Strike and Sheet Attack, targeting Indian government entities with Pakistan-linked threat actors using phishing and legitimate services like Google Sheets for command-and-control. Researchers assess these may stem from a new subgroup or parallel group related to known APT36 activities.
3. ClickFix Attacks Expand Using Fake CAPTCHAs, Microsoft Scripts, and Trusted Web Services
Published: 2026-01-27
A new campaign combines fake CAPTCHAs with signed Microsoft App-V scripts to distribute the Amatera information stealer, using living-off-the-land techniques to proxy PowerShell execution through trusted components. The attack starts with tricking users into running malicious commands via the Windows Run dialog.
4. Microsoft Office Zero-Day (CVE-2026-21509) – Emergency Patch Issued for Active Exploitation
Published: 2026-01-27
Microsoft released out-of-band patches for a high-severity zero-day vulnerability (CVE-2026-21509, CVSS 7.8) in Office, allowing security feature bypass via untrusted inputs in OLE mitigations. Exploitation requires tricking users into opening crafted files, with automatic protection for newer Office versions via service-side changes.
5. Organizations Warned of Exploited Linux Vulnerabilities
Published: 2026-01-27
The flaws allow threat actors to obtain root privileges or bypass authentication via Telnet and gain shell access as root.
6. Over 100 Organizations Targeted in ShinyHunters Phishing Campaign
Published: 2026-01-27
Domains set up by the threat actor suggest attacks aimed at Atlassian, Canva, Epic Games, HubSpot, Moderna, ZoomInfo, and WeWork.
7. WorldLeaks Extortion Group Claims It Stole 1.4TB of Nike Data
Published: 2026-01-27
The sportswear brand is investigating an alleged breach of its network that exposed some 188,347 files of highly sensitive corporate data.
8. Critical Telnet Server Flaw Exposes Forgotten Attack Surface
Published: 2026-01-27
A critical vulnerability in Telnet servers is exposing legacy systems to potential attacks.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using tools like vulnerability scanners to monitor your systems for potential risks. Stay safe online!