Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware
Published: January 28, 2026
Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code extension for Moltbot, claiming to be a free AI coding assistant, that drops a malicious payload on compromised hosts and has been taken down by Microsoft. The extension was published on January 27, 2026, by a user named “clawdbot.”
2. Russian ELECTRUM Tied to December 2025 Cyber Attack on Polish Power Grid
Published: January 28, 2026
The coordinated cyber attack on multiple sites across the Polish power grid in late December 2025 has been attributed with medium confidence to the Russian state-sponsored hacking crew ELECTRUM, affecting communication and control systems at CHP facilities and renewable energy sites without causing power outages.
3. Two High-Severity n8n Flaws Allow Authenticated Remote Code Execution
Published: January 28, 2026
Two new security flaws in the n8n workflow automation platform, including CVE-2026-1470 (CVSS 9.9) and CVE-2026-0863 (CVSS 8.5), allow authenticated users to bypass sandbox mechanisms and achieve remote code execution in JavaScript and Python.
4. Critical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code Execution
Published: January 28, 2026
A critical sandbox escape vulnerability (CVE-2026-22709, CVSS 9.8) in the vm2 Node.js library allows attackers to bypass sanitization of Promise handlers and run arbitrary code on the underlying operating system.
5. Mustang Panda Deploys Updated COOLCLIENT Backdoor in Government Cyber Attacks
Published: January 28, 2026
Threat actors linked to China, attributed to Mustang Panda, have used an updated COOLCLIENT backdoor in 2025 cyber espionage attacks against government entities in Myanmar, Mongolia, Malaysia, and Russia, deployed alongside PlugX and LuminousMoth for data theft.
6. Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025-8088
Published: January 28, 2026
Google has revealed that multiple threat actors, including nation-state groups from Russia and China as well as financially motivated actors, are actively exploiting the patched CVE-2025-8088 flaw in WinRAR to drop files in the Windows Startup folder for persistence.
7. Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected
Published: January 28, 2026
Fortinet has released updates for a critical authentication bypass vulnerability (CVE-2026-24858, CVSS 9.4) in FortiOS, FortiManager, and FortiAnalyzer, which allows attackers with a FortiCloud account to log into other devices if SSO is enabled.
8. High-Severity Remote Code Execution Vulnerability Patched in OpenSSL
Published: January 28, 2026
A total of 12 vulnerabilities have been fixed in OpenSSL, all discovered by a single cybersecurity firm.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using tools like vulnerability scanners to monitor your systems for emerging risks. Stay safe online!