Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. U.S. Convicts Ex-Google Engineer for Sending AI Tech Data to China
Published: 2026-01-31
A U.S. federal jury has convicted Linwei Ding, a former software engineer at Google, for stealing AI supercomputer data from his employer and secretly sharing it with Chinese tech firms.
2. Mandiant Details How ShinyHunters Abuse SSO to Steal Cloud Data
Published: 2026-01-31
Mandiant says a wave of recent ShinyHunters SaaS data-theft attacks is being fueled by targeted voice phishing (vishing) attacks and company-branded phishing sites that steal single sign-on (SSO) credentials and multi-factor authentication (MFA) codes.
3. Cloud Storage Payment Scam Floods Inboxes with Fake Renewals
Published: 2026-01-31
Over the past few months, a large-scale cloud storage subscription scam campaign has been targeting users worldwide with repeated emails falsely warning recipients that their photos, files, and accounts are about to be blocked or deleted due to an alleged payment failure.
4. Researcher Reveals Evidence of Private Instagram Profiles Leaking Photos
Published: 2026-01-31
A researcher has released detailed evidence showing some Instagram private accounts exposed photo links to unauthenticated visitors. The issue was later fixed, but Meta closed the report as not applicable and did not respond to multiple requests for comment.
5. Ivanti Patches Exploited EPMM Zero-Days
Published: 2026-01-30
Ivanti has patched critical-severity vulnerabilities in its Endpoint Manager for Privileged Devices (EPMM) that were actively exploited, allowing unauthenticated attackers to execute arbitrary code remotely.
6. N8n Vulnerabilities Could Lead to Remote Code Execution
Published: 2026-01-29
Two bugs in n8n’s sandbox mechanism, stemming from weaknesses in the AST sanitization logic, could be exploited to achieve remote code execution.
7. SolarWinds Patches Critical Web Help Desk Vulnerabilities
Published: 2026-01-29
SolarWinds has addressed four critical flaws in its Web Help Desk product, which could be exploited without authentication to enable remote code execution or authentication bypass.
8. Corporate Workers Lean on Shadow AI to Enhance Speed
Published: 2026-01-28
A report shows senior corporate executives are willing to allow unsanctioned AI use, which could place company data at risk.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using tools like multi-factor authentication and regular software patches to enhance your security. Stay safe online!