Cybersecurity

CSIA ICS Advisories

CSIA ICS Medical Advisories

CISA News

SANS ISC

• ISC Stormcast For Thursday, January 15th, 2026 https://isc.sans.edu/podcastdetail/9768, (Thu, Jan 15th)
• Infection repeatedly adds scheduled tasks and increases traffic to the same C2 domain, (Wed, Jan 14th)
• ISC Stormcast For Wednesday, January 14th, 2026 https://isc.sans.edu/podcastdetail/9766, (Wed, Jan 14th)
• January 2026 Microsoft Patch Tuesday Summary, (Tue, Jan 13th)
• ISC Stormcast For Tuesday, January 13th, 2026 https://isc.sans.edu/podcastdetail/9764, (Tue, Jan 13th)

SANS ISC – Daily Stormcast

• SANS Stormcast Thursday, January 15th, 2026: Luma Streal Repeat Infection; ServiceNow Broken Auth; Starlink/GPS Jamming
• SANS Stormcast Wednesday, January 14th, 2026: Microsoft, Adobe and Fortinet Patches; ConsentFix
• SANS Stormcast Tuesday, January 13th, 2026: n8n got npm’ed; Gogs exploit; telegram proxy links
• SANS Stormcast Monday, January 12th, 2026: PEB Manipulation; YARA Update; VideoLAND and Apache NimBLE Patches
• SANS Stormcast Friday, January 9th, 2026: Gephi Analysis; zlib vuln; GnuPG Vulns; Cisco/Cloudflare DNS Issue

Hacker News

• Researchers Null-Route Over 550 Kimwolf and Aisuru Botnet Command Servers
• AI Agents Are Becoming Privilege Escalation Paths
• Hackers Exploit c-ares DLL Side-Loading to Bypass Security and Deploy Malware
• Fortinet Fixes Critical FortiSIEM Flaw Allowing Unauthenticated Remote Code Execution
• New Research: 64% of 3rd-Party Applications Access Sensitive Data Without Justification

Securelist

• The HoneyMyte APT evolves with a kernel-mode rootkit and a ToneShell backdoor
• Threat landscape for industrial automation systems in Q3 2025
• Evasive Panda APT poisons DNS requests to deliver MgBot
• Assessing SIEM effectiveness
• From cheats to exploits: Webrat spreading via GitHub

NCSC Threats – UK

• A method to assess 'forgivable' vs 'unforgivable' vulnerabilities
• Active Cyber Defence (ACD) – the fourth year
• Active Cyber Defence (ACD) – The Third Year
• Impact of AI on cyber threat from now to 2027
• Vendor Security Assessment

CSO

• From typos to takeovers: Inside the industrialization of npm supply chain attacks
• What is AI fuzzing? And what tools, threats and challenges generative AI brings
• Ransomware gangs extort victims by citing compliance violations
• Sophisticated VoidLink malware framework targets Linux cloud servers
• Output from vibe coding tools prone to critical security flaws, study finds

Infosecurity News

• Criminal Subscription Service Behind AI-Powered Cyber-Attacks Taken Out By Microsoft
• Hackers Use Fake PayPal Notices to Steal Credentials, Deploy RMMs
• DeadLock Ransomware Uses Polygon Smart Contracts For Proxy Rotation
• G7 Sets 2034 Deadline for Finance to Adopt Quantum-Safe Systems
• Microsoft Fixes Three Zero-Days on Busy Patch Tuesday