A critical misconfiguration within Amazon Web Services (AWS) CodeBuild, dubbed “CodeBreach” by cloud security firm Wiz, could have potentially led to a complete takeover of AWS’s own GitHub repositories, including its vital AWS JavaScript SDK. This vulnerability, disclosed responsibly on August 25, 2025, and fixed by AWS in September 2025,…

Threat actors are increasingly hosting phishing kits on legitimate cloud and Content Delivery Network (CDN) platforms, posing a significant challenge for cybersecurity defenses. This evolving tactic, identified by researchers at Any.Run, moves away from traditional phishing methods that rely on newly registered, suspicious domains. Instead, attackers are leveraging trusted infrastructure…

A critical security vulnerability in the widely-used WordPress plugin, Modular DS, is currently being actively exploited in the wild. This maximum-severity flaw, identified as CVE-2026-23550 with a CVSS score of 10.0, allows unauthenticated attackers to escalate their privileges, potentially leading to a complete compromise of websites running affected versions of…

Turla, a sophisticated threat actor, has deployed an upgraded version of its Kazuar v3 loader, a malware designed to bypass advanced security defenses by leveraging Event Tracing for Windows (ETW) and the Antimalware Scan Interface (AMSI). Discovered in January 2026, this latest iteration showcases the group’s evolving tactics, techniques, and…

Jan 15, 2026Ravie LakshmananCybersecurity / Hacking NewsThe digital landscape continues to be a dynamic battleground, with new cybersecurity threats and vulnerabilities emerging weekly. This period saw attackers leveraging sophisticated evasion techniques, exploiting simple misconfigurations for significant gains, and adapting previously known tools to bypass existing defenses. Keeping abreast of these…

A new ransomware-as-a-service (RaaS) operation named Sicarii, purportedly with Israeli or Jewish affiliations, has surfaced on underground forums. This newcomer distinguishes itself with explicit use of Hebrew and Israeli symbols, including the Haganah emblem, in its branding, alongside a stated focus on targeting organizations in Arab and Muslim countries while…

A new sophisticated information-stealing malware, dubbed MonetaStealer, is actively targeting macOS users. Discovered on January 6, 2026, by security researchers at Iru, this threat masquerades as a legitimate Windows executable, potentially deceiving users into execution. The malware, identified initially as a Mach-O binary, has researchers concerned due to its increasing…

Microsoft and international law enforcement agencies have successfully dismantled a sophisticated business email compromise (BEC) attack chain orchestrated using the RedVDS fraud engine. This operation targeted a significant cybercrime infrastructure that provided essential tools and services to malicious actors engaging in widespread financial fraud. The coordinated action disrupted a key…

Security researchers and IT professionals are urged to take immediate action following the disclosure of a high-severity vulnerability within Palo Alto Networks’ GlobalProtect software. The flaw, identified as CVE-2026-0227, presents a significant denial-of-service (DoS) risk to firewalls and could be exploited by unauthenticated attackers. The company has released critical security…

A sprawling network of over 18,000 active command-and-control (C2) servers, operated by threat actors linked to Chinese hosting infrastructure, has been identified across 48 different providers. This significant discovery, revealed by cybersecurity researchers, underscores the complex and often hidden nature of malicious cyber operations. Traditional threat detection methods, which tend…

Intersec Dubai 2026, a leading international exhibition for security, safety, and fire protection, concluded its run at the Dubai World Trade Centre on January 15th. The event underscored the increasing integration of artificial intelligence and intelligent security technologies in the development of more secure and resilient urban environments, with a…

A sophisticated malware loader, dubbed CastleLoader, is posing a significant threat to United States government agencies and critical infrastructure organizations. Identified in early 2025, this stealthy malware has been instrumental in coordinated cyberattacks across North America and Europe, impacting federal agencies, IT firms, logistics companies, and essential service providers. Security…