ServiceNow has resolved a critical security vulnerability within its AI platform that, if exploited, could have allowed unauthorized individuals to impersonate legitimate users and execute improper actions. The company disclosed the issue, designated CVE-2025-12420, on Monday. This ServiceNow security flaw, carrying a severity score of 9.3 out of 10, was…

A sophisticated new cloud-native malware framework, dubbed VoidLink, has emerged, presenting a significant threat to Linux systems. This advanced malware is engineered with robust evasion capabilities and a self-deletion mechanism, marking a notable evolution in how threat actors target cloud infrastructure. VoidLink’s primary function is to compromise cloud environments, potentially…

ServiceNow has patched a critical vulnerability in its AI Platform that allowed unauthenticated users to impersonate others and execute arbitrary actions. The flaw, identified as CVE-2025-12420, had a severe CVSS score of 9.3 out of 10.0, indicating a high risk of exploitation. The company addressed the issue with a security…

A startling security vulnerability has been uncovered in the popular first-person shooter game Apex Legends, allowing hackers to remotely control the gameplay inputs of other players. Respawn Entertainment, the game’s developer, confirmed the significant breach via their official social media channels on January 10, 2026. This unprecedented exploit compromises competitive…

A malicious Chrome extension named MEXC API Automator is targeting cryptocurrency traders on the MEXC exchange, stealthily stealing API login credentials and enabling unauthorized access to user accounts. The deceptive add-on poses as a legitimate tool for automating trading and API key creation, but in reality, it hijacks newly generated…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a stern warning regarding active exploitation of a critical security flaw within the Gogs Go Git Service. This high-severity vulnerability, now listed on CISA’s Known Exploited Vulnerabilities (KEV) catalog, poses a significant risk to organizations utilizing the popular self-hosted Git…

A sophisticated cyber threat campaign is leveraging Cloudflare’s free-tier services and TryCloudflare tunnels to effectively mask malicious Remote Access Trojan (RAT) activities, making detection significantly more challenging. The malware, identified as AsyncRAT, is being distributed through phishing emails that trick recipients into downloading seemingly legitimate invoice documents. This innovative approach…

Intersec Dubai’s 27th edition commenced yesterday, January 13th, at the Dubai World Trade Centre with a strong emphasis on advanced security, safety, and fire protection solutions. His Highness Sheikh Mansoor bin Mohammed bin Rashid Al Maktoum officially opened the event, which is expected to draw over 50,000 international visitors and…

The week of January 12, 2026, has underscored a critical cybersecurity truth: minor oversights can rapidly escalate into significant security breaches. Attackers are increasingly exploiting vulnerabilities in trusted tools and commonplace systems, leveraging basic security misconfigurations rather than relying on novel attack vectors. The scale of these incidents is amplified…

Cybercriminal cryptocurrency transactions exploded in 2025, reaching a record-shattering $154 billion received by illicit addresses. This staggering sum represents a 162% surge from the previous year, primarily fueled by nation-states leveraging cryptocurrency ecosystems to circumvent international sanctions on a large scale. This shift marks a significant turning point where geopolitical…

India is facing a significant and escalating threat from mobile malware attacks, with a reported 38% increase in malicious activity compared to the previous year. This surge, detailed in the Zscaler ThreatLabz 2025 Mobile, IoT, and OT Threat Report, positions India as the primary global target for mobile cyber threats.…

Web3 developer environments are being targeted by a sophisticated social engineering campaign that leverages fake interview software. Threat actors are shifting from traditional phishing tactics to more insidious methods, creating elaborate traps that entice high-value targets into their schemes. This evolving “inbound” social engineering tactic is demonstrating significant success in…