<p>The number of reported vulnerabilities <a target=”_blank” href=”https://www.darkreading.com/cybersecurity-analytics/vulnerabilities-surge-messy-reporting-blurs-picture” rel=”noopener”>reached an all-time high in 2025</a>, according to the National Vulnerability Database, with more than 48,000 new CVEs.</p> <p>The good news is that, according to experts, the increase likely reflects more thorough…
Windows 11 PCs Fail to Shut Down After January Security Update
Microsoft’s January 13, 2026, security update for Windows 11 has triggered a frustrating bug: affected PCs refuse to shut down or hibernate, instead restarting. The issue is caused by KB5073455, which targets OS Build 22621.6491 on Windows 11 version 23H2.…
GootLoader Malware Uses 500–1,000 Concatenated ZIP Archives to Evade Detection
The JavaScript (aka JScript) malware loader called GootLoader has been observed using a malformed ZIP archive that’s designed to sidestep detection efforts by concatenating anywhere from 500 to 1,000 archives. “The actor creates a malformed archive as an anti-analysis technique,”…
How a hacking campaign targeted high-profile Gmail and WhatsApp users across the Middle East
The phishing campaign targeted users on WhatsApp, including an Iranian-British activist, and stole the credentials of a Lebanese cabinet minister and at least one journalist. This article has been indexed from Security News | TechCrunch Read the original article: How…
Cloudflare Acquired Open-source Web Framework Astro to Supercharge Development
Cloudflare has acquired the team behind Astro, the popular open-source web framework for building fast, content-driven sites. Announced on January 16, 2026, the deal brings The Astro Technology Company’s full-time employees under Cloudflare’s umbrella to accelerate Astro’s development. Cloudflare positions…
Security Researchers Warn of ‘Reprompt’ Flaw That Turns AI Assistants Into Silent Data Leaks
Cybersecurity researchers have revealed a newly identified attack technique that shows how artificial intelligence chatbots can be manipulated to leak sensitive information with minimal user involvement. The method, known as Reprompt, demonstrates how attackers could extract data from AI…
IT Security News Hourly Summary 2026-01-16 18h : 11 posts
11 posts were published in the last hour 17:4 : Cyber Fraud, Not Ransomware, is Now Businesses’ Top Security Concern 17:4 : Hollows Hunter 17:4 : US and allies collaborate on operational technology security guidance 17:4 : Critical flaw in…
Sorry Dave, I’m afraid I can’t do that! PCs refuse to shut down after Microsoft patch
Microsoft claims it’s a Secure Launch bug We’re not saying Copilot has become sentient and decided it doesn’t want to lose consciousness. But if it did, it would create Microsoft’s January Patch Tuesday update, which has made it so that…
Cyber Fraud, Not Ransomware, is Now Businesses’ Top Security Concern
In a report a week before its Davos conference, the World Economic Foundation said 64% world business leaders are most worried about cyber fraud, replacing ransomware at their top concern. AI vulnerabilities also ranked high, as did threats fueled by…
Hollows Hunter
A memory analysis tool for detecting process hollowing, injected code, and other in memory manipulation techniques on Windows systems. This article has been indexed from CyberMaterial Read the original article: Hollows Hunter
US and allies collaborate on operational technology security guidance
A new report stresses the importance of logging, network segmentation and strong authentication, among other practices. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: US and allies collaborate on operational technology security guidance
Critical flaw in Fortinet FortiSIEM targeted in exploitation threat
Researchers originally disclosed the vulnerability in August 2025, however a proof of concept and an advisory were just released. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: Critical flaw in Fortinet FortiSIEM targeted…
In Other News: FortiSIEM Flaw Exploited, Sean Plankey Renominated, Russia’s Polish Grid Attack
Other noteworthy stories that might have slipped under the radar: BodySnatcher agentic AI hijacking, Telegram IP exposure, shipping systems hacked by researcher. The post In Other News: FortiSIEM Flaw Exploited, Sean Plankey Renominated, Russia’s Polish Grid Attack appeared first on…
How 2 Missing Characters Nearly Compromised AWS
A supply chain vulnerability in AWS CodeBuild recently put the entire AWS Console at risk. Learn how Wiz Research found the flaw and how Amazon responded to prevent a global security crisis. This article has been indexed from Hackread –…
Go Programming Language 1.26 Patches Several Security Flaws
The patched issues span core standard library components including archive/zip and net/http, as well as security-sensitive areas of the crypto/tls stack. The post Go Programming Language 1.26 Patches Several Security Flaws appeared first on TechRepublic. This article has been indexed…
AWS CodeBuild Misconfiguration Could Have Enabled Full GitHub Repository Takeover
One mistake in how Amazon Web Services set up its CodeBuild tool might have let hackers grab control of official AWS GitHub accounts. That access could spill into more parts of AWS, opening doors for wide-reaching attacks on software…
Five Malicious Chrome Extensions Impersonate Workday and NetSuite to Hijack Accounts
Cybersecurity researchers have discovered five new malicious Google Chrome web browser extensions that masquerade as human resources (HR) and enterprise resource planning (ERP) platforms like Workday, NetSuite, and SuccessFactors to take control of victim accounts. “The extensions work in concert…
U.S. and allies collaborate on operational technology security guidance
A new report stresses the importance of logging, network segmentation and strong authentication, among other practices. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: U.S. and allies collaborate on operational technology security guidance
Exploits, AI Threats, and Cloud Malware Mark a Turbulent Week
Weekly summary of Cybersecurity Insider newsletters The post Exploits, AI Threats, and Cloud Malware Mark a Turbulent Week appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: Exploits, AI Threats, and Cloud…
Data breach at Canada’s Investment Watchdog Canadian Investment Regulatory Organization impacts 750,000 people
A data breach at Canada’s investment watchdog, Canadian Investment Regulatory Organization (CIRO), impacted about 750,000 people. The Canadian Investment Regulatory Organization (CIRO) is Canada’s national self-regulatory body overseeing investment dealers and marketplaces, protecting investors, enforcing compliance, and maintaining fair, efficient…
German cops add Black Basta boss to EU most-wanted list
Ransomware kingpin who escaped Armenian custody is believed to be lying low back home German cops have added Russian national Oleg Evgenievich Nefekov to their list of most-wanted criminals for his services to ransomware.… This article has been indexed from…
Cyber Briefing: 2026.01.16
Copilot Reprompt flaw, VoidLink cloud malware, Fast Pair Bluetooth bugs, Verizon outage; FTC bans GM data sales; RSAC names Easterly. This article has been indexed from CyberMaterial Read the original article: Cyber Briefing: 2026.01.16
Go 1.26 Released With Fixes for Multiple Vulnerabilities Causing Memory Exhaustion
The Go development team has released Go versions 1.25.6 and 1.24.12, addressing six critical security vulnerabilities that could enable denial-of-service attacks, arbitrary code execution, and unauthorised session resumption. These minor point releases follow the Go security policy and represent significant…
UAT-8837 Launches Targeted Attacks to Steal Sensitive Organizational Data
UAT-8837, a China-nexus advanced persistent threat (APT) actor, is conducting sustained campaigns against critical infrastructure sectors across North America. The group, assessed with medium confidence based on tactical overlaps with known Chinese threat actors, specializes in obtaining initial access to…