Russian ELECTRUM Tied to December 2025 Cyber Attack on Polish Power Grid
Ravie LakshmananJan 28, 2026Critical Infrastructure / Threat Intelligence The "coordinated" cyber attack targeting multiple sites across the Polish power grid...
Month: January 2026
Two High-Severity n8n Flaws Allow Authenticated Remote Code Execution
Ravie LakshmananJan 28, 2026Vulnerability / Workflow Automation Cybersecurity researchers have disclosed two new security flaws in the n8n workflow automation...
From Triage to Threat Hunts: How AI Accelerates SecOps
If you work in security operations, the concept of the AI SOC agent is likely familiar. Early narratives promised total...
Critical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code Execution
Ravie LakshmananJan 28, 2026Vulnerability / Open Source A critical sandbox escape vulnerability has been disclosed in the popular vm2 Node.js...
Build Practical Cyber Defense Skills with This 5-Course Bundle
TL;DR: This $19.99 cybersecurity bundle includes five courses and lifetime access to in-demand tools, techniques, and real-world training. For IT...
Eeny, meeny, miny, moe? How ransomware operators choose victims
Counter Threat Unit™ (CTU) researchers are frequently asked about ransomware groups posing a threat to organizations in specific verticals or...
Stop Staring at JSON: How GenAI is Solving the API “Context Crisis”
There is a moment that happens in every SOC (Security Operations Center) every day. An alert fires. An analyst looks...
PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun
PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun Pierluigi Paganini January 28, 2026 Koi researchers found...
Trust At Scale: The Commons, Threats, and AI in the Loop | Sonatype
Dependency management used to be a private embarrassment: an Ant script, a /lib folder, and classpath roulette. You could ship...
Why “Platform Consolidation” Often Increases Risk Instead of Reducing It
One vendor. Many engines. The same security problems. In boardrooms across the globe, a compelling narrative dominates enterprise security strategy:...
11 cool things Copilot can do in Excel
For best results with Copilot in Excel, put your data in table format. Click the Copilotbutton in the toolbar to...
Password Reuse in Disguise: An Often-Missed Risky Workaround
When security teams discuss credential-related risk, the focus typically falls on threats such as phishing, malware, or ransomware. These attack...
Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025-8088
Ravie LakshmananJan 28, 2026Vulnerability / Threat Intelligence Google on Tuesday revealed that multiple threat actors, including nation-state adversaries and financially...
Fake Python Spellchecker Packages on PyPI Delivered Hidden Remote Access Trojan
Ravie LakshmananJan 28, 2026Supply Chain Security / Malware Cybersecurity researchers have discovered two malicious packages in the Python Package Index...
Trump’s Acting Cyber Chief Allegedly Leaked Data to ChatGPT
Image generated by Google Gemini The interim leader of the US’s top civilian cyber defense agency uploaded sensitive government contracting...
