Category: Security

Auto Added by WPeMatico

Researchers identified an attack method dubbed “Reprompt” that could allow attackers to infiltrate a user’s Microsoft Copilot session and issue commands to exfiltrate sensitive data. […]

RSAC on LLM Consistency and Cybersecurity Trust

January 14, 2026

As generative AI becomes embedded in cybersecurity tools, trust is no longer an abstract concern—it is an operational requirement. New analysis shared by RSAC highlights a growing issue for security teams, MSPs, and IT resellers: the metrics used to measure large language model (LLM) consistency often fail to reflect how humans actually perceive reliability. Consistency,…

Microsoft January 2026 Patch Tuesday: 115 Vulnerabilities Fixed

January 14, 2026

Microsoft kicks off 2026 with 115 security updates, including a fix for an actively exploited zero-day. Protect your Windows and Office systems today.

Cloud marketplace Pax8 accidentally exposes data on 1,800 MSP partners

January 14, 2026

Cloud marketplace and distributor Pax8 has confirmed that it mistakenly sent an email to fewer than 40 UK-based partners containing a spreadsheet with internal business information, including MSP customer and Microsoft licensing data. […]

U.S. CISA adds a flaw in Microsoft Windows to its Known Exploited Vulnerabilities catalog

January 14, 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw impacting Microsoft Windows to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Microsoft Windows vulnerability, tracked as CVE-2026-20805 (CVSS Score of 8.7), to its Known Exploited Vulnerabilities (KEV) catalog. This week, Microsoft Patch Tuesday security updates for January 2026 release…

Victorian Department of Education says hackers stole students’ data

January 14, 2026

The Department of Education in Victoria, Australia, notified parents that attackers gained access to a database containing the personal information of current and former students. […]

Hackers Launch Over 91,000 Attacks on AI Systems Using Fake Ollama Servers

January 14, 2026

A new investigation by GreyNoise reveals a massive wave of over 90,000 attacks targeting AI tools like Ollama and OpenAI. Experts warn that hackers are conducting “reconnaissance” to map out vulnerabilities in enterprise AI systems.

Monroe University says 2024 data breach affects 320,000 people

January 14, 2026

Monroe University revealed that threat actors stole the personal, financial, and health information of over 320,000 people after breaching its systems in a December 2024 cyberattack. […]

Microsoft Patch Tuesday security updates for January 2026 fixed actively exploited zero-day

January 14, 2026

Microsoft Patch Tuesday addressed 112 security flaws across Windows, Office, Azure, Edge, and more, including eight critical vulnerabilities, kicking off the new year with a major patch update. Microsoft Patch Tuesday security updates for January 2026 release 112 CVEs affecting Windows, Office, Azure, Edge, SharePoint, SQL Server, SMB, and Windows management services. Including third-party Chromium…

AZ Monica hospital in Belgium shuts down servers after cyberattack

January 13, 2026

A cyberattack hit AZ Monica hospital in Belgium, forcing it to shut down servers, cancel procedures, and transfer critical patients. A cyberattack forced Belgian hospital AZ Monica to shut down all servers, cancel scheduled procedures, and transfer critical patients. AZ Monica is a Belgian general hospital network operating two campuses in Antwerp and Deurne, providing…

Ukraine’s army targeted in new charity-themed malware campaign

January 13, 2026

Officials of Ukraine’s Defense Forces were targeted in a charity-themed campaign between October and December 2025 that delivered backdoor malware called PluggyApe. […]

New VoidLink malware framework targets Linux cloud servers

January 13, 2026

A newly discovered advanced cloud-native Linux malware framework named VoidLink focuses on cloud environments, providing attackers with custom loaders, implants, rootkits, and plugins designed for modern infrastructures. […]

Central Maine Healthcare breach exposed data of over 145,000 people

January 13, 2026

A data breach last year at Central Maine Healthcare (CMH) exposed sensitive information of more than 145,000 individuals. […]

Belgian hospital AZ Monica shuts down servers after cyberattack

January 13, 2026

Belgian hospital AZ Monica was forced to shut down all servers, cancel scheduled procedures, and transfer critical patients earlier today due to a cyberattack. […]

New Windows updates replace expiring Secure Boot certificates

January 13, 2026

Microsoft has started rolling out new Secure Boot certificates that will automatically install on eligible Windows 11 24H2 and 25H2 systems. […]

Microsoft releases Windows 10 KB5073724 extended security update

January 13, 2026

Microsoft has released the KB5073724 extended security update to fix the Patch Tuesday security updates, including 3 zero-days and a fix for expiring Secure Boot certificates. […]

Telegram to Add Warning for Proxy Links After IP Leak Concerns

January 13, 2026

Telegram will add a warning for proxy links after reports showed they can expose user IP addresses with a single click, bypassing VPN or privacy settings.

Microsoft January 2026 Patch Tuesday fixes 3 zero-days, 114 flaws

January 13, 2026

Today is Microsoft’s January 2026 Patch Tuesday with security updates for 114 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities. […]

Betterment confirms data breach after wave of crypto scam emails

January 13, 2026

U.S. digital investment advisor Betterment confirmed that hackers breached its systems and sent fake crypto-related messages to some customers. […]

Convincing LinkedIn comment-reply tactic used in new phishing

January 13, 2026

Scammers are flooding LinkedIn posts with fake “reply” comments that appear to come from the platform, warning of bogus policy violations and urging users to click external links. Some even abuse LinkedIn’s official lnkd.in shortener, making the phishing attempts harder to spot. […]

Dutch court convicts hacker who exploited port networks for drug trafficking

January 13, 2026

Dutch appeals court jails a 44-year-old hacker for 7 years for hacking port systems to help smuggle cocaine through European logistics hubs. A Dutch appeals court sentenced a 44-year-old hacker to seven years in prison for hacking port systems to help smuggle cocaine through European logistics hubs into the Netherlands. The appeals court reduced the…

Widespread Magecart Campaign Targets Users of All Major Credit Cards

January 13, 2026

Researchers at Silent Push have exposed a global Magecart campaign stealing credit card data since 2022. Learn how this invisible web-skimming attack targets major networks like Mastercard and Amex, and how to stay safe.

Target employees confirm leaked code after ‘accelerated’ Git lockdown

January 13, 2026

Multiple current and former Target employees confirmed that leaked source code samples posted by a threat actor match real internal systems. The company also rolled out an “accelerated” lockdown of its Git server, requiring VPN access, a day after being contacted by BleepingComputer. […]

Q4 2025 Malware Trends: Telegram Backdoor, Banking Trojans Surge, Joker Returns to Google Play

January 13, 2026

Telegram mods spread a powerful Android backdoor as banking trojans surge and Joker malware resurfaces on Google Play in Q4 2025, says Doctor Web.

Hacker gets seven years for breaching Rotterdam and Antwerp ports

January 12, 2026

The Amsterdam Court of Appeal sentenced a 44-year-old Dutch national to seven years in prison for multiple crimes, including computer hacking and attempted extortion. […]

Russian BlueDelta (Fancy Bear) Uses PDFs to Steal Logins in Just 2 Seconds

January 12, 2026

New research from Recorded Future reveals how Russian state hackers (BlueDelta) are using fake Microsoft and Google login portals to steal credentials. The campaign involves using legitimate PDF lures from GRC and EcoClimate to trick victims.

U.S. CISA adds a flaw in Gogs to its Known Exploited Vulnerabilities catalog

January 12, 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw impacting Gogs to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Gogs path traversal vulnerability, tracked as CVE-2025-8110 (CVSS Score of 8.7), to its Known Exploited Vulnerabilities (KEV) catalog. Gogs (Go Git Service) is a lightweight, open-source, self-hosted Git service written…

Facebook login thieves now using browser-in-browser trick

January 12, 2026

Hackers over the past six months have relied increasingly more on the browser-in-the-browser (BitB) method to trick users into providing Facebook account credentials. […]

CISA orders feds to patch Gogs RCE flaw exploited in zero-day attacks

January 12, 2026

CISA has ordered government agencies to secure their systems against a high-severity Gogs vulnerability that was exploited in zero-day attacks. […]

‘Bad actor’ hijacks Apex Legends characters in live matches

January 12, 2026

Apex Legends players over the weekend experienced disruptions during live matches as threat actors hijacked their characters, disconnected them, and changed their nicknames. […]

Meta fixes Instagram password reset flaw, denies data breach

January 12, 2026

Meta fixed an Instagram password reset flaw that let third parties send reset emails, while denying a data breach despite leak claims. Meta confirmed fixing an Instagram password reset vulnerability that allowed third parties to trigger reset emails, while denying any breach despite claims of leaked user data. “We fixed an issue that let an…

University of Hawaii Cancer Center hit by ransomware attack

January 12, 2026

University of Hawaii says a ransomware gang breached its Cancer Center in August 2025, stealing data of study participants, including documents from the 1990s containing Social Security numbers. […]

5 Best Secure Container Images for Modern Applications (2026)

January 12, 2026

Secure container images are now essential for modern apps. These five options help teams reduce risk, cut patching effort, and improve long-term security.

Target’s dev server offline after hackers claim to steal source code

January 12, 2026

Hackers are claiming to be selling internal source code belonging to Target Corporation, after publishing what appears to be a sample of stolen code repositories on a public software development platform. After BleepingComputer notified Target, the files were taken offline and the retailer’s developer Git server was inaccessible. […]

Fake Employee Reports Spread Guloader and Remcos RAT Malware

January 12, 2026

Scammers are using fake October 2025 performance reviews to trick staff into installing Guloader and Remcos RAT malware. Learn how to identify this threat and protect your personal data from remote hackers.

Deeper Network Promo Deeper Network Promo

Cybersecurity, Global Security News, Public Sector, Security, Technology

Cybersecurity in the Public Sector: Challenges, Strategies and Best Practices

January 12, 2026

Public sector cybersecurity faces outdated systems, budget gaps, and rising attacks. Learn key challenges, defense strategies, and proven best practices.

Hidden Telegram proxy links can reveal your IP address in one click

January 12, 2026

A single click on what may appear to be a Telegram username or harmless link is all it takes to expose your real IP address to attackers due to how proxy links are handled. Telegram says it will add warnings to proxy links after researchers demonstrated that such one-click interactions could reveal a Telegram user’s…

Everest Ransomware Claims Breach at Nissan, Says 900GB of Data Stolen

January 12, 2026

Everest ransomware claims to have breached Nissan Motor Corporation, alleging the theft of 900GB of internal data, including documents and screenshots.

Spanish energy giant Endesa discloses data breach affecting customers

January 12, 2026

Spanish energy provider Endesa and its Energía XXI operator are notifying customers that hackers accessed the company’s systems and accessed contract-related information, which includes personal details. […]

Prevent cloud data leaks with Microsoft 365 access reviews

January 12, 2026

Microsoft 365 has made file sharing effortless, but that convenience often leaves organizations with little visibility into who can access sensitive data. Tenfold explains how access reviews for shared cloud content can help organizations regain visibility, reduce unnecessary permissions, and prevent data leaks in Microsoft 365. […]

Max severity Ni8mare flaw impacts nearly 60,000 n8n instances

January 12, 2026

Nearly 60,000 n8n instances exposed online remain unpatched against a maximum-severity vulnerability dubbed “Ni8mare.” […]

Europol and Spanish Police arrest 34 in crackdown on Black Axe criminal network

January 12, 2026

Europol announced the arrest of 34 suspected Black Axe members in Spain during a joint operation with Spanish and European law enforcement. Europol announced the arrest of 34 suspects in Spain linked to the Black Axe criminal network, following a joint operation by Spanish police, Bavarian authorities, and Europol, with most arrests in Seville. “The…

Credential-harvesting attacks by APT28 hit Turkish, European, and Central Asian organizations

January 12, 2026

Russia-linked cyberespionage group APT28 targets energy, nuclear, and policy staff in Turkey, Europe, North Macedonia, and Uzbekistan with credential-harvesting attacks. Between February and September 2025, Recorded Future’s Insikt Group observed Russia-linked group APT28 (aka UAC-0001, Fancy Bear, Pawn Storm, Sofacy Group, Sednit, BlueDelta, and STRONTIUM) running credential-harvesting campaigns. Targets included Turkish energy and nuclear agency staff, European think tank personnel, and organizations…

Dobrindt: Mehr Kooperation mit Israel für Sicherheit Deutschlands

January 12, 2026

Deutschland und Israel haben einen Cyber- und Sicherheitspakt geschlossen. ekavector – shutterstock.com Angesichts der wachsenden Gefahr von Angriffen will die Bundesrepublik ihre Zusammenarbeit mit Israel im Sicherheitsbereich ausbauen. Ziel sei mehr Schutz für Deutschland, sagte Bundesinnenminister Alexander Dobrindt (CSU) bei einem Besuch in Israel. Er unterzeichnete zusammen mit dem israelischen Ministerpräsidenten Benjamin Netanjahu einen Cyber-…

Mid-Market Businesses Need MDR: DSN on Proactive Security

January 12, 2026

The mid-market cybersecurity challenge Sophisticated attacks once reserved for Fortune 500 enterprises are now common in the mid-market. Ransomware campaigns, identity-based intrusions, and advanced persistent threat (APT) groups increasingly target organizations with fewer resources and smaller IT teams. Limited budgets, constrained staffing, and expanding compliance requirements create blind spots, leaving mid-sized organizations exposed. Key Pain…

Instagram’s “17 Million User Data Leak” Was Just Scraped Records from 2022

January 11, 2026

Instagram’s 17 million user data leak wasn’t a new breach – Hackread.com’s in-depth analysis shows it was scraped in 2022, leaked in 2023, and falsely repackaged in 2026.

Instagram denies breach amid claims of 17 million account data leak

January 11, 2026

Instagram says it fixed a bug that allowed threat actors to mass-request password reset emails, amid claims that data from more than 17 million Instagram accounts was scraped and leaked online. […]

The ideals of Aaron Swartz in an age of control

January 11, 2026

Today marks Aaron Swartz ’s death anniversary. His fight for open knowledge and digital rights continues as the forces he opposed grow stronger. Today marks the anniversary of the death of Aaron Swartz (Chicago, November 8, 1986 – New York, January 11, 2013), a figure whose life, work, and ideals continue to shape the internet,…

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 79

January 11, 2026

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter VVS Discord Stealer Using Pyarmor for Obfuscation and Detection Evasion A Broken System Fueling Botnets Malicious NPM Packages Deliver NodeCordRAT Boto-Cor-de-Rosa campaign reveals Astaroth WhatsApp-based worm activity in Brazil CNCERT: Risk Warning Regarding…

A massive breach exposed data of 17.5M Instagram users

January 10, 2026

A massive breach exposed data of 17.5M Instagram users, triggering mass password reset emails and fears that stolen data is already circulating online. A major data breach has exposed the personal data of about 17.5 million Instagram users, Malwarebytes Labs researchers warn. Exposed data includes usernames, physical addresses, phone numbers, and email addresses,. Cybercriminals stole…

BreachForums hacking forum database leaked, exposing 324,000 accounts

January 10, 2026

The latest incarnation of the notorious BreachForums hacking forum has suffered a data breach, with its user database table leaked online. […]

Database of 323,986 BreachForums Users Leaked as Admin Disputes Scope

January 10, 2026

Database of 323,986 BreachForums users leaked online as forum admins claim the exposed data is partial and dates back to August 2025.

North Korea–linked APT Kimsuky behind quishing attacks, FBI warns

January 10, 2026

FBI warns that North Korea–linked APT group Kimsuky is targeting governments, think tanks, and academic institutions with quishing attacks. North Korea–linked APT group Kimsuky is targeting government agencies, academic institutions, and think tanks using spear-phishing emails that contain malicious QR codes (quishing), the FBI warns. “As of 2025, Kimsuky actors have targeted think tanks, academic…

Spain arrests 34 suspects linked to Black Axe cyber crime

January 10, 2026

Authorities in Spain have arrested 34 individuals allegedly part of a criminal network involved in cyber fraud and believed to be connected to the Black Axe group responsible for illicit activities across Europe. […]

CISA Urges Emergency Patching for Actively Exploited HPE OneView Flaw

January 10, 2026

CISA adds a critical HPE OneView flaw (CVE-2025-37164) to its KEV catalogue with a Jan 28 deadline. Learn how this 10.0 RCE bug puts server infrastructure at risk.

Ireland recalls almost 13,000 passports over missing ‘IRL’ code

January 10, 2026

Ireland’s Department of Foreign Affairs has recalled nearly 13,000 passports after a software update caused a printing defect. The printing error makes the documents non-compliant with international travel standards and potentially unreadable at automated border gates. […]

Why AI-Powered Cyber Defense Is No Longer Optional for Modern Businesses

January 9, 2026

Large businesses or governments aren’t the only ones threatened by cyber attacks. Every organization is now equally threatened.…

Hackers target misconfigured proxies to access paid LLM services

January 9, 2026

Threat actors are systematically hunting for misconfigured proxy servers that could provide access to commercial large language model (LLM) services. […]

MAESTRO Toolkit Exploiting VMware VM Escape Vulnerabilities

January 9, 2026

Cybersecurity researchers from Huntress detail a major VM Escape attack where hackers took over host servers. Using a secret toolkit called MAESTRO, the attackers stayed hidden for over a year. Read the exclusive details on how this breach was stopped and how to protect your network.

Trend Micro fixed a remote code execution in Apex Central

January 9, 2026

Trend Micro fixed three Apex Central flaws discovered by Tenable that could allow remote code execution or denial-of-service attacks. Trend Micro patched three flaws (CVE-2025-69258, CVE-2025-69259, CVE-2025-69260) in its Apex Central management console after Tenable disclosed details and PoC code. The researchers discovered the vulnerabilities in August 2025, which could enable remote code execution or denial-of-service attacks.…

Hacker Behind Wired.com Leak Now Selling Full 40M Condé Nast Records

January 9, 2026

A hacker claims to be selling nearly 40 million Condé Nast user records after leaking Wired.com data, with multiple major brands allegedly affected.

Illinois Department of Human Services data breach affects 700K people

January 9, 2026

The Illinois Department of Human Services (IDHS), one of Illinois’ largest state agencies, accidentally exposed the personal and health data of nearly 700,000 residents due to incorrect privacy settings. […]

Email security needs more seatbelts: Why click rate is the wrong metric

January 9, 2026

Click rate misses the real email security risk: what attackers can do after they access a mailbox. Material Security explains why containment and post-compromise impact matter more than phishing metrics. […]

Illinois man charged with hacking Snapchat accounts to steal nude photos

January 9, 2026

U.S. prosecutors have charged an Illinois man with orchestrating a phishing operation that allowed him to hack the Snapchat accounts of nearly 600 women to steal private photos and sell them online. […]

Iran cuts Internet nationwide amid deadly protest crackdown

January 9, 2026

Iran shut down the internet as protests spread nationwide. Dozens were killed in a violent crackdown amid soaring inflation and a collapsing currency. Iran has shut down the internet nationwide as protests spread across multiple cities. Security forces responded with a violent crackdown that reportedly killed dozens. Demonstrations continued despite the blackout, with shops closing…

Trend Micro warns of critical Apex Central RCE vulnerability

January 9, 2026

Japanese cybersecurity software firm Trend Micro has patched a critical security flaw in Apex Central (on-premise) that could allow attackers to execute arbitrary code with SYSTEM privileges. […]

LevelBlue: VPN Gateways, Social Engineering Drove 2025 Attacks

January 9, 2026

Network devices and VPN gateways were the most commonly exploited attack surfaces in 2025, as threat actors increasingly bypassed authentication by manipulating employees into granting access, according to LevelBlue SpiderLabs’ 2025 Threat Trends Analysis. Multi-stage attacks blend phishing, voice calls, and extortion According to the report, threat actors in 2025 increasingly bypassed defenses by convincing…

CISA retires 10 emergency cyber orders in rare bulk closure

January 8, 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has retired 10 Emergency Directives issued between 2019 and 2024, saying that the required actions have been completed or are now covered by Binding Operational Directive 22-01. […]

Chinese-speaking hackers exploited ESXi zero-days long before disclosure

January 8, 2026

Chinese-speaking attackers used a hacked SonicWall VPN to deploy ESXi zero-days that were likely exploited over a year before public disclosure. Chinese-speaking attackers were seen abusing a hacked SonicWall VPN to deliver a toolkit targeting VMware ESXi. The exploit chain included a sophisticated VM escape and appears to have been developed more than a year…

New China-linked hackers breach telcos using edge device exploits

January 8, 2026

A sophisticated threat actor that uses Linux-based malware to target telecommunications providers has recently broadened its operations to include organizations in Southeastern Europe. […]

Deeper Network Promo Deeper Network Promo

Global Security News, Security

FBI warns about Kimsuky hackers using QR codes to phish U.S. orgs

January 8, 2026

The North Korean state-sponsored hacker group Kimsuki is using malicious QR codes in spearphishing campaigns that target U.S. organizations, the Federal Bureau of Investigation warns in a flash alert. […]

VMware ESXi zero-days likely exploited a year before disclosure

January 8, 2026

Chinese-speaking threat actors used a compromised SonicWall VPN appliance to deliver a VMware ESXi exploit toolkit that seems to have been developed more than a year before the targeted vulnerabilities became publicly known. […]

Astaroth Banking Trojan Targets Brazilians via WhatsApp Messages

January 8, 2026

Researchers at Acronis have discovered a new campaign called Boto Cor-de-Rosa, where the Astaroth banking malware spreads like a worm through WhatsApp Web to steal contact lists and banking credentials.

Cisco switches hit by reboot loops due to DNS client bug

January 8, 2026

Multiple Cisco switch models are suddenly experiencing reboot loops after logging fatal DNS client errors, according to reports seen by BleepingComputer. […]

n8n Users Urged to Patch CVSS 10.0 Full System Takeover Vulnerability

January 8, 2026

A critical vulnerability (CVE-2026-21877) found by Upwind affects n8n automation tools. Learn why researchers are urging users to update to version 1.121.3 immediately to prevent remote code execution.

Texas court blocks Samsung from collecting smart TV viewing data

January 8, 2026

The State of Texas has obtained a temporary restraining order (TRO) against Samsung that prohibits the South Korean company from collecting audio and visual data about what Texas consumers are watching on their TVs. […]

Texas court blocks Samsung from tracking TV viewing, then vacates order

January 8, 2026

The State of Texas obtained a short-lived, temporary restraining order (TRO) against Samsung that prohibited the South Korean company from collecting audio and visual data about what Texas consumers are watching on their TVs. […]

Discord Controlled NodeCordRAT Steals Chrome Data via NPM Packages

January 8, 2026

Zscaler ThreatLabz identifies three malicious NPM packages mimicking Bitcoin libraries. The NodeCordRAT virus uses Discord commands to exfiltrate MetaMask data and Chrome passwords.

Real-time malware defense: Leveraging AWS Network Firewall active threat defense

January 8, 2026

Cyber threats are evolving faster than traditional security defense can respond; workloads with potential security issues are discovered by threat actors within 90 seconds, with exploitation attempts beginning within 3 minutes. Threat actors are quickly evolving their attack methodologies, resulting in new malware variants, exploit techniques, and evasion tactics. They also rotate their infrastructure—IP addresses,…

Real-time malware defense: Leveraging AWS Network Firewall active threat defense

January 8, 2026

Real-time malware defense: Leveraging AWS Network Firewall active threat defense

January 8, 2026

Real-time malware defense: Leveraging AWS Network Firewall active threat defense

January 8, 2026

Real-time malware defense: Leveraging AWS Network Firewall active threat defense

January 8, 2026

Real-time malware defense: Leveraging AWS Network Firewall active threat defense

January 8, 2026

Public PoC prompts Cisco patch for ISE, ISE-PIC vulnerability

January 8, 2026

Cisco addressed a medium-severity vulnerability in ISE and ISE-PIC after a public PoC exploit was disclosed. Cisco addressed a medium-severity vulnerability, tracked as CVE-2026-20029 (CVSS score: 4.9), in Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) after a public PoC exploit was disclosed. The vulnerability resides in the licensing feature of Cisco ISE…

Six for 2026: The cyber threats you can’t ignore

January 8, 2026

Cybersecurity threats in 2026 are accelerating, driven by AI, automation, and more effective social engineering. Corelight outlines six emerging attack trends and explains how network visibility can help defenders respond faster. […]

Fake ChatGPT and DeepSeek Extensions Spied on Over 1 Million Chrome Users

January 8, 2026

Security researchers have identified two malicious Chrome extensions recording AI chats. Learn how to identify and remove these tools to protect your privacy.