-
CTEM in Practice: Prioritization, Validation, and Outcomes That Matter
Source: The Hacker News Published on 2026-01-27
-
Critical Grist-Core Vulnerability Allows RCE Attacks via Spreadsheet Formulas
Source: The Hacker News Published on 2026-01-27
-
China-Linked Hackers Have Used the PeckBirdy JavaScript C2 Framework Since 2023
Source: The Hacker News Published on 2026-01-27
-
Microsoft Office Zero-Day (CVE-2026-21509) - Emergency Patch Issued for Active Exploitation
Source: The Hacker News Published on 2026-01-27
-
Indian Users Targeted in Tax Phishing Campaign Delivering Blackmoon Malware
Source: The Hacker News Published on 2026-01-26
CTEM in Practice: Prioritization, Validation, and Outcomes That Matter
Cybersecurity teams increasingly want to move beyond looking at threats and vulnerabilities in isolation. It’s not only about what could go wrong (vulnerabilities) or who
China-Linked Hackers Have Used the PeckBirdy JavaScript C2 Framework Since 2023
Cybersecurity researchers have discovered a JScript-based command-and-control (C2) framework called PeckBirdy that has been put to use by China-aligned APT actors since 2023 to target
Critical Grist-Core Vulnerability Allows RCE Attacks via Spreadsheet Formulas
A critical security flaw has been disclosed in Grist‑Core, an open-source, self-hosted version of the Grist relational spreadsheet-database, that could result in remote code execution.
Microsoft Office Zero-Day (CVE-2026-21509) – Emergency Patch Issued for Active Exploitation
Microsoft on Monday issued out-of-band security patches for a high-severity Microsoft Office zero-day vulnerability exploited in attacks. The vulnerability, tracked as CVE-2026-21509, carries a CVSS
Indian Users Targeted in Tax Phishing Campaign Delivering Blackmoon Malware
Cybersecurity researchers have discovered an ongoing campaign that’s targeting Indian users with a multi-stage backdoor as part of a suspected cyber espionage campaign. The activity,
Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code
Cybersecurity researchers have discovered two malicious Microsoft Visual Studio Code (VS Code) extensions that are advertised as artificial intelligence (AI)-powered coding assistants, but also harbor
- Milan mayor says ICE agents not welcome for Winter Olympics
As reports say ICE will join the U.S. security detail at the Winter Olympics in Milan, the Italian city's mayor calls it "a militia that kills."
- 1/26: CBS Evening News
Brutal cold temperatures move in as U.S. digs out from deadly winter storm; Bovino and other agents leaving Minneapolis after Pretti killing.
- Power out for hundreds of thousands due to deadly storm
Deaths and power outages were reported across numerous states due to a monster storm across much of the country.
- Pediatrics group releases vaccine recommendations, breaks with CDC
The AAP is recommending immunization against 18 diseases. Earlier this month, the CDC reduced its recommendations for childhood vaccines to 11 diseases.
- 1/22: CBS Evening News
More than 200 million Americans brace for powerful winter storm; PETA suggests 3D hologram replace Punxsutawney Phil on Groundhog Day

