January 2026 – Page 2

CERT Polska Details Coordinated Cyber Attacks on 30+ Wind and Solar Farms

CERT Polska, the Polish computer emergency response team, revealed that coordinated cyber attacks targeted more than 30 wind and photovoltaic farms, a private company from the manufacturing sector, and a large combined heat and power plant (CHP) supplying heat to almost half a million customers in the country.
The incident took place on December 29, 2025. The agency has attributed the attacks to

Crypto wallets received a record $158 billion in illicit funds last year

Illegal cryptocurrency flows hit a record $158 billion in 2025, reversing a three-year trend of declining amounts from $86B in 2021 to $64B in 2024. […]

In Other News: Paid for Being Jailed, Google’s $68M Settlement, CISA Chief’s ChatGPT Leak

Other noteworthy stories that might have slipped under the radar: Apple updates platform security guide, LastPass detects new phishing wave, CISA withdraws from RSA Conference.

The post In Other News: Paid for Being Jailed, Google’s $68M Settlement, CISA Chief’s ChatGPT Leak appeared first on SecurityWeek.

Microsoft to disable NTLM by default in future Windows releases

Microsoft announced that it will disable the 30-year-old NTLM authentication protocol by default in upcoming Windows releases due to security vulnerabilities that expose organizations to cyberattacks. […]

Operation Switch Off dismantles major pirate TV streaming services

The latest phase of the global law enforcement action resulted in seizing three industrial-scale illegal IPTV services. […]

Aisy Launches Out of Stealth to Transform Vulnerability Management

Aisy has emerged from stealth mode with $2.3 million in seed funding for its AI-assisted platform.

The post Aisy Launches Out of Stealth to Transform Vulnerability Management appeared first on SecurityWeek.

Microsoft fixes Outlook bug blocking access to encrypted emails

Microsoft has fixed a known issue that prevented Microsoft 365 customers from opening encrypted emails in classic Outlook after a recent update. […]

175,000 Exposed Ollama Hosts Could Enable LLM Abuse

Among them, 23,000 hosts were persistently responsible for the majority of activity observed over 293 days of scanning.

The post 175,000 Exposed Ollama Hosts Could Enable LLM Abuse appeared first on SecurityWeek.

Researchers Uncover Chrome Extensions Abusing Affiliate Links and Stealing ChatGPT Access

Cybersecurity researchers have discovered malicious Google Chrome extensions that come with capabilities to hijack affiliate links, steal data, and collect OpenAI ChatGPT authentication tokens.
One of the extensions in question is Amazon Ads Blocker (ID: pnpchphmplpdimbllknjoiopmfphellj), which claims to be a tool to browse Amazon without any sponsored content. It was uploaded to the Chrome

White House Scraps ‘Burdensome’ Software Security Rules

Two Biden-era memorandums have been revoked, but some of the resources they provide can still be used by government organizations.

The post White House Scraps ‘Burdensome’ Software Security Rules appeared first on SecurityWeek.

Month: January 2026