Mustang Panda Uses Venezuela-Related News as Lure to Spread LOTUSLITE Malware

35/69 Tuesday, January 20, 2026 Researchers from the Acronis Threat Research Unit (TRU) have disclosed the discovery of a new cyber-espionage operation that exploits political developments in Venezuela as a lure to trick U.S. government personnel into opening malicious files. The campaign does not rely on advanced exploitation techniques or complex vulnerabilities; instead, it primarily […]

ThaiCERT

January 20, 2026

Hacktivist Group Hijacks Iranian State TV Signal to Broadcast Protest Footage

34/69 Tuesday, January 20, 2026 On January 18, 2026, a major cyber incident occurred in Iran when a group of hacktivists successfully breached and took control of the Badr satellite signal, resulting in the disruption of several Iranian state television channels. The signal hijacking took place at approximately 9:30 p.m. local time and lasted for […]

ThaiCERT

January 20, 2026

Malicious Chrome Extensions Steal Session Cookies and Take Over Enterprise HR/ERP Accounts

33/69 Monday, January 19, 2026 Cybersecurity firm Socket has identified and warned about five malicious Google Chrome extensions with a combined total of more than 2,300 installations. These extensions masqueraded as productivity and security tools for popular enterprise HR and ERP platforms such as Workday, NetSuite, and SAP SuccessFactors, with the goal of stealing authentication […]

ThaiCERT

January 19, 2026

Privilege Escalation Vulnerability Discovered in Google Vertex AI Allows Low-Privilege Users to Become Service Agents

32/69 Monday, January 19, 2026 Cybersecurity researchers have disclosed a high-severity privilege escalation vulnerability in Google’s Vertex AI platform that could allow low-privileged users to escalate their access and take control of Service Agent accounts, which are system-managed identities with elevated permissions. The vulnerability affects Vertex AI Agent Engine and Ray on Vertex AI and […]

ThaiCERT

January 19, 2026

17 Malicious Browser Extensions Discovered, Over 840,000 Installations Linked to Data-Stealing Malware

31/69 Monday, January 19, 2026 A recent report by cybersecurity researchers LayerX and Koi Security has uncovered 17 malicious browser extensions on the Google Chrome Web Store, Firefox Add-ons, and Microsoft Edge Add-ons, with a combined total of more than 840,000 installations. These extensions are part of a malware operation dubbed “GhostPoster,” disguising itself as […]

ThaiCERT

January 19, 2026

Over 91,000 AI Attack Attempts Detected, Targeting Ollama and OpenAI-Related Systems

30/69 Friday, January 16, 2026 Researchers from GreyNoise have revealed the detection of a large-scale wave of cyberattack attempts targeting artificial intelligence (AI) systems, particularly Ollama and infrastructures connected to OpenAI, between October 2025 and January 2026. Honeypots simulating AI servers recorded a total of 91,403 attack sessions. Analysts assess that the primary objective of […]

ThaiCERT

January 16, 2026

Broadcom Wi-Fi Chipset Vulnerability Allows Disruption of 5 GHz Networks Even With WPA2/WPA3 Enabled

27/69 Thursday, January 15, 2026 Researchers from cybersecurity firm Black Duck have identified a vulnerability in Broadcom Wi-Fi chipsets, which are widely used in both enterprise-grade and consumer routers. The issue was initially discovered during testing of ASUS routers and was later confirmed in coordination with manufacturers to stem from software flaws within the Broadcom […]

ThaiCERT

January 15, 2026

AZ Monica Hospital in Belgium Shuts Down Servers Following Cyberattack

26/69 Thursday, January 15, 2026 AZ Monica Hospital in Belgium, a general hospital providing inpatient, outpatient, and specialized medical services in the cities of Antwerp and Deurne, has disclosed that it was impacted by a cyberattack. As a result, the hospital was forced to temporarily shut down all servers, cancel scheduled procedures and surgeries, and […]

ThaiCERT

January 15, 2026
1 2 3 70