IT Security Weekend Catch Up – January 24, 2026

Comments

24.01.2026 | 14:52

IT Security Weekend Catch Up – January 24, 2026
avatar

badcyber

comments

IT Security Weekend Catch Up – January 24, 2026

Afraid of missing important security news during the week? We're here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!

For the less technical

  1. President’s veto further delays the implementation of the DSA in Poland
  2. Cyberattack targeting Poland’s energy grid used a wiper
  3. ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025
  4. Let’s Encrypt: 6-day and IP address certificates are generally available
  5. Judge orders Anna’s Archive to delete scraped data; no one thinks it will comply
  6. AI will compromise your cybersecurity posture

For the more technical

  1. Talks from the CONFidence 2025 security conference
  2. Authentication Survival Guide: DEF CON 33
  3. Cloudflare zero-day: Accessing any host globally
  4. ClearFake gets more evasive with new living off the land (LOTL) techniques
  5. TamperedChef serves bad ads, with infostealers as the main course
  6. Dissecting CrashFix: KongTuke's new toy
  7. Inside a multi-stage Windows malware campaign
  8. VoidLink: Evidence that the era of advanced AI-generated malware has begun
  9. Watering hole attack targets EmEditor users with information-stealing malware
  10. Don't judge a PNG by its header: Purelogs infostealer analysis
  11. Threat actors expand abuse of Microsoft Visual Studio Code
  12. From extension to infection: An in-depth analysis of the Evelyn stealer campaign targeting software developers
  13. Planned failure: Gootloader’s malformed ZIP actually works perfectly
  14. New Remcos campaign distributed through fake shipping document
  15. Operation Nomad Leopard: Targeted spear-phishing campaign against government entities in Afghanistan
  16. PurpleBravo’s targeting of the IT software supply chain
  17. Konni adopts AI to generate PowerShell backdoors
  18. Weaponized in China, deployed in India: The SyncFuture espionage targeted campaign
  19. Operation Covert Access: Weaponized LNK-based spear-phishing targeting Argentina’s judicial sector to deploy a Covert RAT

Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.


Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy! For the less technical President’s veto further delays the implementation of the DSA in Poland Cyberattack targeting Pol 2026-01-24T14:52:23+01:00

Comments