🚨 AMD StackWarp flaw weakens SEV-SNP VM isolation.

A hardware bug in Zen 1–5 CPUs lets a privileged host misuse a control bit (via hyperthreading) to corrupt a confidential VM’s stack, enabling key recovery and auth bypass.

🔗 Details & fixes → https://thehackernews.com/2026/01/new-stackwarp-hardware-flaw-breaks-amd.html

⚡ Cybersecurity Recap: From critical exploits to cloud missteps and AI-driven attacks, the threat surface keeps expanding.

See how defenders are adapting—and where the next wave is forming.

🔗 Read the full Weekly Recap → https://thehackernews.com/2026/01/weekly-recap-fortinet-exploits-redline.html

⚠️ DevOps SaaS isn’t “always on.” In 2024, GitHub, Jira, and Azure DevOps logged 502 incidents, causing 4,755 hours of outages or degraded service.

Early 2025 data shows a 69% YoY rise in major incidents. Shared responsibility leaves data protection with you.

🔗 Read → https://thehackernews.com/2026/01/high-costs-of-devops-saas-downtime.html

🚨 Researchers found an indirect prompt injection flaw abusing Google Gemini via calendar invites.

A hidden prompt in an event could trigger Gemini, when asked about a schedule, to summarize private meetings into a new calendar entry—visible to attackers in some enterprise setups.

No user action required.

🔗 Read → https://thehackernews.com/2026/01/google-gemini-prompt-injection-flaw.html

🚨 A major Telegram scam marketplace may be winding down.

Elliptic reports Tudou Guarantee has largely halted transactions in its public channels after processing $12B+ in illicit activity.

🔗 Read → https://thehackernews.com/2026/01/tudou-guarantee-marketplace-halts.html

Thousands of fake banking sites are quietly pulling users in via Google.

CTM360 tracked 11,000+ fake bank domains targeting the U.S. and UK, many ranking next to real institutions. These sites run full onboarding and fake approvals before charging “fees” via crypto or PayPal.

🔗 How SEO is weaponized for fraud → https://thehackernews.com/expert-insights/2026/01/ctm360-analysis-shows-how-fake-banks.html

🚨 Cloudflare fixed a flaw in its ACME HTTP-01 handling that could conditionally disable WAF and allow requests to reach origin servers.

The issue was missing checks that the token matched an active challenge for the hostname.

🔗 Learn more → https://thehackernews.com/2026/01/cloudflare-fixes-acme-validation-bug.html

Leaked API keys aren’t rare 🔑 The blind spot is where teams look.

Intruder scanned 5M apps and found 42K+ exposed tokens embedded in JavaScript bundles—most in SPAs. Many scanners never load front-end assets, so these leaks go unseen 👀

🔗 How secrets slip past scanners → https://thehackernews.com/2026/01/why-secrets-in-javascript-bundles-are.html

⚠️ Most enterprises have a hidden risk: orphan accounts. They still log in, but no one owns them.

IAM only controls what’s connected. Service accounts, legacy apps, and AI agents are often missed.

Inactive access stays active—and attackers use it.

🔗 How continuous identity audits close this gap → https://thehackernews.com/2026/01/the-hidden-risk-of-orphan-accounts.html

🚨 Uncharted: The AI Safety & Security Summit from Fuel iX 🚨

Hidden vulnerabilities and compliance challenges are emerging faster than ever. Access 9 expert-led sessions and a comprehensive report revealing risks in 24 generative AI models.

🔒 Uncover hidden dangers in frontier AI models
⚖️ Learn legal frameworks balancing innovation with responsibility
🛡️ Get proactive defense strategies from top CISOs
📄 Receive a detailed report on vulnerabilities and actionable strategies

Access it now, on-demand: https://thn.news/uncharted-summit

🚨 Researchers found a malware campaign abusing VS Code extensions to infect developers with Evelyn Stealer.

It injects into a legit Windows process to quietly steal credentials, browser cookies, and crypto data.

🔗 Find how the extensions worked and what was stolen → https://thehackernews.com/2026/01/evelyn-stealer-malware-abuses-vs-code.html

🚨 Anthropic’s official Git MCP server had three vulnerabilities enabling file read/delete and potential RCE.

Researchers showed prompt injection—via AI-read content—can trigger the chain without direct system access.

🔗 Exploit chain and CVEs → https://thehackernews.com/2026/01/three-flaws-in-anthropic-mcp-git-server.html

Cybersecurity in 2026 isn't a knowledge problem. It's an execution problem. 📉

The big 3:
• AI-driven attacks
• Shadow agents
• Identity abuse

Stop reading, start executing!

Full Forecast: https://thn.news/tech-security-outlook

🇰🇵 North Korea–linked actors are luring developers with fake job repos.

Simply opening a malicious VS Code project can auto-run hidden tasks that fetch JavaScript from Vercel and deploy a backdoor enabling remote code execution.

🔗 Learn how it works → https://thehackernews.com/2026/01/north-korea-linked-hackers-target.html