Lara De Jong
-

GlassWorm macOS malware targets crypto wallets again
GlassWorm macOS malware returns via rogue VSCode/OpenVSX extensions that plant AppleScript payloads, steal developer tokens, and try to swap Ledger and Trezor apps.
-

Covenant Health data breach widens to 478,188 patients
Covenant Health data breach totals jumped to 478,188 patients after a forensic re-scan of 1.35 million stolen files linked to the Qilin ransomware group.
-

LastPass Breach Leads to Ongoing Crypto Theft
TRM Labs blockchain investigation links $35+ million in cryptocurrency thefts to the 2022 LastPass breach. Attackers crack master passwords offline, extract private keys, drain wallets via CoinJoin mixing, and launder funds through Russian exchanges.
-

Finnish Authorities Detain Crew and Seize Vessel After Undersea Cable Severed: Aggravated Sabotage Probe Uncovers Sanctioned Cargo
Finnish authorities detained 14 crew aboard the Fitburg cargo ship after a critical undersea cable linking Helsinki to Estonia was severed on New Year’s Eve. Two crew members—Russian and Azerbaijani nationals—face arrest on aggravated sabotage charges, while investigators discovered sanctioned Russian steel in the vessel’s cargo. A second cable operated by Arelion also failed the…
-

Tokyo FM Data Breach Claims 3 Million Records Exposed
On January 1, 2026, an attacker announced access to Tokyo FM Broadcasting Co., Ltd.’s internal systems, claiming to have exfiltrated 3 million listener and employee records. The dataset reportedly includes personal identifiers (names, emails, IP addresses), behavioral data (user agents), authentication tokens, and employment information. Tokyo FM has not yet issued public confirmation or customer…
-

GlassWorm Returns with 24 Malicious Extensions Impersonating Popular Developer Tools
The GlassWorm supply chain campaign has resurfaced, infiltrating the Microsoft Visual Studio Marketplace and Open VSX with 24 malicious extensions. These extensions impersonate popular developer tools and frameworks, stealing credentials and cryptocurrency, and turning developer machines into attacker-controlled nodes. This re-emergence highlights the adaptive nature of the adversary and the persistent challenge in securing developer…
-

AI Brings About a Shift in Video Surveillance
AI is revolutionizing video surveillance, moving beyond simple motion detection to systems that not only see what’s happening but understand why. This shift promises more proactive, reliable, and efficient security through Vision-Language Models (VLM) which combine visual information with language, allowing them to track activities over time and identify cause and effect.
-

French government advises against biometric phone security
The French government is advising against using biometric security, like facial scans or fingerprints, to unlock phones, as detailed in a new advisory document from ANSSI, the national agency for information system security. Instead, ANSSI recommends using end-to-end encrypted chat apps for sensitive communication and disabling automatic MMS reception to prevent spyware attacks. They also…
-

Military Court Sentences 8 to Life in Prison Over Crimean Bridge Bombing
A Russian military court has sentenced eight men to life in prison for their alleged involvement in the 2022 bombing of the Crimean Bridge. This bridge is a crucial symbol of Russia’s claim to the annexed peninsula.
-

Ukrainian Drones Target Rosneft Refinery in Samara – Reports
Ukrainian drones reportedly targeted targets across various Russian regions overnight, with some reports claiming an oil refinery in the southern Samara region was hit. Russia’s Defense Ministry stated that its air defenses intercepted 118 Ukrainian drones.
