Daily Security Briefing #140

January 20, 2026 | Read Online

AI-driven malware rises, spear-phishing targets Argentine judiciary, EU moves to block high-risk suppliers…

Executive Summary

Today’s cybersecurity landscape reveals growing sophistication in AI-generated threats, exemplified by the emergence of VoidLink—an advanced malware developed rapidly through artificial intelligence techniques. Spear-phishing campaigns remain a significant concern, with a new operation targeting Argentina’s judicial sector using authentic court rulings to deliver stealthy remote access trojans. On the defensive front, organizations are adapting by deploying advanced sandbox technologies to counter scaling phishing attacks without expanding SOC teams. Regulatory actions are intensifying as the European Union proposes strict measures to exclude high-risk foreign suppliers from critical telecom infrastructure. Additionally, serious vulnerabilities in widely-used platforms like WordPress and emerging AI-related systems highlight the ongoing need for vigilant patch management.

Top Articles

VoidLink Signals the Start of a New Era in AI-Generated Malware
Check Point Research has uncovered VoidLink, a novel and sophisticated malware largely generated using artificial intelligence. This development marks a breakthrough in malware production speed and complexity, allowing a single threat actor to rapidly develop and iterate a functional, multi-module infection framework. VoidLink leverages advanced techniques including eBPF and LKM rootkits, cloud enumeration, and container environment exploitation. This signals a potentially transformative moment in cyber threats driven by AI acceleration.
Checkpoint | Checkpoint Research

New Spear-Phishing Campaign Abuses Argentine Federal Court Rulings to Deliver Covert RAT
Operation Covert Access targets Argentina’s judicial sector with a highly sophisticated spear-phishing scheme. Attackers use authentic-looking federal court rulings as deceptive lures to distribute a Rust-based Remote Access Trojan designed to remain stealthy through a multi-stage infection process. This campaign exploits the inherent trust placed in official judicial communications, posing serious risks to institutional security.
CyberPress

EU Plans Cybersecurity Overhaul to Block Foreign High-Risk Suppliers
The European Commission unveils proposed legislation aimed at bolstering cybersecurity by mandating the removal of high-risk foreign suppliers from telecom networks. This move targets mitigating risks from state-sponsored and cybercrime groups threatening critical infrastructure. The regulatory overhaul reflects growing geopolitical tensions and the increasing emphasis on supply chain integrity within the EU’s cybersecurity strategy.
BleepingComputer

Hackers Are Scaling. Here’s How SOCs Can Beat Them without Extra Hiring
Phishing attacks continue to grow in volume and sophistication in 2026, driven by widespread use of phishkits that complicate detection and investigation. Security Operations Centers (SOCs) are turning to interactive sandbox tools such as ANY.RUN to break open these complex attacks more efficiently. This approach enables teams to combat expanding threats without the need to increase staffing, improving incident response effectiveness.
CyberPress

Critical WordPress Plugin Bug Allows Hackers Admin Access on 50,000 Sites
A critical vulnerability has been discovered in the Advanced Custom Fields: Extended (ACF Extended) WordPress plugin that can be exploited remotely by unauthenticated attackers to gain administrative privileges. This flaw threatens up to 50,000 WordPress sites, highlighting the importance of prompt patching and increased scrutiny of popular third-party plugins.
BleepingComputer

Three Flaws in Anthropic MCP Git Server Enable File Access and Code Execution
Security researchers disclosed three vulnerabilities in Anthropic’s official MCP (Model Context Protocol) Git server, allowing potential attackers to read, delete files, or execute code under specific circumstances. These exploits leverage prompt injection techniques, potentially compromising AI assistants that rely on the server, raising concerns around AI-integrated developer tools.
TheHackerNews

North Korea-Linked Hackers Target Developers via Malicious VS Code Projects
Threat actors linked to North Korea’s Contagious Interview campaign have expanded their tactics by using malicious Visual Studio Code projects to deliver backdoors on compromised developer machines. This evolution of attack vectors highlights the sustained focus on supply chain and developer toolchain exploitation for espionage and infiltration purposes.
TheHackerNews

One Identity Unveils Major Upgrade to Identity Manager, Strengthening Enterprise Identity Security
Identity security provider One Identity released version 10.0 of its Identity Manager, integrating new capabilities such as risk-based governance and identity threat detection. These enhancements aim to deepen identity governance as a critical layer of enterprise cybersecurity, supporting organizations in managing complex identity risks in dynamic IT environments.
GBHackers

Sprocket Security Appoints Eric Sheridan as Chief Technology Officer
Veteran cybersecurity leader Eric Sheridan has joined Sprocket Security as CTO, bringing extensive experience and patented innovations. He will drive the company’s technology strategy and accelerate development of proactive security solutions to address evolving threats.
GBHackers

Could ChatGPT Convince You to Buy Something?
The AI landscape is increasingly mirroring social media’s monetization approach, focusing on surveillance and targeted advertising to capture consumer attention. Despite early hopes that AI might avoid these traps, OpenAI and similar players are now developing AI tools that blend conversational intelligence with commercial influence, raising privacy and ethical concerns around consumer manipulation.
Schneier

AI Transparency: This newsletter uses AI to curate, rank, and summarize cybersecurity content from leading industry blogs. All articles link directly to original authors. Executive summaries are AI-generated based on article content. I curate the sources and deliver the digest—the original authors deserve the credit for their excellent work.