Over half a million VKontakte accounts hijacked using malicious Chrome extensions

Five extensions were doing all sorts of malicious acts, including stealing payment data.

Top Japanese hotel brand reveals cyberattack – Washington hotels hit by ransomware

An investigation is underway into Washington hotel attackers, but no group has claimed responsibility yet.

Eurail confirms stolen traveler data is on sale in the dark web – and it still doesn’t know who is behind the attack

The January 2026 Eurail breach just got worse, as hackers have started selling the stolen data.

Adopting AI is a major priority for businesses – but employees are falling behind on education

All worker types, including CEOs, are showing a lack of readiness when it comes to using AI in cybersecurity.

Sex toy firm hit by data breach – Tenga says hacker infiltrated systems, stole customer data

A Tenga employee fell for a phishing email, and gave away access to a company email account.

Pentagon may sever Anthropic relationship over AI safeguards – Claude maker expresses concerns over ‘hard limits around fully autonomous weapons and mass domestic surveillance’

The Pentagon is threating to cut a $200 million contract with Anthropic over a rift in how the Claude AI model should be used.
…

Google patches first Chrome zero-day of the year – so update now or face attack

An 8.3/10 use after free in CSS Google Chrome bug was patched after being abused by unnamed threat actors.

North Korean job scammers target JavaScript and Python developers with fake interview tasks spreading malware

Operation Dream Job is evolving once again, and now comes through malicious dependencies on bare-bones projects.

Canada Goose confirms data leak – around 600,000 customers thought to be affected

Luxury retailer Canada Goose confirms data was leaked, but argues it wasn’t breached, as hackers claim a third-party was hit instead.
…

Blockchain fintech giant Figure hit by data breach, says ‘limited number of files’ impacted

ShinyHunters claims responsibility, says Figure is part of the Okta single sign-on attacks.