DarkReading Daily Edition

"Most severe AI vulnerability to date hits ServiceNow."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 14 January 2026, 1458 UTC.

Content and Source:  "DarkReading Daily Edition."

 https://mail.google.com/mail/u/0/#inbox/FMfcgzQfBQDcgtLQpxmdgwrbVBtvcxGW

URL--https://www.darkreading.com

Please check email link, URL, or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Jan.​ 14,​ 2026

View in browser

Daily Edition

Today’s news and analysis for cybersecurity professionals

‘Most Severe AI Vulnerability to Date’ Hits ServiceNow ServiceNow tacked agentic AI onto a largely unguarded legacy chatbot, exposing customers' data and connected systems.

Taiwan Endures Greater Cyber Pressure From China [From DR GLOBAL]: Chinese cyberattacks on Taiwan's critical infrastructure — including energy utilities and hospitals — rose 6% in 2025, averaging 2.63 million attacks a day.

CrowdStrike to Buy Seraphic Security In Bid to Boost Browser Security [From DR TECHNOLOGY]: The browser protection and detection technology will be integrated into Falcon platform to protect endpoints, browser sessions, and cloud applications.

Sponsored Content by GitGuardian Supply Chain Worms in 2026: What Shai-Hulud Taught Attackers (And How to Prepare) The Shai-Hulud 2.0 campaign exposed 33,185 unique secrets across 20,649 repositories scanned. Here is why the next version will be exponentially worse.

Microsoft Starts 2026 With a Bang: A Freshly Exploited Zero-Day The vendor's first Patch Tuesday of the year also contains fixes for 112 CVEs, nearly double the amount from last month.

Shadow#Reactor Uses Text Files to Deliver Remcos RAT Attackers use a sophisticated delivery mechanism of text-only files for RAT deployment, showcasing a clever way to bypass defensive tools and rely on the target's own utilities.

Attackers Abuse Python, Cloudflare to Deliver AsyncRAT The phishing campaign shows how attackers continue to weaponize legitimate cloud services and open source tools to evade detection and gain trust.

---

Read more →

Commentary

---

Here’s What Cloud Security’s Future Holds for the Year Ahead Here are the top cloud security trends I'm seeing in my crystal ball for the New Year — particularly arming us for AI adoption.

Startup Trends Shaking Up Browsers, SOC Automation, AppSec DR Technology Talk: In 2025, these startups have reimagined browser security, pioneered application security for AI-generated code, and are building consensus on agentic vs. human costs.

---

More commentary →

Elsewhere in cyber

---

Cybersecurity Dive Healthcare breaches double as shadow AI, vendor risks proliferate

---

Silent Push Silent Push Uncovers New Magecart Network: Disrupting Online Shoppers Worldwide

---

AhnLab RMM Tools (Syncro, SuperOps, NinjaOne, etc.) Being Distributed Disguised as Video Files

---

Send us a news tip →