SecurityWeek Briefing

"Blockchain intelligence firm TRM raises $70 million at $1 billion valuation."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents. Accessed on 04 February 2026, 2337 UTC.

Content and Source: "SecurityWeek Briefing" via email subscription from https://feedly.com.

https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check subscription link or scroll down to read your selections. Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Today

Blockchain Intelligence Firm TRM Labs Raises $70 Million at $1 Billion Valuation

TRM Labs secures 70M funding

•

by Eduard Kovacs / 9h

The Series C funding will enable the company to expand its AI capabilities for disrupting criminal networks. The post appeared first on SecurityWeek .

Vulnerabilities Allowed Full Compromise of Google Looker Instances

by Eduard Kovacs / 9h

The flaws dubbed LookOut can be exploited for remote code execution and data exfiltration. The post appeared first on SecurityWeek .

Cyber Insights 2026: Cyberwar and Rising Nation State Threats

by Kevin Townsend / 10h

While both cyberwar and cyberwarfare will increase through 2026, cyberwarfare is likely to increase more dramatically. We hope it will never boil over – but we should be aware of the possibility and its consequences. The post appeared first on SecurityWeek .

11 Sneaky Ways Your Money Disappears

by Finance Buzz

Yesterday

Fresh SolarWinds Vulnerability Exploited in Attacks

CISA warns of exploited SolarWinds flaw

•

by Ionut Arghire / 13h

The critical-severity SolarWinds Web Help Desk flaw could lead to unauthenticated remote code execution. The post appeared first on SecurityWeek .

Security Analysis of Moltbook Agent Network: Bot-to-Bot Prompt Injection and Data Leaks

by Eduard Kovacs / 14h

Wiz and Permiso have analyzed the AI agent social network and found serious security issues and threats. The post appeared first on SecurityWeek .

RADICL Raises $31 Million for vSOC

RADICL secures 31M for cybersecurity

•

by Ionut Arghire / 1d

The company will use the investment to accelerate development of its autonomous virtual security operations center (vSOC). The post appeared first on SecurityWeek .

RapidFort Raises $42M to Automate Software Supply Chain Security

RapidFort raises 42M Series A

•

by Eduard Kovacs / 1d

The company will use the latest capital to scale its go-to-market efforts and expand its platform’s capabilities. The post appeared first on SecurityWeek .

Critical React Native Vulnerability Exploited in the Wild

by Ionut Arghire / 1d

Albeit mainly considered a theoretical risk, the flaw has been exploited to disable protections and deliver malware. The post appeared first on SecurityWeek .

Vulnerability Allows Hackers to Hijack OpenClaw AI Assistant

OpenClaw RCE vulnerability discovered

•

by Eduard Kovacs / 1d

OpenClaw (aka Moltbot and Clawdbot) is vulnerable to one-click remote code execution attacks. The post appeared first on SecurityWeek .

Hackers Leak 5.1 Million Panera Bread Records

Panera Bread data breach exposes records

•

by Ionut Arghire / 1d

ShinyHunters has claimed the theft of 14 million records from the US bakery-cafe chain’s systems. The post appeared first on SecurityWeek .

Russia’s APT28 Rapidly Weaponizes Newly Patched Office Vulnerability

by Eduard Kovacs / 1d

The attacks targeting Europe were analyzed by Ukraine’s CERT-UA and the cybersecurity company Zscaler. The post appeared first on SecurityWeek .

Kasada Raises $20 Million for Anti-Bot Expansion

by Ionut Arghire / 1d

The company will invest in market expansion and accelerating product capabilities. The post appeared first on SecurityWeek .

Feb 2, 2026

ShinyHunters-Branded Extortion Activity Expands, Escalates

by Ionut Arghire / 2d

Hackers rely on evolved vishing and login harvesting to compromise SSO credentials for unauthorized MFA enrollment. The post appeared first on SecurityWeek .

Open VSX Publisher Account Hijacked in Fresh GlassWorm Attack

GlassWorm malware spreads via Open VSX

•

by Ionut Arghire / 2d

A hacker published malicious versions of four established VS Code extensions to distribute a GlassWorm malware loader. The post appeared first on SecurityWeek .

Default ICS Credentials Exploited in Destructive Attack on Polish Energy Facilities

by Eduard Kovacs / 2d

Poland’s CERT has published a report on the recent attack, providing new details on targeted ICS and attribution. The post appeared first on SecurityWeek .

Cyber Insights 2026: Malware and Cyberattacks in the Age of AI

by Kevin Townsend / 2d

Security leaders share how artificial intelligence is changing malware, ransomware, and identity-led intrusions, and how defenses must evolve. The post appeared first on SecurityWeek .

Over 1,400 MongoDB Databases Ransacked by Threat Actor

by Ionut Arghire / 2d

Of 3,100 unprotected MongoDB instances, half remain compromised, most of them by a single threat actor. The post appeared first on SecurityWeek .

Microsoft Moves Closer to Disabling NTLM

Microsoft disables NTLM authentication

•

by Ionut Arghire / 2d

The next major Windows Server and Windows releases will have the deprecated authentication protocol disabled by default. The post appeared first on SecurityWeek .

Japan, Britain to Boost Cybersecurity and Critical Minerals Cooperation as China’s Influence Grows

UK Japan cooperation on minerals

•

by Associated Press / 2d

Japan and Britain agree to accelerate cooperation on cybersecurity and the supply of critical minerals, as China’s influence grows in the region. The post appeared first on SecurityWeek .

Feb 1, 2026

Notepad++ Supply Chain Hack Conducted by China via Hosting Provider

Notepad++ update traffic hijacked

•

by Eduard Kovacs / 2d

The likely state-sponsored threat actor had access to the hosting provider for months and targeted only certain Notepad++ customers. The post appeared first on SecurityWeek .

Jan 31, 2026

eScan Antivirus Delivers Malware in Supply Chain Attack

eScan antivirus supply chain compromised

•

by Ionut Arghire / 4d

Hackers compromised a MicroWorld Technologies update server and fed a malicious file to eScan customers. The post appeared first on SecurityWeek .

Jan 30, 2026

In Other News: Paid for Being Jailed, Google’s $68M Settlement, CISA Chief’s ChatGPT Leak

by SecurityWeek News / 5d

Other noteworthy stories that might have slipped under the radar: Apple updates platform security guide, LastPass detects new phishing wave, CISA withdraws from RSA Conference. The post appeared first on SecurityWeek .

Aisy Launches Out of Stealth to Transform Vulnerability Management

by Kevin Townsend / 5d

Aisy has emerged from stealth mode with $2.3 million in seed funding for its AI-assisted platform. The post appeared first on SecurityWeek .

175,000 Exposed Ollama Hosts Could Enable LLM Abuse

by Ionut Arghire / 5d

Among them, 23,000 hosts were persistently responsible for the majority of activity observed over 293 days of scanning. The post appeared first on SecurityWeek .

White House Scraps ‘Burdensome’ Software Security Rules

by Eduard Kovacs / 5d

Two Biden-era memorandums have been revoked, but some of the resources they provide can still be used by government organizations. The post appeared first on SecurityWeek .

Hugging Face Abused to Deploy Android RAT

by Ionut Arghire / 5d

Android users were lured to applications that served a malicious payload hosted in a Hugging Face repository. The post appeared first on SecurityWeek .

Jan 29, 2026

ICS Devices Bricked Following Russia-Linked Intrusion Into Polish Power Grid

Electrum hackers attack Polish power grid

•

by Eduard Kovacs / 5d

Sandworm/Electrum hackers targeted communication and control systems at 30 sites. The post appeared first on SecurityWeek .

Ivanti Patches Exploited EPMM Zero-Days

Ivanti EPMM zero-day flaws exploited

•

by Ionut Arghire / 5d

The critical-severity vulnerabilities could allow unauthenticated attackers to execute arbitrary code remotely. The post appeared first on SecurityWeek .

LLMs Hijacked, Monetized in ‘Operation Bizarre Bazaar’

Hackers exploit exposed LLM endpoints

•

by Ionut Arghire / 6d

An LLMjacking operation has been targeting exposed LLMs and MCPs at scale, for commercial monetization. The post appeared first on SecurityWeek .

N8n Vulnerabilities Could Lead to Remote Code Execution

by Ionut Arghire / 6d

The two bugs impacted n8n’s sandbox mechanism and could be exploited via weaknesses in the AST sanitization logic. The post appeared first on SecurityWeek .

SolarWinds Patches Critical Web Help Desk Vulnerabilities

by Ionut Arghire / 6d

The four critical flaws could be exploited without authentication for remote code execution or authentication bypass. The post appeared first on SecurityWeek .

Cyber Insights 2026: Zero Trust and Following the Path

by Kevin Townsend / 6d

Zero Trust is not a thing; it is an idea. It is not a product; it is a concept – it is a destination that has no precise route and may never be reached. The post appeared first on SecurityWeek .

Google Disrupts IPIDEA Proxy Network

Kimwolf botnet infects 2 million devices

•

by Ionut Arghire / 6d

One of the largest residential proxy networks, IPIDEA enrolled devices through SDKs for mobile and desktop. The post appeared first on SecurityWeek .

Jan 28, 2026

PwC and Google Cloud Ink $400 Million Deal to Scale AI-Powered Defense

by Eduard Kovacs / 6d

The announcement comes just weeks after Palo Alto Networks and Google Cloud announced a multibillion-dollar AI and cloud security deal. The post appeared first on SecurityWeek .

Hawaii Cybersecurity Journal