Daily Digest

Ransomware Supply Chain Attacks Surge; Critical Flaws in Medical and IoT Devices Exposed

January 5, 2026

3 articles (2 new, 1 updated)

10 min read

Summary

This cybersecurity brief for January 5, 2026, covers a wave of high-impact supply chain attacks, with ransomware groups like TridentLocker and Cl0p breaching major federal and corporate vendors. A massive data breach at 700Credit exposed 5.6 million consumer records, while critical vulnerabilities were disclosed in WHILL power wheelchairs and popular headphone brands, posing both physical and digital risks. Additionally, the RondoDox botnet is actively exploiting a CVSS 10.0 flaw in web frameworks.

Filter by Category

New Articles (2)

TridentLocker Ransomware Hits Sedgwick's Federal Contracting Arm

HIGH

Sedgwick Confirms Ransomware Attack on Government Solutions Subsidiary by TridentLocker

Claims administration giant Sedgwick confirmed on January 4, 2026, that its government-focused subsidiary, Sedgwick Government Solutions (SGS), was breached by the emerging TridentLocker ransomware group. The attackers employed a double-extortion strategy, exfiltrating 3.4 GB of data from an isolated file transfer system and threatening its public release. SGS is a major federal contractor for U.S. agencies like the Department of Homeland Security and CISA, making this a significant supply chain security incident.

January 5, 2026

6 min read

TridentLockerRansomwareData BreachSupply Chain AttackDouble Extortion +1 more

TridentLocker Ransomware Hits Sedgwick's Federal Contracting Arm

Flaws in Airoha Bluetooth Chips Expose Headphones from Sony, Bose to Hijacking

HIGH

Critical Vulnerabilities in Airoha Bluetooth Chips Allow Eavesdropping and Hijacking of Major Headphone Brands

A set of critical vulnerabilities has been disclosed in Bluetooth System-on-Chips (SoCs) from Airoha, a major supplier for popular headphone brands including Sony, Bose, and JBL. The flaws, tracked up to CVE-2025-20702, exist in an unauthenticated diagnostic protocol called RACE. An attacker within Bluetooth range can exploit these flaws to connect to a device without pairing, read or write to memory, access the microphone for eavesdropping, and steal Bluetooth link keys to impersonate the device. The vulnerabilities pose a significant privacy and security risk to millions of consumer electronics users.

January 5, 2026

6 min read

AirohaBluetoothVulnerabilityIoTHeadphones +3 more

Flaws in Airoha Bluetooth Chips Expose Headphones from Sony, Bose to Hijacking

Updated Articles (1)

Ransomware Goes Global, Targeting New Regions and Industries with Weaker Defenses

INFORMATIONAL

CyberCube Report Finds Ransomware Expanding to New Territories, LockBit Group Remains Highly Active

Update:

Recent analysis indicates that despite a surge in attack volume, ransomware profits are declining, forcing groups to innovate. Key new tactics include bundling DDoS attacks to increase victim coercion, aggressively recruiting corporate insiders for initial access, and a growing number of new ransomware groups emerging from outside traditional Russian strongholds. These shifts introduce 'triple extortion' and new initial access vectors, making defense more challenging and increasing overall attack severity.

December 12, 2025

Updated: January 5, 2026

5 min read

Ransomware TrendsCyberCubeLockBitRaaSGlobal Threat +1 more

Ransomware Goes Global, Targeting New Regions and Industries with Weaker Defenses

📢 Share This Publication

Help others stay informed about cybersecurity threats

📅 Daily Edition

Curated and deduplicated every day from dozens of trusted sources — giving you one clean, consolidated view of what matters in cybersecurity.

🔢 Deduplication Applied

Related stories are merged into a single evolving article rather than repeated as separate entries — cutting through noise so you only read what's new.

🔗 Full Articles Linked

Every entry links to its full enriched article — complete with MITRE ATT&CK mappings, extracted IOCs, and actionable detection and mitigation guidance.