Daily Digest

EU Proposes Ban on High-Risk Tech, AI-Generated Malware Emerges, and Ransomware Hits Apple Supplier Luxshare

January 21, 2026

6 articles (6 new)

18 min read

Summary

This cybersecurity brief for January 21, 2026, covers significant global developments. The EU has proposed a revised Cybersecurity Act to ban high-risk tech suppliers from critical sectors, a move largely targeting Chinese firms. In threat intelligence, researchers have detailed 'VoidLink,' a sophisticated Linux malware framework believed to be one of the first advanced threats predominantly built with AI assistance. Meanwhile, the RansomHub group claims a major breach against Apple supplier Luxshare, threatening to leak sensitive R&D data, and Oracle has released a critical patch for a CVSS 10.0 vulnerability in WebLogic Server.

Filter by Category

New Articles (6)

EU Moves to Ban High-Risk Tech Suppliers from 18 Critical Sectors

HIGH

European Commission Proposes Revised Cybersecurity Act to Phase Out High-Risk ICT Suppliers from Critical Infrastructure

On January 20, 2026, the European Commission introduced a revised EU Cybersecurity Act (CSA 2) aimed at bolstering the bloc's supply chain security. The proposal establishes a framework to identify and exclude high-risk technology suppliers from 18 critical sectors, including energy and telecommunications. This move is widely interpreted as a measure to reduce dependency on Chinese technology providers. The act mandates the derisking of mobile networks by requiring operators to replace equipment from designated high-risk vendors within three years. It also aims to streamline the European Cybersecurity Certification Framework (ECCF) to make compliance faster and more accessible, particularly for SMEs, and strengthens the mandate of the EU's cybersecurity agency, ENISA.

January 21, 2026

5 min read

EU Cybersecurity ActCSA 2Supply Chain SecurityHigh-Risk Vendors5G Security +3 more

EU Moves to Ban High-Risk Tech Suppliers from 18 Critical Sectors

Policy and Compliance

Regulatory

Supply Chain Attack

Oracle Issues Critical Patch for CVSS 10.0 Auth Bypass in WebLogic Server

CRITICAL

Oracle's January 2026 Critical Patch Update Addresses 337 Vulnerabilities, Including a Perfect 10.0 Flaw

Oracle has released its January 2026 Critical Patch Update (CPU), a massive security release containing 337 fixes for vulnerabilities across its product portfolio. The most severe flaw addressed is CVE-2026-21962, a critical authentication bypass vulnerability in the Oracle WebLogic Server Proxy Plug-in with a CVSS score of 10.0. This vulnerability can be exploited remotely by a low-privileged attacker without user interaction, potentially allowing complete takeover of the affected component. The flaw impacts WebLogic Server Proxy Plug-in versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. Oracle strongly urges customers to apply these cumulative patches immediately, highlighting the continued risk of exploitation of previously patched vulnerabilities due to slow enterprise adoption rates.

January 21, 2026

5 min read

OracleCritical Patch UpdateCPUVulnerabilityCVE-2026-21962 +3 more

Oracle Issues Critical Patch for CVSS 10.0 Auth Bypass in WebLogic Server

Patch Management

Vulnerability

RansomHub Hits Apple Supplier Luxshare, Claims Theft of R&D Data for Apple, Nvidia, and Tesla

CRITICAL

RansomHub Ransomware Group Claims Cyberattack on Luxshare, a Key Assembler for Apple Vision Pro and iPhone

The RansomHub ransomware group has claimed a significant data breach against Luxshare Precision Industry, a major Chinese electronics manufacturer and a critical partner for Apple, Nvidia, Tesla, and other tech giants. In a dark web post on January 21, 2026, the group alleged it had stolen and encrypted sensitive intellectual property, including 3D CAD models and engineering designs for products related to its high-profile clients. RansomHub threatened to leak the data, accusing Luxshare's IT department of attempting to hide the incident. Luxshare is a primary assembler for Apple's iPhone and Vision Pro. Independent analysis of sample data released by the attackers appears to confirm it contains confidential project details, validating the severity of this major supply chain breach.

January 21, 2026

6 min read

RansomHubRansomwareData BreachLuxshareApple +4 more

RansomHub Hits Apple Supplier Luxshare, Claims Theft of R&D Data for Apple, Nvidia, and Tesla

Ransomware

Data Breach

Supply Chain Attack

Everest Ransomware Claims 861GB Data Breach at McDonald's India

HIGH

Everest Ransomware Group Alleges Major Breach of McDonald's India, Threatens to Leak Customer and Corporate Data

The Everest ransomware group has claimed a major cyberattack against McDonald's India, alleging the theft of 861 gigabytes of sensitive data. In a post on its dark web leak site on January 20, 2026, the group threatened to publicly release the information if a ransom is not paid. The compromised data reportedly includes a vast amount of personal information on customers and employees, as well as internal corporate documents. This incident, if confirmed, would be the latest in a series of data security issues for the fast-food giant's Indian operations, which suffered previous breaches. The Everest group, a Russian-speaking operation active since 2020, is known for its double-extortion tactics, and the potential leak of customer data poses a significant risk of identity theft and phishing campaigns.

January 21, 2026

5 min read

EverestRansomwareData BreachMcDonald'sIndia +2 more

Ransomware

Data Breach

Drones Emerge as Urgent Cyber Threat to Critical Infrastructure

MEDIUM

New Research Warns Drones Can Launch Sophisticated Cyberattacks on Data Centers and Telecom Networks

A report published on January 21, 2026, by the University of Canberra and Cisco warns of the urgent and escalating cyber threat posed by drones to critical infrastructure. The study highlights that as drone technology becomes more advanced, accessible, and affordable, its potential for use in cyber warfare is growing significantly. Researchers found that drones can be used as platforms to launch sophisticated cyberattacks against targets like data centers and telecommunications networks, exploiting gaps in physical and cybersecurity defenses. The report stresses a significant disconnect between the current level of threat awareness among infrastructure operators and the real-world capabilities of modern drones, urging industries to integrate drone-related risks into their security and resilience programs.

January 21, 2026

5 min read

DroneCyberattackCritical InfrastructureCiscoPhysical Security +2 more

Drones Emerge as Urgent Cyber Threat to Critical Infrastructure

Cyberattack

Threat Intelligence

Industrial Control Systems

NYDFS Enforces Stricter Cybersecurity Rules for Financial Firms

MEDIUM

New York's NYDFS Implements Final Amendments to Part 500, Mandating Stricter Controls for Financial Institutions

The New York Department of Financial Services (NYDFS) has now fully implemented the final amendments to its landmark Part 500 Cybersecurity Regulation. These changes impose significantly more prescriptive and stringent requirements on regulated financial and insurance entities. As of May 2025, firms are mandated to have automated vulnerability scanning, enhanced access controls, and robust logging and monitoring capabilities, including endpoint detection and response (EDR). The amendments also place a strong emphasis on proactive governance of third-party service providers, including cloud and AI vendors. With the rules now fully in effect in 2026, the NYDFS is expected to have lower tolerance for non-compliance and will likely intensify its cybersecurity examinations.

January 21, 2026

6 min read

NYDFSPart 500RegulationComplianceFinancial Services +3 more

NYDFS Enforces Stricter Cybersecurity Rules for Financial Firms

Regulatory

Policy and Compliance

📢 Share This Publication

Help others stay informed about cybersecurity threats