The Rainmaker Report

🇨🇳🛡️ China orders firms to drop US and Israeli cybersecurity software, major vendors hit 🛡️🇨🇳 China has told domestic companies to stop using cybersecurity products from a list of US and Israeli firms, citing national security concerns. The move could force rapid tool replacements inside networks where security platforms have deep visibility into traffic and identity. • https://www.reuters.com/wor...

🚨 BREAKING: Russian Hackers Use Simple Copy-Paste Trick to Steal Your Entire Microsoft Account 🚨 A sophisticated phishing attack called ConsentFix exploits OAuth vulnerabilities by tricking users into copying and pasting a malicious URL that contains their Microsoft authorization code. Attackers exchange this code for access tokens, gaining full account access without passwords or MFA, and the t...

Apex Legends match hack: During a live Apex Legends Global Series tournament, someone pushed cheats onto pro players mid match. Players suddenly had aimbot and wallhacks they never installed. The attacker appeared to hijack controls in real time, which points to a serious security hole in the game or its tournament environment. BreachForums data breach: BreachForums got breached. Data tied to abou...

T-Mobile Hacked - https://topclassactions.com/lawsuit-settlements/t-mobile-data-breach-2026 - https://www.cisa.gov/news-events/t-mobile-breach-2026 - https://www.bloomberg.com/news/articles/2026-01-11/t-mobile-breach - https://www.bleepingcomputer.com/news/security/t-mobile-breach-2026/ Bank Infra Takedown - https://www.securityweek.com/feds-seize-password-database-used-in-massive-bank-account-tak...

First up: Instagram is dealing with a massive data leak affecting 17.5 million users. If you've been getting random password reset emails, you're not alone. I'll break down what happened, what data was exposed, and the critical steps you need to take right now to protect your account. Next: Iran's nationwide protests have sparked an unprecedented internet blackout, with the government deploying mi...

Illinois man charged with hacking Snapchat accounts to steal nude photos - https://www.bleepingcomputer.com/news/security/illinois-man-charged-with-hacking-snapchat-accounts-to-steal-nude-photos/ - https://storage.courtlistener.com/recap/gov.uscourts.mad.293918/gov.uscourts.mad.293918.1.0.pdf - https://www.justice.gov/usao-ma/pr/former-college-track-and-field-coach-sentenced-five-years-prison-sext...

📱 Critical Android Dolby Flaw Can Hijack Your Phone 📱 - https://www.securityweek.com/critical-dolby-vulnerability-patched-in-android/ - https://source.android.com/docs/security/bulletin/2026/2026-01-01 - https://social.cyware.com/cyber-security-news-articles 🐱Black Cat Ransomware SEO Poisoning Campaign🐱 - https://thehackernews.com/2026/01/black-cat-behind-seo-poisoning-malware.html - https://w...

Martha Root dressed as Pink Power Ranger takes down white supremacist dating website live on stage. - https://x.com/IntCyberDigest/status/2007183888377118750 - https://en.rattibha.com/thread/2007183888377118750 - https://media.ccc.de/v/39c3-the-heartbreak-machine-nazis-in-the-echo-chamber - https://techcrunch.com/2026/01/05/hacktivist-deletes-white-supremacist-websites-live-on-stage-during-hacker-...

1. VVS Stealer Targeting Discord - https://unit42.paloaltonetworks.com/vvs-stealer/ - https://thehackernews.com/2026/01/new-vvs-stealer-malware-targets-discord.html - https://www.scworld.com/news/pyarmor-obfuscated-vvs-stealer-targets-discord-browser-data = https://www.infosecurity-magazine.com/news/vvs-stealer-advanced-obfuscation/ - https://socprime.com/active-threats/vvs-stealer-malware-targets...

India/X (Grok) • https://m.economictimes.com/tech/technology/meity-issues-notice-to-x-over-misuse-of-grok-to-create-obscene-content/articleshow/126308251.cms?from=mdr • https://m.economictimes.com/news/india/meity-issues-formal-notice-to-x-over-groks-it-act-lapses/articleshow/126307971.cms • https://www.ndtv.com/india-news/it-ministry-issues-notice-to-x-formerly-twitter-over-obscene-indecent-and-s...

Reddit permanently banned a 229,000-member ChatGPT jailbreak community after AI prompt injection attacks interfered with its automated systems. Meanwhile, a China-linked threat actor spied on over 2.2 million Zoom and Microsoft Teams meetings using malicious browser extensions. To top it off, the European Space Agency confirmed a breach exposing 200GB of source code and infrastructure secrets. Cyb...

• https://www.theverge.com/24343913/paypal-honey-megalag-coupon-scam-affiliate-fees • https://www.theverge.com/news/848870/honey-paypal-megalag-part-two • https://fortune.com/2024/12/23/honey-extension-scam-drama/ • https://www.newsweek.com/honey-coupon-browser-extension-mrbeast-youtube-influencer-2007484 • https://ppc.land/honey-co-founder-ryan-hudson-defends-extension-amid-fraud-detection-allega...