The Daily Index — Wednesday, January 14, 2026

GENERAL

TLDR InfoSec

→ Get a demo of Sumo Logic

Summary unavailable

sumologic.com

TLDR InfoSec

→ Download the Gartner Critical Capabilities for SIEM report

Summary unavailable

sumologic.com

TLDR InfoSec

SPANISH ENERGY COMPANY ENDESA HACKED

Hackers broke into Spanish utility Endesa's commercial systems and accessed customer data of over 20 million customers, including identification details, national ID numbers, contract information, and IBAN payment data. The company says passwords were not exposed, operations remain normal, and extra security measures and monitoring are in place.

securityweek.com · 3 min

TLDR InfoSec

TARGET'S DEV SERVER OFFLINE AFTER HACKERS CLAIM TO STEAL SOURCE CODE

An unknown threat actor has claimed to have stolen a trove of Target's internal source code and documentation and is selling it on dark web marketplaces. After BleepingComputer contacted Target for comment, the files were taken offline, and Target's Git server became inaccessible from the internet. Multiple Target employees have confirmed that the source code samples are legitimate.

bleepingcomputer.com · 2 min

TLDR InfoSec

OID-SEE: GIVING YOUR OAUTH APPS THE SIDE-EYE

OAuth in Microsoft Entra creates complex webs of apps, permissions, and identities that are hard to reason about with tables alone, so modelling everything as a graph reveals abuse paths such as impersonation and long‑lived access that would otherwise stay hidden. OID-See uses Microsoft Graph to map service principals, delegated scopes, app roles, ownership, assignments, and reply URLs into a graph-backed analysis. It then layers scoring and enrichment to highlight risky apps, misleading Microsoft-shaped metadata, and dangerous patterns like broad reachability, wildcard redirects, and stale credentials.

cirriustech.co.uk · 26 min

TLDR InfoSec

STOPPING KILL SIGNALS AGAINST YOUR EBPF PROGRAMS

Summary unavailable

substack.bomfather.dev · 5 min

TLDR InfoSec

EVENTBRIDGE PATTERN MATCHING: A FIELD GUIDE

EventBridge JSONs can become very complex quickly. AWS provides very little documentation to help parse them. Fields at the same level of the JSON are ANDed together, whereas values in an array are ORed together. If a user wants to apply an OR to two fields, they can use the $or operator. However, users should be careful when nesting $ors, as each branch gets expanded into additional sub-patterns that can become contradictory or complex to debug. This post also covers other operators and how to combine them to develop complex Boolean logic.

deceptiq.com · 7 min

TLDR InfoSec

ANTHROPIC LAUNCHES CLAUDE AI FOR HEALTHCARE WITH SECURE HEALTH RECORD ACCESS

Claude for Healthcare enables Pro and Max subscribers in the US to connect health records via HealthEx, Function, and upcoming Apple Health/Android Health Connect integrations for medical history summarization and test result explanations. The implementation features privacy-by-design controls allowing users to manage data sharing permissions, with health data explicitly excluded from model training. Anthropic's Acceptable Use Policy requires qualified professional review of outputs for high-risk healthcare decisions, acknowledging AI limitations in medical contexts.

thehackernews.com · 2 min

TLDR InfoSec

GOBRUTEFORCER BOTNET TARGETS CRYPTO PROJECT DATABASES BY EXPLOITING WEAK CREDENTIALS

Check Point Research identified an upgraded GoBruteforcer campaign targeting cryptocurrency and blockchain project databases, exploiting weak credentials spread via AI-generated server-deployment tutorials and legacy XAMPP stacks that expose FTP and phpMyAdmin interfaces. The Golang-based botnet features an obfuscated IRC bot, dynamic credential lists that include crypto-focused usernames, and a module that queries TRON blockchain addresses for non-zero balances. Separately, GreyNoise observed 80,469 sessions over 11 days from threat actors systematically probing 73+ LLM endpoints across major AI providers, hunting for misconfigured proxy servers that leak API access.

thehackernews.com · 4 min

TLDR InfoSec

DUTCH PORT HACKER SENTENCED TO PRISON

A Dutch man was sentenced to seven years in prison for hacking port logistics systems in the Netherlands and Belgium to support cocaine smuggling operations. He used malware delivered via USB sticks, with help from an insider, to gain remote access, steal data, and intercept communications.

securityweek.com · 3 min

TLDR InfoSec

DUTCH COPS CUFF ALLEGED AVCHECK MALWARE KINGPIN IN AMSTERDAM

Dutch authorities have arrested a 33-year-old Dutch suspect at Schiphol Airport, accusing him and two linked companies of running AVCheck, a major counter-antivirus platform that lets criminals test and fine-tune malware against multiple security products. AVCheck, dismantled in May 2025 during Operation Endgame, allegedly helped attackers perfect campaigns by identifying which targets and defenses were easiest to evade.

theregister.com · 3 min

TLDR InfoSec

CALIFORNIA BANS DATA BROKER RESELLING HEALTH DATA OF MILLIONS

CalPrivacy fined Datamasters $45,000 and banned the unregistered data broker from selling Californians' personal information after it traded hundreds of millions of records containing sensitive health data.

bleepingcomputer.com · 2 min

TLDR InfoSec

MAN TO PLEAD GUILTY TO HACKING US SUPREME COURT FILING SYSTEM

A 24-year-old Tennessee man, Nicholas Moore, repeatedly accessed the US Supreme Court's electronic filing system without authorization over 25 days between August and October 2023, obtaining unspecified information from a protected computer.

techcrunch.com · 2 min

TLDR InfoSec

MICROSOFT PATCH TUESDAY ADDRESSES 112 DEFECTS, INCLUDING ONE ACTIVELY EXPLOITED ZERO-DAY

Microsoft's January 2026 Patch Tuesday addressed 112 vulnerabilities, including CVE-2026-20805, an actively exploited information disclosure zero-day in Desktop Window Manager (CVSS 5.5) that CISA added to its KEV catalog.

cyberscoop.com · 1 min