Cyber Briefing: 2026.01.12
Cybercriminals and threat actors continue targeting critical sectors, from crypto projects and health providers to social media platforms and academic institutions...
👉 What’s happening in cybersecurity today?
Welcome to Cyber Briefing, the newsletter that informs you about the latest cybersecurity advisories, alerts, incidents and news every weekday.
First time seeing this? Please Subscribe
🚨 Cyber Alerts
1. Researchers Expose Pig Butchering Networks
Cybersecurity experts have identified specialized service providers that supply the infrastructure and digital toolkits necessary for criminal networks to operate large-scale investment scams. These providers lower the barrier to entry by offering everything from stolen personal data and social media accounts to automated software for managing victims and laundering stolen funds.
2. GoBruteforcer Botnet Hits Crypto Databases
A new wave of GoBruteforcer attacks is targeting cryptocurrency and blockchain projects by exploiting weak credentials found in AI-generated code and legacy web stacks. This sophisticated botnet co-opts Linux servers to scan for vulnerable services and perform financial reconnaissance on blockchain addresses.
3. MuddyWater Spreads RustyWater RAT
The Iranian threat actor MuddyWater is utilizing a new Rust-based implant called RustyWater in a spear-phishing campaign against diplomatic and financial sectors in the Middle East. This transition to custom, modular malware marks a significant evolution from their traditional reliance on legitimate remote monitoring tools and basic scripting languages.
For more alerts click here!
💥 Cyber Incidents
4. Instagram Assures Accounts Are Secure
Many Instagram users have recently reported a surge in password reset notifications following claims from Malwarebytes about a potential data breach involving 17.5 million accounts. Although Instagram denies any system compromise and maintains that accounts are secure, the incident has prompted renewed warnings regarding digital security and account protection.
5. Canopy Health Hit In Major Cyber Attack
Patients are expressing significant outrage after Canopy Health waited six months to disclose a major cyber attack that compromised their personal information. The leading private oncology provider revealed that while the breach occurred in July 2025, many affected individuals only received notification in mid-December or early January.
6. UH Engaged Hackers Over Cancer Data
The University of Hawaiʻi Cancer Center waited four months to report a ransomware attack that exposed the Social Security numbers and personal data of research participants. Although the university eventually notified the Legislature in December, officials have refused to disclose the number of people affected or whether a ransom was paid to the hackers.
For more incidents click here!
📢 Cyber News
7. Spain Arrests 34 In Black Axe Crackdown
Spanish and German authorities, supported by Europol, recently dismantled a major cell of the Nigerian criminal syndicate Black Axe by arresting 34 individuals. The group is accused of orchestrating wide-ranging crimes including cyber fraud and human trafficking, resulting in millions of euros in damages.
8. Man Charged In Snapchat Hacking Case
A 26-year-old man from Illinois faces federal charges for allegedly phishing Snapchat access codes from approximately 600 women to steal and distribute nude images. The scheme reportedly involved a partnership with a former university track coach to target specific athletes and students across multiple states.
9. California Bans Health Data Resales
The California Privacy Protection Agency has fined Datamasters $45,000 and banned it from selling the data of California residents after the firm failed to register as a data broker. The agency also penalized S&P Global $62,600 for a similar registration delay, highlighting a crackdown on companies that bypass the mandatory reporting requirements established by the California Delete Act.
For more news click here!
📈Cyber Stocks
On Monday, 12th January, cybersecurity stocks generally traded lower as broader market caution and profit-taking extended into the new week. Continued enterprise demand for cloud security, identity protection and perimeter defenses provided some support, but macro uncertainty and rotation into other sectors limited broad gains.
Palo Alto Networks closed at 189.02 dollars and was slightly down, reflecting broader market pressure even as confidence in its unified AI-driven security platform and cloud security demand remained strong.
CrowdStrike closed at 470.61 dollars and moved lower, with profit-taking trimming recent gains despite ongoing demand for its cloud-native endpoint and threat detection Falcon platform.
Okta closed at 92.23 dollars and eased modestly, as broader tech sector caution weighed on performance even though enterprise investment in identity and access management remained steady.
Zscaler closed at 216.73 dollars and dipped, with light selling amid market caution even as enterprise adoption of cloud-delivered security and zero-trust architectures continued.
Fortinet closed at 79.22 dollars and edged higher, supported by persistent interest in zero-trust and network-security solutions despite broader volatility.
💡 Cyber Tip
📧 Researchers Expose Pig Butchering Networks
Investigators uncovered service providers that industrialize pig butchering scams by supplying stolen identities, scam software, and infrastructure to criminal networks.
🔐 What You Should Do
Be skeptical of unsolicited investment or relationship outreach, especially on social media
Never move conversations or investments to private messaging apps or unknown platforms
Verify investment platforms through independent, reputable sources
Report suspected scam activity to financial institutions and relevant authorities
⚠️ Why This Matters
These service-driven scam ecosystems enable fraud at massive scale, combining financial theft with human trafficking and making victims worldwide harder to protect and recover losses.
📚 Cyber Book
Digital Minimalism by Cal Newport
That concludes today’s briefing. You can check the top headlines here!
Copyright © 2026 CyberMaterial. All Rights Reserved.
Follow CyberMaterial on:
Substack, LinkedIn, Twitter, Reddit, Instagram, Facebook, YouTube, and Medium
Sure thing. 😂
Solid roundup covering the service layer behind pig butchering operations. The industrialization angle is spot on, where threat actors basically outsource thewhole fraud stack now. Back when I was consulting, we'd see these operations but they were way more manual. The shift to turnkey scam-as-a-service plattforms means even low-skill actors can launch sophisticated campaigns at scale.