Security news weekly round-up - 2nd January 2026

Cybercriminals have shown no signs of slowing down. Instead, they tend to adapt their tactics while aiming to stay one step ahead of defenders and catch unsuspecting users off guard. The effect could be loss of login credentials, which can cause financial losses that can hit victims very hard.

The LinkedIn job scam is global. The hook is local

When your instincts tell you that a job might be a scam, you should trust them and walk away. If you don't and take the bait, you can lose money or your LinkedIn account. That is my advice and you should take it.

From the article:

From Nairobi and Lagos to Mumbai and Mexico City, a review of the fraudulent schemes reveals a crucial layer often missed: Scammers are masterfully tailoring their tactics to specific cultural expectations, industry trends, and economic pressures.

In Mexico, bad actors capitalize on the informal nature of the job economy by advertising fake formal roles that carry a promise of security. In Nigeria, scamsters often manage to get LinkedIn users to share their login credentials with the lure of paid work.

27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials

Cybercriminals can go a long way if they plan to steal your login credentials. You might as well make it difficult for them by constantly educating yourself about the latest threats in cybersecurity. This article is an example.

A quick lesson from the article:

To counter the risk posed by the threat, it's essential to enforce stringent dependency verification, log unusual CDN requests from non-development contexts, enforce phishing-resistant multi-factor authentication (MFA), and monitor for suspicious post-authentication events.

GPS is vulnerable to jamming—here’s how we might fix it

The article is a long read. It details how people can jam GPS, some current solutions, and the way forward. The excerpt below is the key takeaway from the article and it's important that you take it as your inspiration to read the entire article itself.

Losing GPS would mean losing a lot more than Google Maps. The technology is integrated into everything from lights that turn on at sunset to dating apps that match users nearby. Its signals also undergird the electrical grid, cell networks, banking, defense technology, and the movements of robots used in industries like agriculture.

Cybercriminals Abuse Google Cloud Email Feature in Multi-Stage Phishing Campaign

Even if it appears to come from a "trusted" sender, scrutinize the email before you act or respond.

From the article:

The fact that these emails can be configured to be sent to any arbitrary email addresses demonstrates the threat actor's ability to misuse a legitimate automation capability to their advantage and send emails from Google-owned domains, effectively bypassing DMARC and SPF checks.

Credits

Cover photo by Debby Hudson on Unsplash.

That's it for this week, and I'll see you next time.