Security Affairs newsletter Round 559 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs newsletter Round 559 by Pierluigi Paganini – INTERNATIONAL EDITION was published on 18 January 2026, delivering a curates list of breaking-security stories for the week. Highlights include Ukraine–Germany operation targeting Black Basta with a Russian leader wanted, and China-linked APT UAT-8837 targeting North American critical infrastructure.

The round also notes a data breach at Canada’s Investment Regulatory Organization impacting 750,000 people, and that China-linked APT UAT-9686 abuse was patched in the AsyncOS bug with maximum severity. Other items cover an actively exploited critical flaw in the Modular DS WordPress plugin enabling admin takeover, a ransomware attack disrupting operations at Kyowon, and the Central Maine Healthcare data breach affecting over 145,000 patients. Additional links report Fortinet fixing two critical flaws, U.S.

CISA adding a flaw to the Known Exploited Vulnerabilities catalog, Microsoft Patch Tuesday updates addressing a zero‑day, and AZ Monica hospital in Belgium shutting down servers after a cyberattack. The edition also lists threat actor claims of data theft from Endesa, a Dutch court convicting a hacker, and related coverage from the international press.