Security Affairs newsletter Round 558 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs publishes Round 558 of its weekly newsletter, authored by Pierluigi Paganini, in INTERNATIONAL EDITION format on 11 January 2026. The issue highlights a set of recent security stories from the site, beginning with a data breach exposing 17.5 million Instagram users and followed by a report that North Korea–linked APT Kimsuky is involved in quishing attacks, according to Security Affairs.

Other featured items include the Illinois Department of Human Services data breach affecting 700,000 individuals, Trend Micro fixing a remote code execution in Apex Central, and Iran cutting internet access amid nationwide protests, according to the newsletter’s international roundup. Additional links cover China-linked UAT-7290 spying on telecom infrastructures, reports of ESXi zero-days exploited before disclosure, and the spread of an Astaroth WhatsApp-based worm in Brazil.

The roundup also notes items on public PoCs prompting Cisco to patch ISE, and U.S. CISA's addition of HPE OneView and Microsoft Office PowerPoint flaws to its Known Exploited Vulnerabilities catalog, among others.