Hello gang, welcome to another Sans Podcast.

I know we're quite behind, and my goal was to do these podcasts between TSB episodes, but the week of the 17th had two meetings, one of which went to a second meeting I decided to stay for. For those who are not clear by this, the two meetings I were to attent happened on two different days, but then one meeting I stayed for happened on the first day and it isn't a regular meeting I stay for.

This podcast is going to cover the newsletter that was released way back on January 9th, 2026. My goal is to get us caught up, and I'm going to do my best.

Would you like to read the newsletter? Here is the link to read January 9, 2026 and its newsletter if you wish.

I believe one of the biggest stories may be this web page California residents can go to so they can opt out of stuff.

Let's see what is in the top of the news.

California's New Privacy Law Lets Consumers Submit One Demand for All Registered Data Brokers to Stop Collecting Their Information

Threat Actor’s Breach was a Resecurity Honeypot

Hospitality Staff, Beware ClickFix Attacks that Mimic BSOD

Here is what they covered for the rest of the week's news for this newsletter.

Cisco Releases Updates for ISE and Snort 3 Distributed Computing Environment/Remote Procedure Call Vulnerabilities

n8n Releases Patches for Two Critical Vulnerabilities in One Week

Veeam Update Addresses Four Vulnerabilities

CISA KEV Adds Code Injection Vulnerabilities in HPE OneView and Microsoft Office PowerPoint

Critical Missing Authentication Vulnerability in WHILL Electric Wheelchairs

European Space Agency Acknowledges Infosec Breach

I hope you all enjoy the program as much as I am bringing it to you, and make it a great day!

Sans covers the newsletter for January 9, 2026