MSP cybersecurity news digest, January 12, 2026

This intelligence roundup describes several active threats: ClickFix social‑engineering campaigns that use fake BSOD/update screens to trick users into running malware; credential theft enabling unauthorized access and exfiltration from ShareFile, Nextcloud and ownCloud instances; missing extension namespaces in VS Code forks that allow attackers to publish look‑alike malicious extensions; and multiple critical vulnerabilities in backup and security management products (including a CVSS 9.8 RCE in Trend Micro Apex Central) that require immediate patching.