Security in filing your taxes early

Late January 2026, the focus has shifted heavily toward the exploitation of AI tools and critical infrastructure. This week’s cybersecurity landscape has been defined by a sharp rise in automated supply-chain attacks and the exploitation of trusted developer environments. High-profile data breaches at Nike and Crunchbase continue to highlight the vulnerability of centralized corporate data. These events, coupled with the emergence of VoidLink—one of the first malware strains largely architected by AI—suggest that attackers are moving away from manual phishing and toward sophisticated, AI-driven methods to compromise infrastructure at scale.

AuthorAuthorAuthor

Daniel Masterson, Ai Courtrie Buson & Bard Gee
January 30, 2026

for the week January 25, 2026, 106th edition

Your quick weekend update and reminder.
☝️ TWA

January 26, 2026 is when you can start filing your taxes.

Filing your taxes early is essentially a "race to the finish line" against identity thieves. Since the IRS only accepts one tax return per Social Security Number (SSN) each year, the first person to file "claims" that identity for the season.

🤷‍♀️ What now?: Plan to file your taxes early

Tools: Regardless of when you file, you should get an IRS Identity Protection PIN (IP PIN). This is a 6-digit code known only to you and the IRS. Even if a hacker has your SSN, they cannot file a return without this PIN. It is the closest thing to "Two-Factor Authentication" for your taxes.

This is an advertisement.

This is an advertisement.

This is an advertisement.

about this edition and Inside Hexagon

Massive AI Chat App Leaked Millions of Users Private Conversations In 2026, these leaks are particularly dangerous because hackers don't just see "text"; they use AI to parse those millions of chats for secrets, emotional leverage, and habits.

The new guidelines for curating news content in the newsletter are designed with the primary objective of highlighting news of significant consequence.

This week, we can conclude that attackers are moving away from manual phishing and toward sophisticated, AI-driven methods to compromise infrastructure at scale.

We are excited for the new developments for Hexagon Center this year. Volunteer with us to learn about cybersecurity and be part of this adventure.

This is an advertisement.

HOUSEKEEPING

Glossary/Legend:

  • Vishing - the fraudulent practice of making phone calls or leaving voice messages purporting to be from reputable companies in order to induce individuals to reveal personal information, such as bank details and credit card numbers.

  • Holistic security - a comprehensive strategy that integrates various protection layers—physical, digital, psycho-social, and organizational—to safeguard individuals, communities, or systems, recognizing that true security involves overall well-being, not just isolated technical defenses.

  • Personal Identifier - A unique word or phrase shared exclusively with an individual or a group, serving as a means of identification and affirmation within the established relationship. It is recommended that 2 or more Personal Identifiers be established per person.

  • Malware (short for malicious software) - refers to any intrusive software developed by cybercriminals (often called hackers) to steal data and damage or destroy computers and computer systems.

  • Ransomware - A type of malware that locks or encrypts a victim's files and demands a ransom payment to unlock and decrypt them. Ransomware can infect a variety of devices, including computers, smartphones, printers, and more.

Spread cybersecurity culture

Do you have any suggestions on how we can further share this newsletter? Tell your friends and family about us by sharing with them the Hexagon Center official website:
View archives at hxweekly.beehiiv.com

Even though we aim to provide you the most current and critical information to keep you safe, threat actors work 24/7 and this newsletter publishes only once a week. Even though we are available via a hotline, it is crucial that you stay up to date via other sources as well to be informed on how you may be at risk.

You may reply to this newsletter or email us at
[email protected]

Send us any questions or things you want to talk about. Please share some fun facts with us. We welcome feedback and suggestions.

Hexagon Center is formed as a nonprofit corporation in California for public benefit,
and is tax-exempt under section 501(c)(3) of the Internal Revenue Code.

DISCLAIMER

Cybersecurity is an ever-changing field, and threats may evolve. While Hexagon Center strives to provide accurate and timely information, we cannot guarantee absolute security. Users are responsible for implementing their security measures and staying informed about the latest cybersecurity developments. Hexagon Center is not responsible for any cyber or scam attacks by our readers. HX Weekly tips are advice are not official positions of Hexagon Center nor is Hexagon Center responsible for its content.

Content of this newsletter is not an official representation of Hexagon Center.

Reply

or to participate.