Infosecurity News

  1. Hacked Asian Telcos Used to Intercept Taiwanese Calls and Texts

    Enea linked SilentAir and Liminal Panda to attacks on Asian mobile operators

  2. Lego Takes BrickLink Marketplace Offline After Detecting Unusual Activity

    Lego has taken its BrickLink Marketplace offline after detecting unusual activity as the company investigates the incident

  3. Security Teams Must Shift from Patching to Mitigation in the AI Era

    Symantec’s Dick O’Brien says the rapid closure of the patch window means organizations must move beyond patching and adopt an assume exploit mindset

  4. NCSC Launches Cyber Adversary Testing to Boost Resilience

    The UK’s National Cyber Security Centre has launched a new Cyber Adversary Simulation (CyAS) scheme

  5. Maersk Reveals Data Breach as Extortion Group Demands $5m

    Maersk has revealed a threat actor extracted data from one of its legacy systems

  6. N-able Rushes Out N-central Fixes After 33 Zero-Days Go Public

    N-able fixes seven N-central CVEs after 33 alleged zero-days are published

  7. Anthropic's Glasswing Finds Many Vulnerabilities Yet Delivers Few Fixes, Researcher Says

    VulnCheck’s Patrick Garrity has found that seven months on, Project Glasswing resulted in only 217 vulnerabilities getting fixed, despite thousands reported

  8. Suspected Chinese Malware Supplier Tied to Three Hacking Campaigns

    Check Point links three China-nexus clusters through a shared Sparrow malware framework

  9. OT Incidents Hit a Third of Industrial Organizations, SANS Finds

    SANS Institute records largest single-year jump in ICS/OT cyber incidents

  10. Microsoft Fixes 1235 Flaws in Another Record Patch Tuesday

    Microsoft patched a record-breaking 1235 CVEs in November’s Patch Tuesday

  11. CISA Expands Incident Reporting Form While CIRCIA Mandate Waits

    CISA adds MITRE ATT&CK detail to incident reports as CIRCIA rule awaits White House review

  12. Russia-Linked Turla Hijacks Exchange Servers to Spy on NATO and EU Emails

    Turla used compromised Exchange servers to collect NATO and EU-linked emails

  13. Cloud Vulnerabilities Surge Fourfold in Less Than a Year

    AI is amplifying the impact of vulnerabilities, long-lived credentials and other cloud risks, says Datadog

  14. Default Admin Password Let Researchers Unlock and Start Cars

    Default admin password on automaker login servers let researchers unlock and start test cars

  15. Vanderbilt University Takes Systems Offline After Cyber Incident

    The BYOD ransomware group has claimed to have locked the university’s databases and stolen sensitive data from its systems

  16. France Blames Iran for Supermarket Fridge Hack, Requests International Arrest Warrants

    The French authorities have tied the cyber-attack targeting supermarket fridges to Iran’s Islamic Revolutionary Guard Corps

  17. Binance Investigates ShinyHunters Breach Claims

    Cryptocurrency exchange Binance says ShinyHunters’ breach claims appear to be a scam

  18. Jailbroken AI Agent Ran Two-Week Attack on European Telecom

    Jailbroken DeepSeek agent spent two weeks attacking a European telecom, Malbear Labs found

  19. New Supply Chain Attack Compromises Tens of Thousands of GitHub Repositories

    Security researchers have detected a malicious workflow affecting tens of thousands of GitHub repositories, including Uber-owned ones

  20. Email Addresses of 2.2 Million Sega Customers Leaked in Vendor Breach

    Gaming company Sega warned customers to be vigilant for suspicious emails after hackers compromised Japanese email delivery provider Arara

Why Not Watch?

  1. How to Use Context to Make Better Security Decisions, Whatever the Tools

  2. See What Attackers See: A Unified Approach to Validating Security Exposure

  3. Your Vendor’s Outage Is Your Incident: Managing Third-Party Risk Beyond The Spreadsheet

  4. How to Detect Insider Threats Without a Security Team

What’s Hot on Infosecurity Magazine?