Infosecurity News
CISA Expands Incident Reporting Form While CIRCIA Mandate Waits
CISA adds MITRE ATT&CK detail to incident reports as CIRCIA rule awaits White House review
Russia-Linked Turla Hijacks Exchange Servers to Spy on NATO and EU Emails
Turla used compromised Exchange servers to collect NATO and EU-linked emails
Cloud Vulnerabilities Surge Fourfold in Less Than a Year
AI is amplifying the impact of vulnerabilities, long-lived credentials and other cloud risks, says Datadog
Default Admin Password Let Researchers Unlock and Start Cars
Default admin password on automaker login servers let researchers unlock and start test cars
Vanderbilt University Takes Systems Offline After Cyber Incident
The BYOD ransomware group has claimed to have locked the university’s databases and stolen sensitive data from its systems
France Blames Iran for Supermarket Fridge Hack, Requests International Arrest Warrants
The French authorities have tied the cyber-attack targeting supermarket fridges to Iran’s Islamic Revolutionary Guard Corps
Binance Investigates ShinyHunters Breach Claims
Cryptocurrency exchange Binance says ShinyHunters’ breach claims appear to be a scam
Jailbroken AI Agent Ran Two-Week Attack on European Telecom
Jailbroken DeepSeek agent spent two weeks attacking a European telecom, Malbear Labs found
New Supply Chain Attack Compromises Tens of Thousands of GitHub Repositories
Security researchers have detected a malicious workflow affecting tens of thousands of GitHub repositories, including Uber-owned ones
Email Addresses of 2.2 Million Sega Customers Leaked in Vendor Breach
Gaming company Sega warned customers to be vigilant for suspicious emails after hackers compromised Japanese email delivery provider Arara
Crédit Mutuel Arkéa Targeted in Reported $133m Heist
French co-operative bank Crédit Mutuel Arkéa has reported a cyber-attack enabling fraudulent transactions
Anti-Money Laundering Watchdog FATF Targets Scam Compounds
AML body the Financial Action Task Force has suggested new ways to disrupt scam compounds
ARTEX Offensive AI Tool Activity Far Exceeds Reported Campaigns, Censys Finds
A new Censys report showed that the use of ARTEX, an AI pentesting tool popular with threat actor, could be spreading far beyond initially reported campaigns
CISA, FBI Urge Action to Protect Industrial Refrigeration Networks
The CISA advisory follows a swathe of attacks in which hackers have tampered with the temperatures of internet-exposed supermarket refrigeration systems
Half of Security Leaders Report Sensitive Data Exposure Through AI Tools
BlackFog found a lack of visibility into data being shared with AI tools, even those approved for use in the enterprise
Residential Proxy Traffic Traced to White House Network
White House network addresses were used as exits by 28 residential proxy services
Zyxel Switch Patch Missed Flaw Behind Wave of Attacks
Zyxel’s June GS1900 patch did not block the exploit used against 996 switches, Binarly found
India Warns of New AI-Driven Cyber-Attacks Targeting Financial and Crypto Businesses
The Indian CERT said a new cyber malicious group tracked as ‘Crafty Flacon’ is using Chinese-made AI tools to attack fintech and crypto organizations
Chinese Nation-State Threat Activity Falls Sharply in Q2 and Q3 2026
Trellix observed a 41.4% drop in China-nexus activity between April and September, which may reflect changing PRC strategic priorities
GhostMap Bug Leaves Android Phones Stuck in Reboot Loop
Bitdefender warns that unfixed GhostMap bug could force users to factory reset their device
