Infosecurity News
Confucius Shifts from Document Stealers to Python Backdoors
The Confucius cyber-espionage group has shifted its tactics from document-focused stealers to Python-based backdoors like AnonDoor
Free VPN Apps Found Riddled With Security Flaws
A new study by Zimperium has revealed serious risks in free VPN apps, exposing users to privacy threats and security flaws
Expired US Cyber Law Puts Data Sharing and Threat Response at Risk
Experts argued that the lapse of the Cybersecurity Information Sharing Act could have far-reaching consequences in US national cyber defenses
Forrester: Agentic AI-Powered Breach Will Happen in 2026
Forrester predicts agentic AI will be responsible for a major data breach in 2026
Phishing Dominates EU-Wide Intrusions, says ENISA
ENISA reveals phishing and vulnerability exploitation accounted for majority of intrusions in past year
Broadcom Issues Patches for VMware NSX and vCenter Security Flaws
Broadcom has released security patches for critical flaws affecting several VMware products
Shortcut-based Credential Lures Deliver DLL Implants
A new campaign has been observed using malicious Windows shortcuts in credential-themed ZIP files to deploy PowerShell script
AI Tops Cybersecurity Investment Priorities, PwC Finds
PwC found that AI security has become a top investment priority in cyber budgets over the next 12 months, ahead of cloud and network security
New China-Aligned Hackers Hit State and Telecom Sectors
Phantom Taurus is the latest formally identified cyber-espionage group aligned with Chinese state interest
Campaign Warns Solicitors and House Buyers of Payment Diversion Fraud
The NCA warns that house buyers could face losses of over £80,000 from a type of BEC called payment diversion fraud
ICO: Imgur’s UK Decision Won’t Prevent Regulatory Fine
Image-sharing platform Imgur has blocked its services within the UK, following a regulatory notice from the ICO
Smishing Campaigns Exploit Cellular Routers to Target Belgium
New smishing attacks exploit Milesight routers to send phishing texts targeting Belgian users
New Android RAT Klopatra Targets Financial Data
New Android RAT Klopatra is targeting financial institutions using advanced evasion techniques
US Cuts Federal Funding for MS-ISAC Cybersecurity Program
The Trump administration wants CISA to transition to a “new model” for supporting local government agencies’ cyber strategy
Gemini Trifecta Highlights Dangers of Indirect Prompt Injection
Tenable researchers have discovered three vulnerabilities in Google’s Gemini GenAI tool
Asahi Suspends Operations in Japan After Cyber-Attack
Japanese brewery giant Asahi revealed that a cyber-attack had caused a “system failure”, with order and shipment operations suspended in Japan
CIISec Members Say Budgets Are Falling Behind Threats
Most UK cybersecurity professionals tell CIISec that their budgets are stagnating
Dutch Authorities Arrest Teens in Foreign Interference Case
While the exact suspicion was yet to be revealed it is linked to "foreign interference"
AI-Generated Code Used in Phishing Campaign Blocked by Microsoft
Microsoft Threat Intelligence stopped an AI-driven credential phishing campaign using SVG files disguised as PDFs
National Cyber Authorities Launch OT Security Guidance
The Five Eyes countries, Germany and the Netherlands are launching a standard for managing OT security
