Infosecurity News
UBS Employee Data Reportedly Exposed in Third Party Attack
Banking giant UBS revealed it had suffered a data breach following a cyber-attack on procurement service provider Chain IQ
Researchers Warn of 'Living off AI' Attacks After PoC Exploits Atlassian's AI Agent Protocol
Cato Networks researchers demonstrated an attack leveraging Atlassian’s AI agent-enabling server
Alleged Ryuk Initial Access Broker Extradited to the US
An alleged former member of the infamous Ryuk ransomware group has been extradited to the US
Israeli Hacktivists Steal and Burn $90m+ from Iranian Crypo Biz
Pro-Israel Predatory Sparrow Group steals $90m in crypto from Iranian exchange Nobitex
Critical Linux Flaws Discovered Allowing Root Access Exploits
Two critical Linux flaws allow unprivileged users to gain root access, affecting major distributions
AI Now Generates Majority of Spam and Malicious Emails
Barracuda observed a big spike in spam emails generated using AI tools, making up the majority detected in April 2025
GodFather Malware Upgraded to Hijack Legitimate Mobile Apps
Upgraded GodFather banking malware now uses on-device virtualization to hijack apps, enabling real-time fraud
ClickFix Helps Infostealers Use MHSTA for Defense Evasion
ClickFix techniques are enabling threat actors to bypass defenses using tools like MSHTA, says ReliaQuest
UK Government Publishes Plan to Boost Cyber Sector Growth
The new Cyber Growth Action Plan aims to support the UK’s cyber industry, including the development of innovative new technologies and startups
Ransomware Group Qilin Offers Legal Counsel to Affiliates
The group positions itself “not just as a ransomware group, but as a full-service cybercrime platform”, according to Cybereason
Paddle Pays $5m to Settle Tech Support Scam Allegations
Payment processor Paddle has agreed to settle with the FTC over allegations related to tech support scams
Hacklink Marketplace Fuels Surge in Covert SEO Poisoning Attacks
New SEO poisoning attacks identified, using Hacklink to hijack search rankings and inject malicious links into sites
UK ICO Fines 23andMe £2.3m for Data Protection Failings
23andMe has been fined over £2m by the UK ICO for failing to adequately protect genetic data
Taiwan Hit by Sophisticated Phishing Campaign
Phishing campaign targeting Taiwan has been identified, using tax-themed emails and malware like Winos and HoldingHands
Chained Flaws in Enterprise CMS Provider Sitecore Could Allow Remote Code Execution
WatchTowr has found three vulnerabilities in the Sitecore Experience Platform, used by HSBC and L’Oréal
Microsoft Promises to Keep European Cloud Data in Europe
Microsoft’s Sovereign Cloud solutions are designed to ensure European cloud data is stored and processed in Europe
Brits Lose £106m to Romance Fraud in a Year
New City of London Police data reveals British men and women lost over £100m to romance fraudsters in 2024
Threat Actors Target Victims with HijackLoader and DeerStealer
Cyber-attacks using HijackLoader and DeerStealer have been identified exploiting phishing tactics via ClickFix
Archetyp Market Shut Down in Europe-wide Law Enforcement Operation
Operation DEEP Sentinel has shut down Archetyp Market, the longest-running dark web drug marketplace
Tenable Fixes Three High-Severity Flaws in Vulnerability Scanner Nessus
Nessus users should update patches as soon as possible
