Infosecurity News
Critical PickleScan Vulnerabilities Expose AI Model Supply Chains
3 critical zero-day flaws in PickleScan, affecting Python and PyTorch, allowed undetected attacks
ShadyPanda's Seven-Year Campaign Infects 4.3M Chrome and Edge Users
Infected 4.3 million Chrome and Edge users via extensions; ShadyPanda exploited browser marketplaces
Google Releases Patches for Android Zero-Day Flaws Exploited in the Wild
Google said it found indications that two newly identified vulnerabilities affecting Android “may be under limited, targeted exploitation”
ICO Set to Check If Mobile Games Comply with Children’s Code
The UK Information Commissioner’s Office has launched an investigation into the mobile gaming sector
Most Companies Fear State-Sponsored Cyber-Attacks and Want More Government Help
New IO study claims 88% of US and UK firms are concerned about state-sponsored cyber-attacks
New Android Albiriox Malware Gains Traction in Dark Web Markets
Android malware Albiriox emerged as MaaS, offering device takeover and real-time fraud capabilities
South Korea's Coupang Confirms 34 Million Customer Data Leak
The South Korean police are tracking the suspect behind a cyber-attack targeting e-commerce giant Coupang
Malware Manipulates AI Detection in Latest npm Package Breach
Malicious npm package targets AI security with misleading prompts, exploiting automated analysis
Cybersecurity M&A Roundup: Cyber Giants Strengthen AI Security Offerings
November 2025 saw cybersecurity giants like Palo Alto Networks, Bugcrowd and Zscaler invest in AI-powered security solutions
Europol Takes Down Illegal Cryptocurrency Mixing Service
Europol, alongside Swiss and German authorities, dismantled the illegal cryptocurrency mixing service ‘Cryptomixer’
Australian Man Gets Seven Years for Running “Evil Twin” Wi-Fi
A Western Australia man will spend seven years behind bars after stealing intimate data via Wi-Fi
Royal Borough of Kensington and Chelsea Reveals Data Breach
At least one London council has had data compromised after a suspected ransomware attack last week
Threat Actors Exploit Calendar Subscriptions for Phishing and Malware Delivery
BitSight research has revealed how threat actors exploit calendar subscriptions to deliver phishing links, malware and social engineering attacks through hijacked domains
Three Black Friday Scams to Watch Out For This Year
Darktrace observed a 620% spike in Black Friday-themed phishing in the weeks leading up to the 2025 edition of the sale day
French Football Federation Suffers Data Breach
The personal data of over two million amateur football players registered in France could be exposed
FCC Warns of Hackers Hijacking Radio Equipment For False Alerts
Hackers have been hijacking US radio equipment to broadcast false emergency alerts, prompting FCC warnings
Bloody Wolf Threat Actor Expands Activity Across Central Asia
A new Bloody Wolf campaign exploits legitimate remote-administration software for cyber-attacks on government targets in Central Asia
Asahi Confirms 1.5 Million Customers Affected in Major Cyber-Attack
Almost two million people may have seen their personal data exposed following a large-scale cyberattack that hit Asahi in September 2025
OpenAI Warns of Mixpanel Data Breach Impacting API Users
The breach may have exposed OpenAI API customers’ data
Fraud Fears But No Breach Spike Expected This Festive Season
Analysis of ICO records shows no surge in breaches during Q4 2024 with no seasonal spike in reported incidents
