Infosecurity News
“IndonesianFoods” npm Worm Publishes 44,000 Malicious Packages
A new npm worm dubbed “IndonesianFoods” has doubled the number of known malicious packages
CISO Pay Increases 7% As Budget Growth Slows
An IANS study finds CISO compensation rose 6.7% on average in 2025 while budget growth halved compared to 2024
Operation Endgame 3.0 Dismantles Three Major Malware Networks
A global law enforcement operation has taken down the Rhadamanthys infostealer, VenomRAT trojan and the Elysium botnet
Improve Collaboration to Hit Back At Rising Fraud, Says techUK
Industry body techUK calls for real-time intelligence sharing across sectors to combat fraud
Synnovis Finally Issues Breach Notification After 2024 Ransomware Attack
NHS provider Synnovis is notifying clients about the extent of a data breach 17 months after it suffered a ransomware attack
GlobalLogic Becomes Latest Cl0p Victim After Oracle EBS Attack
GlobalLogic has notified 10,000 employees their data was stolen in the Oracle EBS campaign
Cyber-Insurance Payouts Soar 230% in UK
UK cyber-insurers paid 230% more to policyholders in 2024 than the year before
Microsoft Fixes Windows Kernel Zero Day in November Patch Tuesday
Microsoft has patched a zero-day vulnerability in the Windows Kernel under active exploitation by threat actors
UK Government Finally Introduces Cyber Security and Resilience Bill
The UK government is overhauling cybersecurity laws for the first time since 2018 with the Cyber Security and Resilience Bill
Android Devices Targeted By KONNI APT in Find Hub Exploitation
A new cyber-attack has been observed exploiting Google Find Hub to remotely wipe Android devices, linked to North Korean APTs
Qilin Ransomware Activity Surges as Attacks Target Small Businesses
Qilin group ransomware incidents have surged in SMBs, exploiting security gaps and collaborating with Scattered Spider threat group
Hackers Exploit Critical Flaw in Gladinet's Triofox File Sharing Product
Threat actors were exploiting vulnerable versions of Triofox after a patched version was released, said Google Cloud researchers
CISA Adds Zero-Day Bug Used in Spyware Attacks to KEV
CISA has demanded federal agencies patch a zero-day vulnerability affecting Samsung devices used in LandFall spyware attacks
Quantum Route Redirect Phishing Kit Democratizes Cyber-Attacks
KnowBe4 claims the new Quantum Route Redirect kit is supercharging phishing attacks on Microsoft365 users
65% of Leading AI Companies Found With Verified Secrets Leaks
A new study has revealed 65% of top AI firms have leaked sensitive data on GitHub, risking $400bn in assets
China-Aligned UTA0388 Uses AI Tools in Global Phishing Campaigns
Volexity has linked spear phishing operations to China-aligned UTA0388 in new campaigns using advanced tactics and LLMs
New NCA Campaign Warns Men Off Crypto Investment Scams
The UK’s National Crime Agency is warning men under 45 that crypto dreams can soon become a scam nightmare
NCSC Set to Retire Web Check and Mail Check Tools
The UK’s National Cyber Security Centre has urged users of its Web Check and Mail Check services to find alternatives
Russian Hacking Group Sandworm Deploys New Wiper Malware in Ukraine
Sandworm deployed data wipers against Ukrainian governmental entities and companies in the energy, logistics and grain sectors
“I Paid Twice” Phishing Campaign Targets Booking.com
Experts have uncovered large-scale phishing exploiting Booking.com, Airbnb and Expedia accounts, targeting hotels and customers
