Infosecurity News
New npm Malware Campaign Redirects Victims to Crypto Sites
A new malware campaign has been observed built on seven npm packages and using cloaking techniques and fake CAPTCHAs, operated by threat actor dino_reborn
AI-Enhanced Tuoni Framework Targets Major US Real Estate Firm
A major US real estate firm has been targeted with an advanced intrusion attempt using Tuoni C2, combining social engineering, steganography and in-memory attacks
DoorDash Confirms Data Breach Exposing Customer Personal Information
DoorDash has confirmed an October 2025 data breach that exposed customer names, phone numbers, addresses and email details
GenAI and Deepfakes Drive Digital Forgeries and Biometric Fraud
Entrust says AI is helping fraudsters open new accounts and bypass biometric checks
Half a Million Stolen FTSE 100 Credentials Found on Criminal Sites
Socura finds 460,000 compromised credentials belonging to FTSE 100 company employees
Kraken Uses Benchmarking to Enhance Ransomware Attacks
Cisco Talos has observed overlaps between Kraken and the earlier HelloKitty cartel through attack tactics using SMB flaws for big-game hunting and double extortion
Europol Leads Takedown of Thousands of Extremist Gaming Links
Europol’s Referral Action Day removed extremist links across gaming and gaming-adjacent platforms, targeting radical content
Cyber Readiness Stalls Despite Confidence in Incident Response
New Immersive report finds cyber resilience and decision making are flatlining
US: Five Plead Guilty in North Korean IT Worker Fraud Scheme
The five defendants allegedly assisted North Korean hackers with obtaining remote IT employment with US companies
Cyber-Attack Costs Carmaker JLR $258m in Q2
Carmaker JLR has posted $639m Q2 losses and a one-off $258m hit after a major ransomware attack
Chinese Hackers Automate Cyber-Attacks With AI-Powered Claude Code
Anthropic’s Claude Code AI assistant performed 80% to 90% of the tasks involved in a recent cyber-attack campaign, said Anthropic researchers
Akira Ransomware Haul Surpasses $244M in Illicit Proceeds
Akira ransomware has extorted $244M since September 2025, with some attacks exfiltrating data in just two hours, a joint cybersecurity advisory warns
Google Files Lawsuit to Dismantle 'Lighthouse' Smishing Kit
Google filed a civil lawsuit against 25 individuals accused of ties to a Chinese cyber collective known as the ‘Smishing Triad’
“IndonesianFoods” npm Worm Publishes 44,000 Malicious Packages
A new npm worm dubbed “IndonesianFoods” has doubled the number of known malicious packages
CISO Pay Increases 7% As Budget Growth Slows
An IANS study finds CISO compensation rose 6.7% on average in 2025 while budget growth halved compared to 2024
Operation Endgame 3.0 Dismantles Three Major Malware Networks
A global law enforcement operation has taken down the Rhadamanthys infostealer, VenomRAT trojan and the Elysium botnet
Improve Collaboration to Hit Back At Rising Fraud, Says techUK
Industry body techUK calls for real-time intelligence sharing across sectors to combat fraud
Synnovis Finally Issues Breach Notification After 2024 Ransomware Attack
NHS provider Synnovis is notifying clients about the extent of a data breach 17 months after it suffered a ransomware attack
GlobalLogic Becomes Latest Cl0p Victim After Oracle EBS Attack
GlobalLogic has notified 10,000 employees their data was stolen in the Oracle EBS campaign
Cyber-Insurance Payouts Soar 230% in UK
UK cyber-insurers paid 230% more to policyholders in 2024 than the year before
