Infosecurity News
Grok-4 Jailbroken Two Days After Release Using Combined Attack
Grok-4 was jailbroken 48 hours post-launch using Echo Chamber and Crescendo attack methods
IoT Devices at Risk Due to eSIM Flaw in Kigen eUICC Cards
A vulnerability in Kigen eUICC cards has exposed billions of IoT devices via flawed eSIM profile management
Fake News Sites Mimicking CNN, BBC and CNBC Pave Way for Investment Scams
CTM360 has identified over 17,000 fake news sites mimicking reputable brands like CNN, BBC and CNBC, spreading investment fraud across 50 countries
NCSC Urges Enterprises to Upgrade to Microsoft Windows 11 to Avoid Cyber Threats
The NCSC has warned that there are still a significant number of organizations using Windows 10, which will soon be unsupported with security updates
Interlock Ransomware Unleashes New RAT in Widespread Campaign
Interlock ransomware continues to develop custom tooling and a new RAT has been detected by researchers
Louis Vuitton UK Latest Retailer Hit by Data Breach
Louis Vuitton’s UK business has notified customers of a personal data breach
Indian Police Raid Tech Support Scam Call Center
Operation Chakra-V scores success as a fraud syndicate is busted following the raid of a scam call center operating in Noida, Uttar Pradesh
ISACA Addresses Experience Gap with CISA Associate Designation
The new CISA Associate designation recognizes ISACA members who have passed the CISA exam, but do not yet have the required experience
British Man Sentenced for Network Rail Wi-Fi Hack
The man was handed a suspended prison sentence for offenses relating to the hack of Network Rail public Wi-Fi, exposing customers to offensive messaging
Indian Cyber Espionage Group Targets Italian Government
DoNot APT, also known as APT-C-35, traditionally operates exclusively in South Asia
Over Half of “Finfluencer” Victims Have Lost Money, Says TSB
British bank TSB warns of rise of “finfluencers” who dispense dubious financial advice online
MPs Warn of “Significant” Iranian Cyber-Threat to UK
The Intelligence and Security Committee has warned of Iran’s “aggressive” and “extensive” cyber capabilities
LLMs Fall Short in Vulnerability Discovery and Exploitation
Forescout found that most LLMs are unreliable in vulnerability research and exploit tasks, with threat actors still skeptical about using tools for these purposes
TikTok's Handling of EU User Data in China Comes Under Scrutiny Again
A new probe, opened two months after a €530m fine to TikTok, will investigate the tech giant’s storage of EU users’ data in China
Four Arrested in Connection with April UK Retail Attacks
The NCA has arrested four individuals on suspicion of involvement in the attacks on M&S, Co-op and Harrods
Nippon Steel IT Subsidiary Hit by "Zero-Day Attack," Causing Data Breach
Personal data of Nippon Steel Solutions’ customers, partners and employees may be compromised
Tribunal Ruling Brings ICO’s £12.7m TikTok Fine Closer
The UK ICO has welcomed a ruling in its favor in a long-running battle to issue a fine to TikTok
Qantas Confirms 5.7 Million Customers Hit by Data Breach
Qantas says nearly six million passengers were impacted by a recent data breach
Ransomware Attack Stops Nova Scotia Power Meter Readings
Nova Scotia Power revealed that a ransomware attack has prevented meters from sending energy usage data to its systems, impacting billing
Microsoft Patch Tuesday: One Zero-Day and A Potential 'Wormable' Flaw
CVE-2025-47981 has the “unfortunate hallmarks of becoming a significant problem,” said WatchTowr’s CEO
