Infosecurity News

  1. Flaw in Slider Revolution Plugin Exposed 4m WordPress Sites

    A flaw in the Slider Revolution plugin has exposed millions of WordPress sites to unauthorized file access

  2. Whisper 2FA Behind One Million Phishing Attempts Since July

    Whisper 2FA is now one of the most active PhaaS tools alongside Tycoon and EvilProxy, responsible for one million attacks since July 2025

  3. Last Windows 10 Patch Tuesday Features Six Zero-Days

    Microsoft has fixed over 170 CVEs in October’s Patch Tuesday, including six zero-day vulnerabilities

  4. Capita Fined £14m After 2023 Breach that Hit 6.6 Million People

    Outsourcing giant Capita has been fined £14m by the ICO after a major data breach in 2023

  5. UK, US Sanction Southeast Asia-Based Online Scam Network

    Investigations found that the network operates scam centers in Cambodia, Myanmar and across Southeast Asia

  6. Legacy Windows Protocols Still Expose Networks to Credential Theft

    Legacy Windows protocols are still exposing organizations to credential theft, Resecurity found

  7. Hacker Group TA585 Emerges With Advanced Attack Infrastructure

    A newly identified cybercrime group TA585 is running an advanced cyber operation distributing MonsterV2 malware

  8. Senior Execs Falling Short on Cyber-Attack Preparedness, NCSC Warns

    In a joint warning letter, UK ministers urged FTSE 350 CEOs to bolster cyber defenses

  9. Chinese Hackers Use Trusted ArcGIS App For Year-Long Persistence

    ReliaQuest report reveals Flax Typhoon attackers maintained year-long access to an ArcGIS system

  10. UK Firms Lose Average of £2.9m to AI Risk

    A new EY report claims unmanaged AI risk is causing millions of pounds’ worth of losses for UK organizations

  11. UK: NCSC Reports 130% Spike in "Nationally Significant" Cyber Incidents

    The UK cybersecurity agency reported 204 cyber incidents of “national significance” between September 2024 and August 2025 – an all-time high

  12. Hackers Target ScreenConnect Features For Network Intrusions

    A rise in attacks exploiting RMM tools like ScreenConnect enables system control via phishing tactics

  13. Spain Arrests Alleged Leader of GXC Team Cybercrime Network

    Spanish authorities have arrested a 25-year-old Brazilian accused of leading the GXC Team and selling malware and AI tools to cybercriminals

  14. New Stealit Malware Campaign Spreads via VPN and Game Installer Apps

    A new campaign distributing the Stealit infostealer employs previously unknown malware delivery techniques and infrastructure

  15. Apple Bug Bounty Payouts Can Now Top $5m

    Apple has doubled its top bug bounty reward to $2m but with bonuses it could reach $5m

  16. FBI and French Police Shutter BreachForums Domain Again

    The infamous BreachForums site has been taken offline again to disrupt Scattered Lapsus$ Hunters

  17. Google Launches AI Bug Bounty with $30,000 Top Reward

    Google has introduced a new AI Vulnerability Reward Program offering up to $30,000 for bug discoveries in its AI products

  18. Google: Clop Accessed “Significant Amount” of Data in Oracle EBS Exploit

    GTIG highlighted indicators that Clop is behind the extortion campaign targeting Oracle EBS instances, with its activity likely beginning as early as August 9

  19. Pro-Russia Hacktivists “Claim” Attack on Water Utility Honeypot

    Forescout said that the TwoNet actor was lured into attacking a honeypot disguised as a water treatment utility, providing insights into the group’s tactics

  20. Researchers Warn of Security Gaps in AI Browsers

    A new report from SquareX Labs highlights security weaknesses in AI browsers like Comet, revealing new cyber-risks

Why Not Watch?

  1. Mastering Identity and Access for Non-Human Cloud Entities

  2. OT Security Ecosystem for Targeted Risk Reduction and Reporting

  3. Mastering AI Security With ISACA’s New AAISM Certification

  4. Risk-Based IT Compliance: The Case for Business-Driven Cyber Risk Quantification

What’s Hot on Infosecurity Magazine?