Infosecurity News
Zyxel Switch Patch Missed Flaw Behind Wave of Attacks
Zyxel’s June GS1900 patch did not block the exploit used against 996 switches, Binarly found
India Warns of New AI-Driven Cyber-Attacks Targeting Financial and Crypto Businesses
The Indian CERT said a new cyber malicious group tracked as ‘Crafty Flacon’ is using Chinese-made AI tools to attack fintech and crypto organizations
Chinese Nation-State Threat Activity Falls Sharply in Q2 and Q3 2026
Trellix observed a 41.4% drop in China-nexus activity between April and September, which may reflect changing PRC strategic priorities
GhostMap Bug Leaves Android Phones Stuck in Reboot Loop
Bitdefender warns that unfixed GhostMap bug could force users to factory reset their device
NATS Air Traffic Control Failure Cost UK Economy £33m
Cyber Monitoring Centre report claims an IT failure at the UK’s NATS air traffic services provider cost over £30m
China-Aligned Group Abuses Sogou Input Method to Deliver Malware
SlippyNunchucks used DNS hijacking to turn Sogou brand promotions into a malware channel
APT29 Watering Holes Target Unpatched iPhones and Android Devices
APT29 compromised Ukrainian analytics tracker Plerdy to serve n-day exploits to mobile users
France Blood Service Cyber-Attack Sends Blood Storage Temperatures to 110°C
A supplier of the French National Blood Service was hit by a cyber-attack in which hackers turned cold rooms hosting blood samples up to 110°C (230°F)
3AM Ransomware Used Human-AI Hybrid Tactics in UK School Estate Compromise
Bitdefender highlighted a unique human-AI approach during a September attack on a UK school estate, which resulted in financial data being exfiltrated
Police Seize 100+ Servers After Four-Year Investment Fraud Probe
A German-led coalition of law enforcers has intensified efforts to strike at a €4m investment fraud scheme
Fake Interview of Software Engineer Led to Binance Mega-Heist
Binance has revealed details of how North Korean hackers stole $6.4bn theft of crypto assets
Russia-Aligned Gorbag Targets Ukraine for Intelligence
Russia-aligned Gorbag has hit Ukrainian justice, local government and defense bodies since 2025
Hackers Exploit BTCPay Server Flaw to Steal Cryptocurrency
Attackers drained hot wallets on outdated BTCPay Server instances, with $1.63m traced so far
Cyber-Attack on Refrigeration Systems Hits Supermarkets Across Europe
The incident has reportedly resulted in temperatures being changed on supermarket refrigerators, reminiscent of an attack that affected French retailers last month
NCSC Chief Warns of Imminent AI Ransomware Threat to UK Critical Infrastructure
The UK’s cyber chief has warned that AI-powered malware is highly likely to feature in ransomware attacks targeting British critical infrastructure by 2028
LLMJacking is Costing Some Businesses Up to $1m, Warns Google
Google Mandiant has warned of the high cost of hijacked access to large language models, or LLMJacking
Police and Tech Firms Team Up to Dismantle XCPE Botnet
Google and partners have taken down the XCPE botnet attributed to Chinese device maker Videostrong
Armadin Tests Find 88% of Severe Flaws Outside Vendor Advisories
Armadin found 88% of critical and high findings in its client tests fell outside vendor advisories
Bitter Deploys PapRAT in Asian Cyber-Espionage Campaign
Bitter used three infection chains against South and Southeast Asian targets, one with no malware executable
FBI Attributes Binance Heist to North Korea’s TraderTraitor
The FBI has blamed North Korean APT group TraderTraitor for the world’s biggest cyber heist
