Infosecurity News
APT29 Watering Holes Target Unpatched iPhones and Android Devices
APT29 compromised Ukrainian analytics tracker Plerdy to serve n-day exploits to mobile users
France Blood Service Cyber-Attack Sends Blood Storage Temperatures to 110°C
A supplier of the French National Blood Service was hit by a cyber-attack in which hackers turned cold rooms hosting blood samples up to 110°C (230°F)
3AM Ransomware Used Human-AI Hybrid Tactics in UK School Estate Compromise
Bitdefender highlighted a unique human-AI approach during a September attack on a UK school estate, which resulted in financial data being exfiltrated
Police Seize 100+ Servers After Four-Year Investment Fraud Probe
A German-led coalition of law enforcers has intensified efforts to strike at a €4m investment fraud scheme
Fake Interview of Software Engineer Led to Binance Mega-Heist
Binance has revealed details of how North Korean hackers stole $6.4bn theft of crypto assets
Russia-Aligned Gorbag Targets Ukraine for Intelligence
Russia-aligned Gorbag has hit Ukrainian justice, local government and defense bodies since 2025
Hackers Exploit BTCPay Server Flaw to Steal Cryptocurrency
Attackers drained hot wallets on outdated BTCPay Server instances, with $1.63m traced so far
Cyber-Attack on Refrigeration Systems Hits Supermarkets Across Europe
The incident has reportedly resulted in temperatures being changed on supermarket refrigerators, reminiscent of an attack that affected French retailers last month
NCSC Chief Warns of Imminent AI Ransomware Threat to UK Critical Infrastructure
The UK’s cyber chief has warned that AI-powered malware is highly likely to feature in ransomware attacks targeting British critical infrastructure by 2028
LLMJacking is Costing Some Businesses Up to $1m, Warns Google
Google Mandiant has warned of the high cost of hijacked access to large language models, or LLMJacking
Police and Tech Firms Team Up to Dismantle XCPE Botnet
Google and partners have taken down the XCPE botnet attributed to Chinese device maker Videostrong
Armadin Tests Find 88% of Severe Flaws Outside Vendor Advisories
Armadin found 88% of critical and high findings in its client tests fell outside vendor advisories
Bitter Deploys PapRAT in Asian Cyber-Espionage Campaign
Bitter used three infection chains against South and Southeast Asian targets, one with no malware executable
FBI Attributes Binance Heist to North Korea’s TraderTraitor
The FBI has blamed North Korean APT group TraderTraitor for the world’s biggest cyber heist
Chainalysis Warns Customers After “Offensive Agentic” Security Incident
Chainalysis reveals AI-driven attack that led to unauthorized activity
New Framework Puts Ransomware Resilience for AI Systems in Focus
RAID-AI aims to help organizations assess their security preparation for ransomware attacks targeting AI systems
Chinese Actor Compromises US Government Network Via Chained PHP2Shell Exploit
Dream found that a suspected Chinese-nexus actor gained root access to Palo Alto Network firewall servers to target government organizations
Binance Hit by Record-Breaking $6.3bn Hack in Largest Cryptocurrency Heist in History
Leading cryptocurrency analysts have attributed the cyber-attack to a North Korean elite hacking unit
NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries
NIK C2 malware can fall back on victims’ OpenAI API keys to run AI queries
CREST Urges Whole-Ecosystem Approach to Financial Cyber Resilience
CREST has published a framework for strengthening cyber resilience across financial services
