Infosecurity News
Weak Passwords Expose SQL Servers to Cryptominer and Gh0st RAT
Fortinet finds weak SQL Server passwords used to deliver a miner and Gh0st RAT
Hacked Asian Telcos Used to Intercept Taiwanese Calls and Texts
Enea linked SilentAir and Liminal Panda to attacks on Asian mobile operators
Lego Takes BrickLink Marketplace Offline After Detecting Unusual Activity
Lego has taken its BrickLink Marketplace offline after detecting unusual activity as the company investigates the incident
Security Teams Must Shift from Patching to Mitigation in the AI Era
Symantec’s Dick O’Brien says the rapid closure of the patch window means organizations must move beyond patching and adopt an assume exploit mindset
NCSC Launches Cyber Adversary Testing to Boost Resilience
The UK’s National Cyber Security Centre has launched a new Cyber Adversary Simulation (CyAS) scheme
Maersk Reveals Data Breach as Extortion Group Demands $5m
Maersk has revealed a threat actor extracted data from one of its legacy systems
N-able Rushes Out N-central Fixes After 33 Zero-Days Go Public
N-able fixes seven N-central CVEs after 33 alleged zero-days are published
Anthropic's Glasswing Finds Many Vulnerabilities Yet Delivers Few Fixes, Researcher Says
VulnCheck’s Patrick Garrity has found that seven months on, Project Glasswing resulted in only 217 vulnerabilities getting fixed, despite thousands reported
Suspected Chinese Malware Supplier Tied to Three Hacking Campaigns
Check Point links three China-nexus clusters through a shared Sparrow malware framework
OT Incidents Hit a Third of Industrial Organizations, SANS Finds
SANS Institute records largest single-year jump in ICS/OT cyber incidents
Microsoft Fixes 1235 Flaws in Another Record Patch Tuesday
Microsoft patched a record-breaking 1235 CVEs in November’s Patch Tuesday
CISA Expands Incident Reporting Form While CIRCIA Mandate Waits
CISA adds MITRE ATT&CK detail to incident reports as CIRCIA rule awaits White House review
Russia-Linked Turla Hijacks Exchange Servers to Spy on NATO and EU Emails
Turla used compromised Exchange servers to collect NATO and EU-linked emails
Cloud Vulnerabilities Surge Fourfold in Less Than a Year
AI is amplifying the impact of vulnerabilities, long-lived credentials and other cloud risks, says Datadog
Default Admin Password Let Researchers Unlock and Start Cars
Default admin password on automaker login servers let researchers unlock and start test cars
Vanderbilt University Takes Systems Offline After Cyber Incident
The BYOD ransomware group has claimed to have locked the university’s databases and stolen sensitive data from its systems
France Blames Iran for Supermarket Fridge Hack, Requests International Arrest Warrants
The French authorities have tied the cyber-attack targeting supermarket fridges to Iran’s Islamic Revolutionary Guard Corps
Binance Investigates ShinyHunters Breach Claims
Cryptocurrency exchange Binance says ShinyHunters’ breach claims appear to be a scam
Jailbroken AI Agent Ran Two-Week Attack on European Telecom
Jailbroken DeepSeek agent spent two weeks attacking a European telecom, Malbear Labs found
New Supply Chain Attack Compromises Tens of Thousands of GitHub Repositories
Security researchers have detected a malicious workflow affecting tens of thousands of GitHub repositories, including Uber-owned ones
