Infosecurity News

Vanderbilt University Takes Systems Offline After Cyber Incident
The BYOD ransomware group has claimed to have locked the university’s databases and stolen sensitive data from its systems

France Blames Iran for Supermarket Fridge Hack, Requests International Arrest Warrants
The French authorities have tied the cyber-attack targeting supermarket fridges to Iran’s Islamic Revolutionary Guard Corps

Binance Investigates ShinyHunters Breach Claims
Cryptocurrency exchange Binance says ShinyHunters’ breach claims appear to be a scam

Jailbroken AI Agent Ran Two-Week Attack on European Telecom
Jailbroken DeepSeek agent spent two weeks attacking a European telecom, Malbear Labs found

New Supply Chain Attack Compromises Tens of Thousands of GitHub Repositories
Security researchers have detected a malicious workflow affecting tens of thousands of GitHub repositories, including Uber-owned ones

Email Addresses of 2.2 Million Sega Customers Leaked in Vendor Breach
Gaming company Sega warned customers to be vigilant for suspicious emails after hackers compromised Japanese email delivery provider Arara

Crédit Mutuel Arkéa Targeted in Reported $133m Heist
French co-operative bank Crédit Mutuel Arkéa has reported a cyber-attack enabling fraudulent transactions

Anti-Money Laundering Watchdog FATF Targets Scam Compounds
AML body the Financial Action Task Force has suggested new ways to disrupt scam compounds

ARTEX Offensive AI Tool Activity Far Exceeds Reported Campaigns, Censys Finds
A new Censys report showed that the use of ARTEX, an AI pentesting tool popular with threat actor, could be spreading far beyond initially reported campaigns

CISA, FBI Urge Action to Protect Industrial Refrigeration Networks
The CISA advisory follows a swathe of attacks in which hackers have tampered with the temperatures of internet-exposed supermarket refrigeration systems

Half of Security Leaders Report Sensitive Data Exposure Through AI Tools
BlackFog found a lack of visibility into data being shared with AI tools, even those approved for use in the enterprise

Residential Proxy Traffic Traced to White House Network
White House network addresses were used as exits by 28 residential proxy services

Zyxel Switch Patch Missed Flaw Behind Wave of Attacks
Zyxel’s June GS1900 patch did not block the exploit used against 996 switches, Binarly found

India Warns of New AI-Driven Cyber-Attacks Targeting Financial and Crypto Businesses
The Indian CERT said a new cyber malicious group tracked as ‘Crafty Flacon’ is using Chinese-made AI tools to attack fintech and crypto organizations

Chinese Nation-State Threat Activity Falls Sharply in Q2 and Q3 2026
Trellix observed a 41.4% drop in China-nexus activity between April and September, which may reflect changing PRC strategic priorities

GhostMap Bug Leaves Android Phones Stuck in Reboot Loop
Bitdefender warns that unfixed GhostMap bug could force users to factory reset their device

NATS Air Traffic Control Failure Cost UK Economy £33m
Cyber Monitoring Centre report claims an IT failure at the UK’s NATS air traffic services provider cost over £30m

China-Aligned Group Abuses Sogou Input Method to Deliver Malware
SlippyNunchucks used DNS hijacking to turn Sogou brand promotions into a malware channel

APT29 Watering Holes Target Unpatched iPhones and Android Devices
APT29 compromised Ukrainian analytics tracker Plerdy to serve n-day exploits to mobile users

France Blood Service Cyber-Attack Sends Blood Storage Temperatures to 110°C
A supplier of the French National Blood Service was hit by a cyber-attack in which hackers turned cold rooms hosting blood samples up to 110°C (230°F)



