Infosecurity News
Cyber Readiness Stalls Despite Confidence in Incident Response
New Immersive report finds cyber resilience and decision making are flatlining
US: Five Plead Guilty in North Korean IT Worker Fraud Scheme
The five defendants allegedly assisted North Korean hackers with obtaining remote IT employment with US companies
Cyber-Attack Costs Carmaker JLR $258m in Q2
Carmaker JLR has posted $639m Q2 losses and a one-off $258m hit after a major ransomware attack
Chinese Hackers Automate Cyber-Attacks With AI-Powered Claude Code
Anthropic’s Claude Code AI assistant performed 80% to 90% of the tasks involved in a recent cyber-attack campaign, said Anthropic researchers
Akira Ransomware Haul Surpasses $244M in Illicit Proceeds
Akira ransomware has extorted $244M since September 2025, with some attacks exfiltrating data in just two hours, a joint cybersecurity advisory warns
Google Files Lawsuit to Dismantle 'Lighthouse' Smishing Kit
Google filed a civil lawsuit against 25 individuals accused of ties to a Chinese cyber collective known as the ‘Smishing Triad’
“IndonesianFoods” npm Worm Publishes 44,000 Malicious Packages
A new npm worm dubbed “IndonesianFoods” has doubled the number of known malicious packages
CISO Pay Increases 7% As Budget Growth Slows
An IANS study finds CISO compensation rose 6.7% on average in 2025 while budget growth halved compared to 2024
Operation Endgame 3.0 Dismantles Three Major Malware Networks
A global law enforcement operation has taken down the Rhadamanthys infostealer, VenomRAT trojan and the Elysium botnet
Improve Collaboration to Hit Back At Rising Fraud, Says techUK
Industry body techUK calls for real-time intelligence sharing across sectors to combat fraud
Synnovis Finally Issues Breach Notification After 2024 Ransomware Attack
NHS provider Synnovis is notifying clients about the extent of a data breach 17 months after it suffered a ransomware attack
GlobalLogic Becomes Latest Cl0p Victim After Oracle EBS Attack
GlobalLogic has notified 10,000 employees their data was stolen in the Oracle EBS campaign
Cyber-Insurance Payouts Soar 230% in UK
UK cyber-insurers paid 230% more to policyholders in 2024 than the year before
Microsoft Fixes Windows Kernel Zero Day in November Patch Tuesday
Microsoft has patched a zero-day vulnerability in the Windows Kernel under active exploitation by threat actors
UK Government Finally Introduces Cyber Security and Resilience Bill
The UK government is overhauling cybersecurity laws for the first time since 2018 with the Cyber Security and Resilience Bill
Android Devices Targeted By KONNI APT in Find Hub Exploitation
A new cyber-attack has been observed exploiting Google Find Hub to remotely wipe Android devices, linked to North Korean APTs
Qilin Ransomware Activity Surges as Attacks Target Small Businesses
Qilin group ransomware incidents have surged in SMBs, exploiting security gaps and collaborating with Scattered Spider threat group
Hackers Exploit Critical Flaw in Gladinet's Triofox File Sharing Product
Threat actors were exploiting vulnerable versions of Triofox after a patched version was released, said Google Cloud researchers
CISA Adds Zero-Day Bug Used in Spyware Attacks to KEV
CISA has demanded federal agencies patch a zero-day vulnerability affecting Samsung devices used in LandFall spyware attacks
Quantum Route Redirect Phishing Kit Democratizes Cyber-Attacks
KnowBe4 claims the new Quantum Route Redirect kit is supercharging phishing attacks on Microsoft365 users
