Information Security Magazine

SecurityScorecard has revealed a new Chinese campaign targeting thousands of ASUS routers globally

Beazley Security data finds the top cause of initial access for ransomware in Q3 was compromised VPN credentials

One US cybersecurity leader described the short-term extension of the Cybersecurity Information Sharing Act as a “temporary patch” and called for a long-term solution

A new malware campaign has been observed built on seven npm packages and using cloaking techniques and fake CAPTCHAs, operated by threat actor dino_reborn

A major US real estate firm has been targeted with an advanced intrusion attempt using Tuoni C2, combining social engineering, steganography and in-memory attacks

DoorDash has confirmed an October 2025 data breach that exposed customer names, phone numbers, addresses and email details

Entrust says AI is helping fraudsters open new accounts and bypass biometric checks

Socura finds 460,000 compromised credentials belonging to FTSE 100 company employees

Cisco Talos has observed overlaps between Kraken and the earlier HelloKitty cartel through attack tactics using SMB flaws for big-game hunting and double extortion

Europol’s Referral Action Day removed extremist links across gaming and gaming-adjacent platforms, targeting radical content

New Immersive report finds cyber resilience and decision making are flatlining

The five defendants allegedly assisted North Korean hackers with obtaining remote IT employment with US companies

Carmaker JLR has posted $639m Q2 losses and a one-off $258m hit after a major ransomware attack

Anthropic’s Claude Code AI assistant performed 80% to 90% of the tasks involved in a recent cyber-attack campaign, said Anthropic researchers

Akira ransomware has extorted $244M since September 2025, with some attacks exfiltrating data in just two hours, a joint cybersecurity advisory warns

Google filed a civil lawsuit against 25 individuals accused of ties to a Chinese cyber collective known as the ‘Smishing Triad’

A new npm worm dubbed “IndonesianFoods” has doubled the number of known malicious packages

An IANS study finds CISO compensation rose 6.7% on average in 2025 while budget growth halved compared to 2024

A global law enforcement operation has taken down the Rhadamanthys infostealer, VenomRAT trojan and the Elysium botnet

Industry body techUK calls for real-time intelligence sharing across sectors to combat fraud