Information Security Magazine

A new malware campaign has been observed built on seven npm packages and using cloaking techniques and fake CAPTCHAs, operated by threat actor dino_reborn

A major US real estate firm has been targeted with an advanced intrusion attempt using Tuoni C2, combining social engineering, steganography and in-memory attacks

DoorDash has confirmed an October 2025 data breach that exposed customer names, phone numbers, addresses and email details

Entrust says AI is helping fraudsters open new accounts and bypass biometric checks

Socura finds 460,000 compromised credentials belonging to FTSE 100 company employees

Cisco Talos has observed overlaps between Kraken and the earlier HelloKitty cartel through attack tactics using SMB flaws for big-game hunting and double extortion

Europol’s Referral Action Day removed extremist links across gaming and gaming-adjacent platforms, targeting radical content

New Immersive report finds cyber resilience and decision making are flatlining

The five defendants allegedly assisted North Korean hackers with obtaining remote IT employment with US companies

Carmaker JLR has posted $639m Q2 losses and a one-off $258m hit after a major ransomware attack

Anthropic’s Claude Code AI assistant performed 80% to 90% of the tasks involved in a recent cyber-attack campaign, said Anthropic researchers

Akira ransomware has extorted $244M since September 2025, with some attacks exfiltrating data in just two hours, a joint cybersecurity advisory warns

Google filed a civil lawsuit against 25 individuals accused of ties to a Chinese cyber collective known as the ‘Smishing Triad’

A new npm worm dubbed “IndonesianFoods” has doubled the number of known malicious packages

An IANS study finds CISO compensation rose 6.7% on average in 2025 while budget growth halved compared to 2024

A global law enforcement operation has taken down the Rhadamanthys infostealer, VenomRAT trojan and the Elysium botnet

Industry body techUK calls for real-time intelligence sharing across sectors to combat fraud

NHS provider Synnovis is notifying clients about the extent of a data breach 17 months after it suffered a ransomware attack

GlobalLogic has notified 10,000 employees their data was stolen in the Oracle EBS campaign

UK cyber-insurers paid 230% more to policyholders in 2024 than the year before