Infosecurity News

  1. DragonForce Ransomware Leveraged in MSP Attack Using RMM Tool

    A targeted cyber-attack on an MSP exploited flaws in remote management tools, resulting in ransomware deployment and data theft

  2. Malicious Machine Learning Model Attack Discovered on PyPI

    A novel attack exploited machine learning models on PyPI, using zipped Pickle files to deliver infostealer malware

  3. #Infosec2025: Rory Stewart and Paul Chichester to Headline at Infosecurity Europe 2025

    Former UK government minister Rory Stewart and NCSC Director of Operations Paul Chichester will explore the growing link between geopolitics and cybersecurity

  4. US Government Launches Audit of NIST’s National Vulnerability Database

    The audit of the NVD will be conducted by the US Department of Commerce’s Office of Inspector General

  5. Governments Urge Organizations to Prioritize SIEM/SOAR Adoption

    A joint advisory from the US, UK, Australia and others highlights the importance of SIEM/SOAR platforms and overcoming implementation challenges

  6. Chinese Hackers Exploit Cityworks Flaw to Target US Local Governments

    Cisco Talos reported that a Chinese group has deployed web shells and malware in local government networks post-exploitation

  7. NIST Introduces New Metric to Measure Likelihood of Vulnerability Exploits

    The US National Institute of Standards and Technology (NIST) published a white paper introducing a new metric called Likely Exploited Vulnerabilities (LEV)

  8. Law Enforcement Busts Initial Access Malware Used to Launch Ransomware

    A new Europol-led operation has dismantled infrastructure for key initial access malware used to launch ransomware attacks

  9. Global Dark Web Sting Sees 270 Arrested

    Operation Raptor also resulted in the seizure of $184m and a record amount of illegal drugs, firearms and drug trafficking proceeds

  10. DragonForce Engages in "Turf War" for Ransomware Dominance

    Sophos has observed DragonForce attacking rival ransomware operators including RansomHub as it seeks to expand its reach in the cybercrime marketplace

  11. AI-Generated TikTok Videos Used to Distribute Infostealer Malware

    Malware campaign exploiting TikTok’s popularity has been observed using social engineering to spread Vidar and StealC

  12. Kettering Health Cyber-Attack Disrupts Services

    Kettering Health is facing significant disruptions from a cyber-attack that impacted patient care

  13. Coinbase Breach Affected Almost 70,000 Customers

    The US cryptocurrency exchange claimed that the breach occurred in December 2024

  14. Critical Vulnerabilities Found in Versa Networks SD-WAN/SASE Platform

    The unpatched vulnerabilities, with a CVSS score of 8.6 to 10.0, can lead to remote code execution via authentication bypass

  15. Sensitive Personal Data Stolen in West Lothian Ransomware Attack

    West Lothian Council confirmed that ransomware attackers have stolen personal and sensitive information held on its education network

  16. Global Law Enforcers and Microsoft Seize 2300+ Lumma Stealer Domains

    Law enforcers worldwide have teamed up with Microsoft to disrupt the infrastructure behind Lumma Stealer

  17. Western Logistics and Tech Firms Targeted by Russia’s APT28

    NSA, NCSC and allies warn Western tech and logistics firms of Russian APT28 cyber-espionage threat

  18. #Infosec2025: NCC Group Expert Warns UK Firms to Prepare for Cyber Security and Resilience Bill

    UK businesses should start to plan for required changes to their cybersecurity programs ahead of the Cyber Security and Resilience Bill

  19. Cybercriminals Mimic Kling AI to Distribute Infostealer Malware

    A new malware campaign disguised as Kling AI used fake Facebook ads and counterfeit websites to distribute an infostealer

  20. Flaw in Google Cloud Functions Sparks Broader Security Concerns

    Patched privilege escalation flaw in Google Cloud Platform linked to wider cloud security concerns

What’s hot on Infosecurity Magazine?