Sysadmins are urged to patch WSUS vulnerability CVE-2025-59287 as soon as possible, with federal agencies required to update by November 14 This article has been indexed from www.infosecurity-magazine.com Read the original article: Actively Exploited WSUS Bug Added to CISA KEV…
Category: www.infosecurity-magazine.com
Qilin Ransomware Group Publishes Over 40 Cases Monthly
Qilin ransomware activity has surged in late 2025, threatening data leaks via double extortion tactics This article has been indexed from www.infosecurity-magazine.com Read the original article: Qilin Ransomware Group Publishes Over 40 Cases Monthly
Europol Warns of Rising Threat From Caller ID Spoofing Attacks
Europol called for action against caller ID spoofing, linking attacks to significant online fraud This article has been indexed from www.infosecurity-magazine.com Read the original article: Europol Warns of Rising Threat From Caller ID Spoofing Attacks
Tata Consultancy Services Refutes Losing M&S Contract After Cyber-Attack
The IT outsourcing giant said its service desk contract with Marks & Spencer was terminated long before the hack This article has been indexed from www.infosecurity-magazine.com Read the original article: Tata Consultancy Services Refutes Losing M&S Contract After Cyber-Attack
UK Fraud Cases Surge 17% Annually
UK Finance reveals a 3% increase in the value and 17% increase in the volume of fraud in H1 2025 This article has been indexed from www.infosecurity-magazine.com Read the original article: UK Fraud Cases Surge 17% Annually
Critical WordPress Plugin Bugs Exploited En Masse
Wordfence says threat actors are trying to exploit three critical vulnerabilities from 2024 This article has been indexed from www.infosecurity-magazine.com Read the original article: Critical WordPress Plugin Bugs Exploited En Masse
New LockBit Ransomware Victims Identified by Security Researchers
Check Point has identified a dozen attacks in September that bore the LockBit stamp, with half of them attributed to the group’s new ransomware version This article has been indexed from www.infosecurity-magazine.com Read the original article: New LockBit Ransomware Victims…
Blitz Spear Phishing Campaign Targets NGOs Supporting Ukraine
A spear phishing campaign dubbed PhantomCaptcha targeted Ukraine’s war relief efforts and regional government administrations for a single day in October This article has been indexed from www.infosecurity-magazine.com Read the original article: Blitz Spear Phishing Campaign Targets NGOs Supporting Ukraine
Threat Actors Ramp Up Public App Exploits as ToolShell Gains Traction
ToolShell exploit activity surged last quarter, appearing in over 60% of Cisco Talos IR cases and driving a sharp rise in public-facing application attacks This article has been indexed from www.infosecurity-magazine.com Read the original article: Threat Actors Ramp Up Public…
Pakistani-Linked Hacker Group Targets Indian Government
A cyber-espionage campaign by Pakistan’s TransparentTribe has been identified, targeting Indian government systems using DeskRAT This article has been indexed from www.infosecurity-magazine.com Read the original article: Pakistani-Linked Hacker Group Targets Indian Government
Lazarus Group’s Operation DreamJob Targets European Defense Firms
Cyber-attacks by North Korea’s Lazarus Group target European defense firms in drone development This article has been indexed from www.infosecurity-magazine.com Read the original article: Lazarus Group’s Operation DreamJob Targets European Defense Firms
Major Vulnerabilities Found in TP-Link VPN Routers
Forescout researchers discovered critical and high-severity vulnerabilities in several TP-Link VPN routers This article has been indexed from www.infosecurity-magazine.com Read the original article: Major Vulnerabilities Found in TP-Link VPN Routers
Lumma Stealer Vacuum Filled by Upgraded Vidar 2.0 Infostealer, Researchers Say
Trend Micro believe security teams should anticipate increased Vidar 2.0 prevalence in campaigns through Q4 2025 This article has been indexed from www.infosecurity-magazine.com Read the original article: Lumma Stealer Vacuum Filled by Upgraded Vidar 2.0 Infostealer, Researchers Say
MuddyWater Uses Compromised Mailboxes in Global Phishing Campaign
Group-IB has uncovered a phishing campaign by Iran-linked MuddyWater, exploiting compromised emails for foreign intelligence This article has been indexed from www.infosecurity-magazine.com Read the original article: MuddyWater Uses Compromised Mailboxes in Global Phishing Campaign
PhantomCaptcha Campaign Targets Ukraine Relief Organizations
SentinelLABS Researchers have uncovered a new phishing campaign, PhantomCaptcha, targeting aid organizations supporting Ukraine This article has been indexed from www.infosecurity-magazine.com Read the original article: PhantomCaptcha Campaign Targets Ukraine Relief Organizations
JLR Hack UK’s Costliest Ever, Hitting Economy with £1.9bn Loss
The Cyber Monitoring Centre has classified the cyber-attack against Jaguar Land Rover as a “systemic cyber event” This article has been indexed from www.infosecurity-magazine.com Read the original article: JLR Hack UK’s Costliest Ever, Hitting Economy with £1.9bn Loss
Scattered Lapsus$ Hunters Signal Shift in Tactics
Scattered Lapsus$ Hunters may be preparing to launch an extortion-as-a-service model, according to Palo Alto Networks This article has been indexed from www.infosecurity-magazine.com Read the original article: Scattered Lapsus$ Hunters Signal Shift in Tactics
Singapore Officials Impersonated in Sophisticated Investment Scam
Group-IB has uncovered a scam operation impersonating Singapore officials using Google Ads and deepfakes This article has been indexed from www.infosecurity-magazine.com Read the original article: Singapore Officials Impersonated in Sophisticated Investment Scam
Ransomware Payouts Surge to $3.6m Amid Evolving Tactics
According to ExtraHop’s latest threat landscape report, average ransomware payments surged 44% to $3.6m in 2025 despite fewer incidents This article has been indexed from www.infosecurity-magazine.com Read the original article: Ransomware Payouts Surge to $3.6m Amid Evolving Tactics
Critical WatchGuard Fireware OS Flaw Enables Remote Code Execution
A critical out-of-bounds write flaw (CVE-2025-9242) in WatchGuard Fireware OS could allow remote code execution This article has been indexed from www.infosecurity-magazine.com Read the original article: Critical WatchGuard Fireware OS Flaw Enables Remote Code Execution