Infosecurity News
UK Gov Cybersecurity Jobs Average Salary is Under £45,000, Study Finds
Bridewell’s analysis of advertised UK cybersecurity roles revealed that the public sector offers one the lowest average salaries across all industries
Russia Expert Falls Prey to Elite Hackers Disguised as US Officials
A prominent expert on Russian information operations was targeted by a sophisticated spear phishing attack likely coming from Russian hackers
Banana Squad’s Stealthy GitHub Malware Campaign Targets Devs
Banana Squad exploited GitHub to distribute malicious Python code disguised as legitimate tools
North Korean Hackers Deploy Python-Based Trojan Targeting Crypto
Python RAT PylangGhost, linked to Famous Chollima, targeted crypto professionals via fake job sites
Krispy Kreme Data Breach Puts Employees at Risk of Financial Fraud
Doughnut maker Krispy Kreme has revealed that sensitive financial and personal data of over 160,000 individuals has been impacted following a November 2024 cyber incident
UBS Employee Data Reportedly Exposed in Third Party Attack
Banking giant UBS revealed it had suffered a data breach following a cyber-attack on procurement service provider Chain IQ
Researchers Warn of 'Living off AI' Attacks After PoC Exploits Atlassian's AI Agent Protocol
Cato Networks researchers demonstrated an attack leveraging Atlassian’s AI agent-enabling server
Alleged Ryuk Initial Access Broker Extradited to the US
An alleged former member of the infamous Ryuk ransomware group has been extradited to the US
Israeli Hacktivists Steal and Burn $90m+ from Iranian Crypo Biz
Pro-Israel Predatory Sparrow Group steals $90m in crypto from Iranian exchange Nobitex
Critical Linux Flaws Discovered Allowing Root Access Exploits
Two critical Linux flaws allow unprivileged users to gain root access, affecting major distributions
AI Now Generates Majority of Spam and Malicious Emails
Barracuda observed a big spike in spam emails generated using AI tools, making up the majority detected in April 2025
GodFather Malware Upgraded to Hijack Legitimate Mobile Apps
Upgraded GodFather banking malware now uses on-device virtualization to hijack apps, enabling real-time fraud
ClickFix Helps Infostealers Use MHSTA for Defense Evasion
ClickFix techniques are enabling threat actors to bypass defenses using tools like MSHTA, says ReliaQuest
UK Government Publishes Plan to Boost Cyber Sector Growth
The new Cyber Growth Action Plan aims to support the UK’s cyber industry, including the development of innovative new technologies and startups
Ransomware Group Qilin Offers Legal Counsel to Affiliates
The group positions itself “not just as a ransomware group, but as a full-service cybercrime platform”, according to Cybereason
Paddle Pays $5m to Settle Tech Support Scam Allegations
Payment processor Paddle has agreed to settle with the FTC over allegations related to tech support scams
Hacklink Marketplace Fuels Surge in Covert SEO Poisoning Attacks
New SEO poisoning attacks identified, using Hacklink to hijack search rankings and inject malicious links into sites
UK ICO Fines 23andMe £2.3m for Data Protection Failings
23andMe has been fined over £2m by the UK ICO for failing to adequately protect genetic data
Taiwan Hit by Sophisticated Phishing Campaign
Phishing campaign targeting Taiwan has been identified, using tax-themed emails and malware like Winos and HoldingHands
Chained Flaws in Enterprise CMS Provider Sitecore Could Allow Remote Code Execution
WatchTowr has found three vulnerabilities in the Sitecore Experience Platform, used by HSBC and L’Oréal
