Chang Dong-woo reports: KT Corp., South Korea’s second-largest mobile carrier, was found to have concealed critical malware infections and failed to report the security breaches that led to a recent hacking and data theft incident, a government-led investigation revealed Thursday. The joint government-private investigation team, which is examining KT’s recent cyberattack linked to illegal micro…
Cybersecurity researchers have discovered a set of seven npm packages published by a single threat actor that leverages a cloaking service called Adspect to differentiate between real victims and security researchers to ultimately redirect them to sketchy crypto-themed sites. The malicious npm packages, published by a threat actor named “dino_reborn” between September and November 2025,…
The deal includes certain Phylum assets, including its malicious package analysis, detection, and mitigation technology. The post Veracode Targets Malicious Code Threats with Phylum Acquisition appeared first on SecurityWeek.
Daniel Lopez reports: HealthEC LCC and its clients finally reached a settlement to resolve a class action data breach lawsuit involving a hacking incident and data breach in 2023. Analytics software vendor HealthEC, based in New Jersey, provides healthcare companies with a platform to determine high-risk patients and limitations to optimal healthcare. From July 14, 2023…
The threat actor known as Space Pirates has been linked to a malicious campaign targeting Russian information technology (IT) organizations with a previously undocumented malware called LuckyStrike Agent. The activity was detected in November 2024 by Solar, the cybersecurity arm of Russian state-owned telecom company Rostelecom. It’s tracking the activity under the name Erudite Mogwai….
Cybersecurity never slows down. Every week brings new threats, new vulnerabilities, and new lessons for defenders. For security and IT teams, the challenge is not just keeping up with the news—it’s knowing which risks matter most right now. That’s what this digest is here for: a clear, simple briefing to help you focus where it…
Islam Uddin reports: Japanese authorities have issued an arrest warrant against a teenager suspected of a cyberattack while using artificial intelligence, local media reported on Thursday. The arrest warrant has been issued for a 17-year-old boy on suspicion of carrying out a cyberattack on a major internet cafe operator using a program generated by artificial……
