+ GitHub acts on npm security after Shai-Hulud worm attack; Industry groups worry about cyber info sharing; and more
Can't view this message? Click here to view it online.
iTnews

WEEKLY SECURITY WRAP

Tuesday September 30, 2025

Editor's Note


Join us on October 9 at Sofitel Brisbane for the 2025 Digital As Usual: Cyber Security roadshow. This exclusive breakfast event brings together CIOs, CISOs and digital leaders for a morning of insights, networking and discussion. Find out more and register your attendance here. 

 
  Security  

First malicious MCP server for AI found

Simple code change created email harvester.

By Juha Saarinen

 

Latest Security News


GitHub acts on npm security after Shai-Hulud worm attack
  Security  

GitHub acts on npm security after Shai-Hulud worm attack

Enhanced trusted publishing to limit ongoing supply chain attacks.

By Juha Saarinen

 
Industry groups worry about cyber info sharing
  Security  

Industry groups worry about cyber info sharing

As key US law is set to expire.

By AJ Vicens

 
Announcing the 2025 Benchmark Security Awards Finalists
  Security  

Announcing the 2025 Benchmark Security Awards Finalists

Winners announced at gala dinner on November 6th.

By VB Templeman

 
Stealthy, persistent "BRICKSTORM" spying backdoor found in network infrastructure
  Security  

Stealthy, persistent "BRICKSTORM" spying backdoor found in network infrastructure

Range of industry verticals targeted by patient threat actors.

By Juha Saarinen

 
 
 
 
Researchers uncover polished ShadowV2 DDoS-as-a-service cloud botnet
  Security  

Researchers uncover polished ShadowV2 DDoS-as-a-service cloud botnet

Indicates professional cloud development experience.

By Juha Saarinen

 
UK police arrest man over hack that affected European airports
  Security  

UK police arrest man over hack that affected European airports

As recovery efforts continue.

By James Pearson and Muvija M

 
Asahi Group production impacted by cyberattack
  Security  

Asahi Group production impacted by cyberattack

Still checking its 30 plants across Japan.

By Staff Writer

 
US Secret Service seizes New York City SIM farm near UN
  Security  

US Secret Service seizes New York City SIM farm near UN

Nation-state threat actors may be involved.

By Juha Saarinen

 
Jaguar Land Rover cyberattack shutdown to hit four weeks
  Security  

Jaguar Land Rover cyberattack shutdown to hit four weeks

May not have had specific cyber insurance.

By Sarah Young

 
 
 
 

Featured whitepaper


 
 

MOST POPULAR


US Secret Service seizes New York City SIM farm near UN
  Security  

US Secret Service seizes New York City SIM farm near UN

By Juha Saarinen

Jaguar Land Rover cyberattack shutdown to hit four weeks
  Security  

Jaguar Land Rover cyberattack shutdown to hit four weeks

By Sarah Young

Optus firewall upgrade behind 13-hour Triple Zero outage
  Networking  

Optus firewall upgrade behind 13-hour Triple Zero outage

By Ry Crozier

ACMA proposes digital ID for prepaid mobile SIM verification
  Telco/ISP  

ACMA proposes digital ID for prepaid mobile SIM verification

By Eleanor Dickinson

Stealthy, persistent "BRICKSTORM" spying backdoor found in network infrastructure
  Security  

Stealthy, persistent "BRICKSTORM" spying backdoor found in network infrastructure

By Juha Saarinen

 
 
unsubscribe