Information Security Magazine

Instead of relying on more traditional methods, the backdoor exploits OpenAI’s Assistants API for command-and-control communications

Scattered Spider, ShinyHunters and LAPSUS$ have formed an enhanced coordinated threat network for extortion efforts

DragonForce, a ransomware group using Conti’s code, has adopted a cartel model to expand and recruit

ReliaQuest data reveals identity issues were responsible for 44% of cloud security alerts in Q3

Digital thieves have got away with over $120m stolen from popular decentralized finance protocol Balancer

CISA and NSA have released a blueprint to enhance Microsoft Exchange Server security against cyber-attacks

Flaws in Windows Graphics Device Interface (GDI) have been identified that allow remote code execution and information disclosure

Proofpoint researchers have observed recent hacking campaigns supporting cargo theft

Ukrainian national Oleksii Oleksiyovych Lytvynenko has appeared in a US court in connection with Conti ransomware charges

CrowdStrike data reveals a 13% annual increase in the number of European ransomware victims in 2025

Over 10.5 million individuals were impacted by a widespread 2024 data breach at Conduent Business Services, with customer notifications issued in October 2025

A new UNC6384 campaign highlights the threat actor’s growing sophistication and geographic expansion

Clearview AI faces a criminal complaint in Austria for allegedly ignoring EU data protection rulings

The King Addons for Elementor plugin contains two flaws allowing unauthenticated file uploads and privilege escalation

Cybercriminals are abusing AdaptixC2, a legitimate emulation framework, in ransomware campaigns

Over a quarter of employees work with AI tools that had not been authorized by their company

A new dark web analysis reveals more than 300 million records have been breached in 2025 to date

The former general manager of defense contractor Trenchant has admitted selling zero-days to Russian broker

Google Chrome will enhance security with enforced HTTPS connections from version 154, set for release in October 2026

The ongoing ‘PhantomRaven’ malicious campaign has infected 126 npm packages to date, representing 86,000 downloads