Information Security Magazine

CISA released initial list of PQC-capable hardware and software to guide companies amid quantum threats

Fortra researchers have discovered a new SEO poisoning operation known as “HaxorSEO”

The US law firm Hagens Berman will lead a class action lawsuit against Coupang over security failures that led to a June 2025 data breach

Threat actors posing as IT support teams use phishing kits to generate fake login sites in real-time to trick victims into handing over credentials

A destructive cyber attack targeting Poland’s energy sector has been linked to Russian APT group Sandworm

Open letter by NHS technology leaders outlines plans to identify risks to software supply chain security across health and social care system

Under Armour said there is no evidence at this point to suggest the incident affected systems used to process payments or store customer passwords

Critical vulnerability in Appsmith allows account takeover via flawed password reset process

Security flaw in RealHomes CRM plugin allowed file uploads; patches released for 30,000+ sites

VulnCheck analysts found that vulnerabilities exploited before being publicly disclosed rose from 23.6% in 2024 to 28.96% in 2025

Phoney email alerts suggest users need to backup their LastPass accounts within 24 hours. LastPass says it would never require this action from users

UK Executives Warn They May Not Survive a Major Cyber-Attack, Vodafone Survey Finds

DLA Piper finds 22% increase in breached firms notifying European GDPR regulators

Cyber risks for the Milano-Cortina 2026 Winter Games include phishing and spoofed websites as key threat vectors

Loan phishing operation in Peru is stealing card info by impersonating financial institutions

Sophisticated malware previously thought to be the work of a well-resourced cyber-crime group was built by one person - with the aid of AI tools

The EU’s Cybersecurity Act 2.0 will aim to address some of the challenges of the current CSA, including the slow rollout of certification schemes

A new service, the Global Cybersecurity Vulnerability Enumeration (GCVE), offers an alternative to the US-led CVE

City of London Police has launched the UK’s national Report Fraud service

Gartner predicts 50% of organizations will adopt zero trust data governance by 2028