Information Security Magazine

Image-sharing platform Imgur has blocked its services within the UK, following a regulatory notice from the ICO

New smishing attacks exploit Milesight routers to send phishing texts targeting Belgian users

New Android RAT Klopatra is targeting financial institutions using advanced evasion techniques

The Trump administration wants CISA to transition to a “new model” for supporting local government agencies’ cyber strategy

Tenable researchers have discovered three vulnerabilities in Google’s Gemini GenAI tool

Japanese brewery giant Asahi revealed that a cyber-attack had caused a “system failure”, with order and shipment operations suspended in Japan

Most UK cybersecurity professionals tell CIISec that their budgets are stagnating

While the exact suspicion was yet to be revealed it is linked to "foreign interference"

Microsoft Threat Intelligence stopped an AI-driven credential phishing campaign using SVG files disguised as PDFs

The Five Eyes countries, Germany and the Netherlands are launching a standard for managing OT security

Recruitment and retention remain a significant challenge for security teams, amid growing pressures on cyber professionals

Akira ransomware attacks on SonicWall SSL VPN appliances are bypassing its MFA for rapid deployment

Department store Harrods has notified e-commerce customers of a major data breach

The Singapore police said Facebook is the top platform for online scams in the country

An attack campaign has been identified which exploits vulnerabilities in Cisco Adaptive Security Appliance software

The effort, named Operation Contender 3.0, led to the arrest of 260 suspected cybercriminals

JLR said it is in a position to start clearing its backlog of payments for suppliers, while its parts logistics center is returning to full operations

Trend Micro highlighted the new LockBit version’s improved technical improvements and cross-platform functionality compared to previous iterations

Critical flaw ForcedLeak in Salesforce's AgentForce allows CRM data theft via prompt injection

The security researchers who discovered the malicious npm package called it the “first malicious MCP in the wild”