Information Security Magazine

Vietnamese phishing campaign evolves from Python infostealer to PureRAT trojan

The hackers are likely trying to collect data to feed the development of zero-day exploits, said Google researchers

The UK retailer estimated the losses from temporarily shutting down some of its systems to contain the threat

SecurityScorecard report finds 53% of Indian vendors suffered third-party breaches in the past year

The UK’s National Crime Agency has arrested a suspect in connection with a ransomware attack on Collins Aerospace

Malicious npm package Fezbox uses QR codes to steal credentials from browser cookies

New campaign merges traditional malware with DevOps tools, using GitHub CodeSpaces for DDoS attacks

Boyd Gaming Corporation has disclosed that an unauthorized actor removed data from its systems, including information about employees and other individuals

The equipment could be used to disable cell phone towers and conduct denial-of-services attacks across New York City

An unnamed federal agency was hacked last year after threat actors exploited a critical GeoServer vulnerability

Police have arrested five suspects linked to a €100m cryptocurrency fraud ring

Nimbus Manticore intensified European cyber-espionage, targeting aerospace, telecom, defense sectors

Gartner research found that 62% of organizations have experienced a deepfake attack in the past 12 months

Rising hardware, API, and network flaws expose organizations to new risks in an AI-driven landscape

ReliaQuest report claims time from initial access to lateral movement has shrunk to just 18 minutes

Stellantis confirmed that customers’ personal information was potentially exposed

UK carmaker Jaguar Land Rover has said production will remain shuttered until October 1

Experts at a Gartner event highlighted areas of focus in identity, processes and third-party risk management to tackle the novel tactics employed by Scattered Spider

MITRE said it understands why Microsoft, SentinelOne and Palo Alto pulled out of its 2025 of ATT&CK Evaluations test – and promises to do better next year

The FBI has warned that adversaries have published fake versions of its cybercrime reporting portal IC3