Information Security Magazine

Heathrow, Brussels, Dublin and Berlin airports are among those disrupted by a cyber-attack on Collins Aerospace

ESET found that the FSB-affiliated groups, Gamaredon and Turla, are sharing tools to help conduct espionage attacks against Ukrainian organizations

Researchers at Radware found a zero-click flaw in ChatGPT Deep Research agent when connected to Gmail and browsing

Trend Micro said the use of AI platforms to create and host fake CAPTCHA pages helps attackers develop more sophisticated phishing campaigns at scale and speed

One of the teenage suspects is accused of involvement in at least 120 attacks, resulting in $115m in ransom payments

A breach at the New York Blood Center resulted in theft of data for 194,000 people, including SSNs, IDs, bank and health information

One third of Android and over half iOS apps shown to be leaking insecure APIs and hardcoded secrets

SonicWall said that threat actors accessed firewall preference files stored in the cloud for around 5% of its firewall install base

Insight Partners has released more details of a 2024 ransomware breach impacting thousands of individuals

The UK’s National Crime Agency is the new chair of the Five Eyes Law Enforcement Group

FileFix campaign hides PowerShell script and encrypted EXEs in JPGs via multilingual phishing

A trio of critical vulnerabilities in the Chaos-Mesh platform allow in-cluster attackers to run arbitrary code, even in default configuration

An employee of outsourcing firm TaskUs allegedly sold data stolen during the Coinbase data breach to hackers for $200 per record before her arrest in January 2025

Microsoft revealed it has seized 338 websites associated with RaccoonO365, a phishing kit which has stolen at least 5000 Microsoft credentials worldwide

New IO research reveals a surge in AI attacks attempting to corrupt underlying training data

A secret-stealing worm is spreading fast across the npm ecosystem, experts have warned

Fifteen ransomware groups have claimed shutdown on BreachForums; experts warn of rebrands and copycats

The attack, which is linked to ShinyHunters, has reportedly compromised data relating to 7.4 million unique email addresses

AI-native Villager, which automates Kali and DeepSeek penetration tests, has reached 11,000 PyPI downloads fueling dual-use threat

Reports of email phishing attempts impersonating the UK’s HM Revenue & Customs plummeted in the first half of 2025