Information Security Magazine

The legislation mandates a probe into foreign-made routers to identify risks for US national security

JPMorgan’s CISO has argued that SaaS apps represent a growing risk to businesses, “quietly enabling cyber attackers”

The French government has criticized Russia’s APT28 group for attacking 12 entities in a long-running espionage campaign

New WordPress malware disguised as a plugin gives attackers persistent access and injects malicious code enabling administrative control

A new ransomware campaign is automating LockBit deployment via the Phorpiex botnet, according to Cybereason

Administrators of a Telegram channel named CoderSharp have been advertising Gremlin Stealer since March 2025

Dvuln researchers highlighted the growing impact of infostealers on the cybercrime landscape, enabling attackers to bypass traditional defenses

Google claims 19% more zero-day bugs were exploited in 2024 than 2022 as threat actors focus on security products

Europol has launched a new initiative designed to combat recruitment of youngsters into violent organized crime groups

Members of the World Uyghur Congress living in exile were targeted with a spear phishing campaign deploying surveillance malware, according to the Citizen Lab

50% of mobile devices run outdated operating systems, increasing vulnerability to cyber-attacks, according to the latest report from Zimperium

According to the 2025 Global Threat Landscape Report from FortiGuard, threat actors are executing 36,000 scans per second

An ISACA survey found that just 5% of organizations have a defined strategy to defend against quantum-enabled threats

The US authorities have asked the public to help them unmask China’s Salt Typhoon threat actors

The UK government says it will ban the possession or supply of SIM farms, in a fraud crackdown

Increased law enforcement pressure has forced ransomware groups like DragonForce and Anubis to move away from traditional affiliate models

A maximum severity flaw affecting SAP NetWeaver has been exploited by threat actors

British retailer M&S continues to tackle a cyber incident with online orders now paused for customers

Researchers have found a Chrome extension that can act on the user’s behalf by using a popular AI agent orchestration protocol

Panaseer's latest cybersecurity study revealed that US companies have paid $155M in data breach lawsuit settlements over just six months