Information Security Magazine

A critical RCE flaw in React.js, dubbed React2Shell (CVE-2025-55182), has been disclosed with a maximum CVSS score of 10.0, posing severe risks for server-side implementations

CrowdStrike warned that Warp Panda, a China-linked cyber-espionage group, is targeting US organizations to steal sensitive data and support Beijing’s strategic interests

The French museum is planning to revamp its safety and security systems following a high-profile burglary in October

Data leaks have shed a new light on Intellexa’s flagship spyware infrastructure and attack vectors

Cybersecurity agencies have issued guidance for securely integrating AI into OT systems

UK’s NCSC and Canada’s CCCS release a joint report on content provenance, urging organizations to strengthen digital trust and combat AI-driven misinformation

The GhostFrame phishing framework, using stealthy iframes, was linked to over 1 million attacks

ISC2 report reveals 59% of global organizations have critical or significant skills shortages

The Information Commissioner’s Office has chosen only to reprimand the Post Office after a 2024 breach

A fresh wave of spear-phishing linked to the Russia-based Star Blizzard group has been detected by Sekoia

A new cyber defense service has prevented almost one billion early-stage cyber-attacks in the past year, British Security Minister claims

A critical vulnerability in Yearn Finance's yETH pool allowed an attacker to steal around $9m

The UK government’s proposed ransomware payment ban for public sector and critical infrastructure will come with national security exemptions

A new WEF report reveals that AI-powered threats like disinformation are among executives’ biggest concerns

The Pall Mall Process begins outreach to define guidelines for private commercial intrusion industry

3 critical zero-day flaws in PickleScan, affecting Python and PyTorch, allowed undetected attacks

Infected 4.3 million Chrome and Edge users via extensions; ShadyPanda exploited browser marketplaces

Google said it found indications that two newly identified vulnerabilities affecting Android “may be under limited, targeted exploitation”

The UK Information Commissioner’s Office has launched an investigation into the mobile gaming sector

New IO study claims 88% of US and UK firms are concerned about state-sponsored cyber-attacks