Information Security Magazine

Almost all organizations impersonated by Chinese phishing platforms are non-Chinese entities, suggesting operators deliberately avoid domestic targets

BTMOB Android RAT sold as a service with a no-code builder for fast, regional phishing lures

CERT-In urges 12-hour patching of exposed flaws as AI compresses exploitation timelines

Iran's Nimbus Manticore pushes AI-built MiniFast backdoor via phishing and SEO poisoning

The Kali365 phishing-as-a-service platform lowers the barrier of entry for cybercriminals, said the FBI

From fake F1 streams to counterfeit merch, fraudsters are exploiting fans online and the Bitdefender Cybersecurity Grand Prix Fan Threat Index details how

The infostealer payload in this campaign collect a vast amount of data, from collaboration authentication keys to cryptocurrency wallets

Total figure for fraudulent transactions Apple has blocked since 2020 now stands at over $11bn

First VPN, a service used by ransomware actors and fraudsters, was dismantled by Europol

A threat actor compromised an Nx developer and posed as a legitimate maintainer to publish a malicious extension on Visual Studio Marketplace

AI risks threaten to permeate supply chains through unvetted code and unaudited suppliers

Qualys finds nine-year-old Linux ptrace flaw exposing SSH keys and password hashes locally

Grafana Labs has confirmed a recent data breach was caused by the TanStack supply chain attack

Premium Deception campaign uses 250 Android apps to silently sign victims up to paid services

Mini Shai-Hulud worm hits Alibaba AntV ecosystem in largest npm supply chain wave to date

China-linked Webworm APT expands beyond Asia, targeting European government organizations and refining its cyber espionage tactics, according to ESET research

The prolific threat group TeamPCP has claimed a hack into GitHub’s internal repositories

Barracuda reveals new CypherLoc scareware has featured in nearly three million attacks

Verizon DBIR finds 31% of data breaches began with software flaws last year

Microsoft’s Digital Crimes Unit has taken down the infrastructure of Fox Tempest, a prolific cybercrime-enabling threat group