Information Security Magazine

A joint cybersecurity advisory warns organizations globally about the defense gap in detecting and blocking fast flux techniques, which are exploited for malicious activities

The threat actors initially attempted to compromise projects associated with the Coinbase cryptocurrency exchange, said Palo Alto Networks

Mandiant warned that Chinese espionage actor UNC5221 is actively exploiting a critical Ivanti vulnerability, which can lead to remote code execution

An international law enforcement operation has shut down Kidflix, a platform for child sexual exploitation with 1.8m registered users

A critical authentication bypass flaw in CrushFTP is under active exploitation following a mishandled disclosure process

The cybercriminal uses the service of Proton66, an infamous Russian-based bulletproof hosting provider, to deploy malware

Highline Public Schools revealed that sensitive personal, financial and medical data was accessed by ransomware attackers during the September 2024 incident

Semperis claims 62% of water and electricity providers were hit by cyber-attacks in the past year

BforeAI researchers discover 596 suspicious Bybit-themed domains designed to defraud visitors

A novel skimming attack has been observed by Jscramber, using the Stripe API to steal payment information by injecting malicious scripts into pages

A cyber threat actor has claimed to have leaked 144GB of data from Royal Mail users

Gray bots surge as generative AI scraper activity increases, impacting web applications with millions of requests daily

Hackers stole $1.67bn of cryptocurrencies in the first quarter of 2025, a 303% increase

Google has found a significant increase in North Korean actors attempting to gain employment as IT workers in European companies, leading to data theft and extortion

Gaming community Steam appeared most often in phishing emails and texts detected by Guardio in Q1 2025

The UK’s data protection regulator says it is overwhelmed with complaints from the public

WP Ultimate CSV Importer flaws expose 20,000 websites to attacks enabling attackers to achieve full site compromise

The CERT-UA investigation concluded that the attack’s techniques were “characteristic of Russian intelligence services”

A new attack targeting Microsoft Teams users used vishing, remote access tools and DLL sideloading to deploy a JavaScript backdoor

Google is set to roll out end-to-end encryption for all Gmail users, boosting security, compliance and data sovereignty efforts