Information Security Magazine

DragonForce ransomware attacks Saudi firms stealing 6TB data, escalating cyber threats in real estate

Winos 4.0 malware uses phishing emails to target organizations in Taiwan, Fortinet experts warn

Veracode found a 47% increase in the average time taken to patch software vulnerabilities, driven by growing reliance on third-party code

In its 2025 Global Threat Report, CrowdStrike observed a significant escalation in Chinese cyber espionage activities

OpenSSF has released new baseline security best practices to improve open source software quality

FBI confirms North Korea’s Lazarus Group responsible for Bybit crypto heist

99% of organizations report API-related security issues, highlighting risks from API growth

DISA Global Solutions confirms data breach affecting 3.3M people, exposing sensitive personal info

Meredith Whittaker, Signal's CEO, has threatened to pull the company out of Sweden if a proposed government bill requiring encryption backdoors becomes law

HaveIBeenPwned has added over 500 million new passwords and email addresses lifted via infostealers

IVF clinic Genea has confirmed that stolen patient data has been published online, with the Termite ransomware group appearing to be the perpetrators

Europe is hit hard as geopolitics drives increase in state-backed APT and hacktivist activity

61% of hackers use new exploit code within 48 hours, ransomware remains top threat in 2024

Ghostwriter cyber-attack targets Ukrainian, Belarusian opposition using weaponized Excel documents

Forescout observed the recently identified Chinese hacking group using medical imaging software applications to deliver malware

ReliaQuest claims 80% of ransomware attacks now focus solely on exfiltrating data as it is faster

SecurityScorecard revealed that the large-scale password spraying campaign can bypass MFA and security access policies by utilizing Non-interactive sign-ins

New Hiya data finds 26% of UK consumers encountered a deepfake scam call in Q4 2024

Elementor plugin flaw puts 2m WordPress websites at risk, allowing XSS attacks via malicious scripts

Michigan man indicted for dark web credential fraud, purchased 2,500 logins from Genesis Market