Information Security Magazine

The GoBruteforcer botnet has been observed targeting exposed Linux servers on services like FTP and MySQL

Researchers at Radware discovered new prompt injection attacks in ChatGPT agentic features

A long-term cyber-espionage campaign targeting South Asia's telecom firms has been linked to UAT-7290

Misconfigurations abused to make phishing emails look like they come from within the organization

Absolute Security claims that full recovery from endpoint-related downtime can take up to a fortnight for most organizations

The Trump administration decided to leave 66 international organizations, including the GFCE and the European Centre of Excellence for Countering Hybrid Threats

A newly discovered vulnerability in authentication platform n8n could allow threat actors to take control of n8n servers

Malicious Windows packer named pkr_mtsi used as a flexible malware loader in malvertising campaigns

New Android malware enables unauthorized tap-to-pay transactions without physical access to bank cards

Taiwan recorded an average of 2.63 million cyber intrusion attempts to it critical infrastructure per day coming from China in 2025

Lack of visibility and governance around employees using generative AI is resulting in rise in data security risks

A hacking collective claims it has disconnected customers of US ISP Brightspeed

Threat actor “Zestix” was able to breach around 50 firms using infostealers because they lacked multi-factor authentication

Multi-stage malware campaign targets hospitality organizations using social engineering and abuse of MSBuild.exe

A high-severity security flaw in Open WebUI Direct Connections risks account takeover and server compromises

UK government’s new Cyber Action plan looks to provide more ‘hands-on’ support for protecting against and responding to security incidents

JLR’s wholesale sales plunged 43% and retail drops 25% in the third quarter of 2025 following the 2025 cyber-attack

Ilya Lichtenstein, convicted for the 2016 Bitfinex hack, has been released early from prison to home confinement

A new Python-based malware called VVS stealer has been identified, targeting Discord users with stealthy techniques to steal data

A breach affecting Manage My Health could have exposed sensitive data for up to 120,000 New Zealand patients