Information Security Magazine

Claroty revealed that 89% of healthcare organizations use the top 1% of riskiest Internet-of-Medical-Things (IoMT) devices

Expert speakers discussed the impact of reported cutbacks to CISA on the ability of local officials to protect against surging cyber-attacks on US election infrastructure

A PhaaS platform, dubbed 'Morphing Meerkat,' uses DNS MX records to spoof over 100 brands and steal credentials, according to Infoblox Threat Intel

Newly identified CoffeeLoader uses multiple evasion techniques and persistence mechanisms to deploy payloads and bypass endpoint security

PJobRAT malware targets Taiwan Android users, stealing data through fake messaging platforms

The ICO’s Deputy Commissioner told Infosecurity that organizations that fail to implement MFA and suffer a breach can expect heavy penalties

Once considered inactive, the Chinese cyber espionage group FamousSparrow has reemerged, targeting organizations across the US, Mexico and Honduras

The UK’s National Crime Agency is warning of a growing cyber and physical threat from homegrown teens

The UK’s National Cyber Security Centre has released new guidance to help domain registrars enhance security

In its 2025 Global Third-Party Breach Report, SecurityScorecard has found that 35.5% of all cyber breaches in 2024 were third-party related, up from 29% in 2023

Threat actors are exploiting cloud platforms like Adobe and Dropbox to evade email gateways and steal credentials

A newly discovered malware campaign uses malicious npm packages to deploy reverse shells, compromising development environments

Standards body ETSI has defined a scheme for key encapsulation mechanisms with access control (KEMAC), enabling quantum-secure encryption

EU security agency ENISA has released a new report outlining the threats and potential mitigations for the space sector

The UK government’s new fraud minister will today announce plans for a newly expanded fraud strategy

McAfee researchers have identified a new wave of Android malware campaigns leveraging .NET MAUI to steal sensitive user information through fake apps

Cybercriminals are increasingly leveraging Atlantis AIO, which automates credential stuffing attacks across more than 140 platforms

NIST has urged more research and emphasis on developing mitigations for attacks on AI and ML systems

Sygnia has uncovered Weaver Ant, a Chinese threat actor that spied on telecommunications networks for years

Kela researchers detect a 200%+ increase in dark web chatter about malicious AI tools