Information Security Magazine

TRM Labs says illegal crypto flows into digital wallets increased to $158bn in 2025

A database featuring 300,000+ users of notorious hacking forum BreachForums has been leaked online

Europol-backed operation targets group behind numerous BEC attacks and romance scams

Researchers at the World Economic Forum have shown that threat actors can use commercial deepfake tools to bypass corporate security protections

Check Point has uncovered a vast, AI-powered scam operation dubbed the “Truman Show”

The FBI says North Korea’s Kimsuky APT group is using QR codes in spear phishing campaigns

The GoBruteforcer botnet has been observed targeting exposed Linux servers on services like FTP and MySQL

Researchers at Radware discovered new prompt injection attacks in ChatGPT agentic features

A long-term cyber-espionage campaign targeting South Asia's telecom firms has been linked to UAT-7290

Misconfigurations abused to make phishing emails look like they come from within the organization

Absolute Security claims that full recovery from endpoint-related downtime can take up to a fortnight for most organizations

The Trump administration decided to leave 66 international organizations, including the GFCE and the European Centre of Excellence for Countering Hybrid Threats

A newly discovered vulnerability in authentication platform n8n could allow threat actors to take control of n8n servers

Malicious Windows packer named pkr_mtsi used as a flexible malware loader in malvertising campaigns

New Android malware enables unauthorized tap-to-pay transactions without physical access to bank cards

Taiwan recorded an average of 2.63 million cyber intrusion attempts to it critical infrastructure per day coming from China in 2025

Lack of visibility and governance around employees using generative AI is resulting in rise in data security risks

A hacking collective claims it has disconnected customers of US ISP Brightspeed

Threat actor “Zestix” was able to breach around 50 firms using infostealers because they lacked multi-factor authentication

Multi-stage malware campaign targets hospitality organizations using social engineering and abuse of MSBuild.exe