Information Security Magazine

CISA recommends immediate action to address malware variant RESURGE exploiting Ivanti vulnerability CVE-2025-0282

New “ClickFake Interview” campaign attributed to the Lazarus Group targets crypto professionals with fake job offers

The funding will go to several projects within the Digital Europe Programme (DIGITAL) work program for 2025 to 2027

The UK’s National Cyber Security Agency has called on Next.js users to patch CVE-2025-29927

The DoJ has managed to recoup over $8m from scammers, stolen in romance baiting schemes

Forescout researchers found multiple vulnerabilities in leading solar power system manufacturers, which could be exploited to cause emergencies and blackouts

Claroty revealed that 89% of healthcare organizations use the top 1% of riskiest Internet-of-Medical-Things (IoMT) devices

Expert speakers discussed the impact of reported cutbacks to CISA on the ability of local officials to protect against surging cyber-attacks on US election infrastructure

A PhaaS platform, dubbed 'Morphing Meerkat,' uses DNS MX records to spoof over 100 brands and steal credentials, according to Infoblox Threat Intel

Newly identified CoffeeLoader uses multiple evasion techniques and persistence mechanisms to deploy payloads and bypass endpoint security

PJobRAT malware targets Taiwan Android users, stealing data through fake messaging platforms

The ICO’s Deputy Commissioner told Infosecurity that organizations that fail to implement MFA and suffer a breach can expect heavy penalties

Once considered inactive, the Chinese cyber espionage group FamousSparrow has reemerged, targeting organizations across the US, Mexico and Honduras

The UK’s National Crime Agency is warning of a growing cyber and physical threat from homegrown teens

The UK’s National Cyber Security Centre has released new guidance to help domain registrars enhance security

In its 2025 Global Third-Party Breach Report, SecurityScorecard has found that 35.5% of all cyber breaches in 2024 were third-party related, up from 29% in 2023

Threat actors are exploiting cloud platforms like Adobe and Dropbox to evade email gateways and steal credentials

A newly discovered malware campaign uses malicious npm packages to deploy reverse shells, compromising development environments

Standards body ETSI has defined a scheme for key encapsulation mechanisms with access control (KEMAC), enabling quantum-secure encryption

EU security agency ENISA has released a new report outlining the threats and potential mitigations for the space sector