Information Security Magazine

Explore Infosecurity Magazine’s most-read cybersecurity stories of 2025, from major vendor shake-ups and zero-day exploits to AI-driven threats and supply chain attacks

The SEC has charged several crypto platforms and investment clubs for defrauding US investors of more than $14m

A coordinated wave of fake online job ads targeting the Middle East and North Africa has been uncovered, exploiting remote work trends

NIST and MITRE are collaboratively launching two centers to advance AI security for US manufacturing and critical infrastructure

ServiceNow is set to acquire Armis for $7.75bn in a cash-only deal expected to close in the second half of 2026

French postal service warns of “major network incident” just before Christmas

A newly discovered macOS malware mimics legitimate apps code-signed and notarized by Apple

A University of Phoenix data breach affecting nearly 3.5 million individuals has been claimed by the Clop ransomware collective

Infosecurity has selected some of the key ransomware statistics for 2025

Nissan has revealed that over 20,000 customers have had personal information compromised in a third-party data breach

Operational Sentinel helps to crack down on cybercrime across 19 African countries in a month-long campaign

NordVPN has warned that malicious postal service websites have surged by 86% over the past month, targeting holiday delivery tracking

Open-source server monitoring tool, Nezha, is being exploited by attackers for remote system control

DXS International, an official partner of NHS England, said the breach has not affected its operations

A Ukrainian man has pleaded guilty to charges connecting him to Nefilim ransomware attacks

Fortra has uncovered a prolific BEC group dubbed “Scripted Sparrow” spanning three continents and at least five countries

The Danish intelligence service believes some pro-Russian hacktivist groups have links with the Kremlin

The US has charged 54 individuals in a massive ATM jackpotting conspiracy linked to Venezuelan crime syndicate Tren de Aragua, accused of stealing millions

A 39-year-old Russian national is accused of working with cybercriminals to convert criminal proceeds from cryptocurrency into various cash currencies

A surge in phishing attacks exploiting Microsoft’s OAuth device code flow has been identified by Proofpoint