Information Security Magazine

Armis survey reveals that the growing threat of nation-state cyber-attacks is disrupting digital transformation

The US Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2025-31161 to its Known Exploited Vulnerabilities (KEV) catalog

The British government has launched a new code of practice designed to boost corporate cyber governance

Security researchers from ExtensionTotal have found nine malicious extensions in Visual Studio Code, Microsoft’s lightweight source-code editor

A rise in smishing campaigns impersonating toll service providers has been linked to China’s Smishing Triad

Xanthorox AI, a self-contained system for offensive cyber operations, has emerged on darknet forums

Vodafone Business has urged the UK government to implement policy changes, including improvements to the Cyber Essentials scheme and tax incentives for cybersecurity

Osney Capital’s new fund is the first to focus exclusively on early-stage UK cybersecurity

Cyber-attacks on Australian superannuation funds leave some savers out of pocket

A joint cybersecurity advisory warns organizations globally about the defense gap in detecting and blocking fast flux techniques, which are exploited for malicious activities

The threat actors initially attempted to compromise projects associated with the Coinbase cryptocurrency exchange, said Palo Alto Networks

Mandiant warned that Chinese espionage actor UNC5221 is actively exploiting a critical Ivanti vulnerability, which can lead to remote code execution

An international law enforcement operation has shut down Kidflix, a platform for child sexual exploitation with 1.8m registered users

A critical authentication bypass flaw in CrushFTP is under active exploitation following a mishandled disclosure process

The cybercriminal uses the service of Proton66, an infamous Russian-based bulletproof hosting provider, to deploy malware

Highline Public Schools revealed that sensitive personal, financial and medical data was accessed by ransomware attackers during the September 2024 incident

Semperis claims 62% of water and electricity providers were hit by cyber-attacks in the past year

BforeAI researchers discover 596 suspicious Bybit-themed domains designed to defraud visitors

A novel skimming attack has been observed by Jscramber, using the Stripe API to steal payment information by injecting malicious scripts into pages

A cyber threat actor has claimed to have leaked 144GB of data from Royal Mail users