Information Security Magazine

BitSight research has revealed how threat actors exploit calendar subscriptions to deliver phishing links, malware and social engineering attacks through hijacked domains

Darktrace observed a 620% spike in Black Friday-themed phishing in the weeks leading up to the 2025 edition of the sale day

The personal data of over two million amateur football players registered in France could be exposed

Hackers have been hijacking US radio equipment to broadcast false emergency alerts, prompting FCC warnings

A new Bloody Wolf campaign exploits legitimate remote-administration software for cyber-attacks on government targets in Central Asia

Almost two million people may have seen their personal data exposed following a large-scale cyberattack that hit Asahi in September 2025

The breach may have exposed OpenAI API customers’ data

Analysis of ICO records shows no surge in breaches during Q4 2024 with no seasonal spike in reported incidents

New phishing domains point to a campaign from the notorious Scattered Lapsus$ Hunters collective

Shona Lester, head of the Cyber Security and Resilience Bill team within the UK government, outlined some of the provisions that should be included in the future law

A cyber-attack claimed to be the resposibility of INC Ransom group and targeting the OnSolve CodeRED platform has disrupted emergency notification and exposed user data across the US

A new report from the UK Business and Trade Committee has called for accountability of software providers for cyber flaws amid rising attack costs

The FBI reports over $262m in losses from account takeover schemes since January 2025, as cybercriminals impersonate financial institutions to steal data and funds

The CEO of the customer support platform said “a handful of customers” saw their data exposed after the breach

A new vulnerability dubbed “HashJack” could enable attackers to booby trap websites when they interact with AI browsers

At least three London local authorities are dealing with a major cybersecurity incident

A cluster of fraudulent domains impersonating Egyptian providers have been identified linked to Smishing Triad operations

A new macOS malware chain using staged scripts and a Go-based backdoor has been attributed to FlexibleFerret, designed to steal credentials and maintain system access

In its latest annual identity fraud report, Sumsub observed a “sophistication shift” in global fraud trends

MPs in the UK want a new economic security regime to tackle cyber and related threats