Information Security Magazine

New NCSC guidance sets out a three-phase migration to post-quantum cryptography, designed to ensure all systems are protected from quantum attacks by 2035

Newly discovered vulnerability ZDI-CAN-25373 takes advantage of Windows shortcuts has been exploited by 11 state-sponsored groups since 2017

A surge in browser-based phishing attacks has been recorded over the past year, with a 140% increase compared to 2023 according to Menlo Security

World-renowned physicist, Professor Brian Cox, will headline day one of Infosecurity Europe, analyzing the science behind quantum computing and the challenges it brings

The US Cybersecurity and Infrastructure Security Agency added flaws in Fortinet and a popular GitHub Action to its Known Exploited Vulnerabilities catalog

Security firm Barracuda said it has detected more than a million phishing-as-a-service (PhaaS) attacks in 2025

Gartner has claimed that AI agents will reduce the time it takes to exploit exposed accounts

Europol’s annual report warns of a growing threat from aligned state and cybercrime groups, enabled by AI technologies

A Cato Networks researcher discovered a new LLM jailbreaking technique enabling the creation of password-stealing malware

Report reveals common password use in RDP attacks, highlighting weak credentials remain a major security flaw

Leaked chat logs have exposed connections between the BlackBasta ransomware group and Russian authorities, according to new analysis by Trellix

Google is set to acquire Wiz, a cloud security platform founded in 2020, for $32bn in an all-cash deal

Flashpoint data points to a surge in data breaches fueled by compromised credentials, ransomware and exploits

Bitdefender said the malicious app campaign has resulted in more than 60 million downloads of malicious apps from the Google Play Store

Bitsight reveals that UK companies are more exposed to cyber risk than global peers via their digital supply chains

Cloudflare introduces E2E post-quantum cryptography, enhancing security against quantum threats

From March 17, Ofcom will enforce rules requiring tech platforms operating in the UK to remove illegal content, including child abuse material

DarkAtlas researchers have uncovered a direct link between BlackLock and the Eldorado ransomware group, confirming a rebranded identity of the notorious threat actor

A bipartisan delegation of US Congresspeople and Senators has asked the hearing between the UK government and Apple to be made public

Action Fraud reported a spike in social media and email account hacks in 2024, resulting in losses of nearly £1m