Information Security Magazine

A new probe, opened two months after a €530m fine to TikTok, will investigate the tech giant’s storage of EU users’ data in China

The NCA has arrested four individuals on suspicion of involvement in the attacks on M&S, Co-op and Harrods

Personal data of Nippon Steel Solutions’ customers, partners and employees may be compromised

The UK ICO has welcomed a ruling in its favor in a long-running battle to issue a fine to TikTok

Qantas says nearly six million passengers were impacted by a recent data breach

Nova Scotia Power revealed that a ransomware attack has prevented meters from sending energy usage data to its systems, impacting billing

CVE-2025-47981 has the “unfortunate hallmarks of becoming a significant problem,” said WatchTowr’s CEO

The US allege that the hacker stole critical COVID-19 research from universities at the behest of the Chinese government

The addition of a backdoor to the Atomic macOS Stealer marks a pivotal shift in one of the most active macOS threats, said Moonlock

M&S chairman Archie Norman provided more insights into the April ransomware attack, but did not confirm whether a payment was made to the attackers

Researchers from Koi Security have detected 18 malicious Chrome and Edge extensions masquerading as benign productivity and entertainment tools

Check Point discovered around 500 suspected Scattered Spider phishing domains, suggesting the group is preparing to expand its targeting

Sonatype’s latest Open Source Malware Index report has identified more than 16,000 malicious open source packages, representing a 188% annual increase

The company behind AV/EDR evasion tool Shellter has confirmed the product is being used by threat actors

China’s Hikvision vows legal battle after Canada bans its operations, citing national security concerns

Trend Micro has observed the Bert ransomware group in operation since April 2025, with confirmed victims in sectors including healthcare, technology and event services

Iran-aligned BladedFeline group has been observed targeting the government of Iraq and KRG with advanced malware

Vulnerability research company WatchTowr published a detection analysis for the Citrix Blled 2 flaw

Cybersecurity researchers have observed a 156% increase in credential theft incidents between 2024 and Q1 2025

Qantas said it is currently validating the contact, and has informed law enforcement