Information Security Magazine

With Android Scam Detection for messages and calls, Google wants to push scam detection further than traditional spam detection

ISACA identified factors such as heavy workload and long hours as the primary causes of stress, while there has been high turnover of IT professionals in the past two years

New SANS Institute research finds that 50% of global organizations were hit by an OT security incident in the past year

GuidePoint Security has received reports of multiple organizations receiving ransom letters in the mail

Private 5G networks face security risks amid AI adoption and a lack of specialized expertise

A cyber-espionage campaign targeting UAE aviation and transport has been identified by researchers, using customized lures to deploy Sosano malware

Cloud software firm VMware has issued a critical security advisory, detailing three zero-day vulnerabilities being actively exploited in the wild

Nisos has found six personas leveraging new and existing GitHub accounts to get developer jobs in Japan and the US

Fastly found that organizations have introduced changes such as increasing CISO participation in strategic decisions in response to growing personal liability risks

CISA has added five more CVEs into its known exploited vulnerabilities catalog

Sumsub research finds European iGaming market is losing billions to fraud each year

Phishing attack exploits social engineering techniques alongside Microsoft Teams and remote access software to deploy BackConnect malware

The US Cybersecurity and Infrastructure Security Agency confirmed it will keep defending against Russian cyber threats to US critical infrastructure

A new phishing campaign has been identified using Havoc to control infected systems, leveraging SharePoint and Microsoft Graph API

Telecoms provider Vodafone has developed the new proof of concept with IBM, as it seeks to implement post-quantum cryptography ahead of anticipated quantum-based attacks

The Information Commissioner’s Office is now investigating how TikTok uses 13–17-year-olds’ personal information

Threat actors are exploiting a zero-day bug in Paragon Partition Manager's BioNTdrv.sys driver during ransomware attacks

Data from Resilience found that third-party attacks made up 23% of material cyber insurance claims in 2024, with ransomware attacks targeting vendors a major driver

In February 2025, Sophos completed the Secureworks deal and SolarWinds went private

Four in ten flaws exploited by threat actors in 2024 were from 2020 or earlier, with some dating back to the 1990s, according to a GreyNoise report