Information Security Magazine

HP Wolf has reported the use of multiple, uncommon binaries and novel uses of legitimate image files in recent malicious campaigns

Apple has sent at least four notifications in 2025, according to the French national cybersecurity agency

ICO warned that growing hacks by children into school computer systems is setting them up for “a life of cybercrime”

The US cybersecurity agency called for the CVE program to remain publicly maintained and vendor-neutral while emphasizing the need for broader engagement

A sophisticated fileless malware campaign has been observed using legitimate tools to deliver AsyncRAT executed in memory

Senator Ron Wyden of Oregon has urged the FTC to investigate Microsoft for cybersecurity lapses linked to ransomware attacks on US critical infrastructure

Bitdefender said the sophisticated multi-stage operation allowed attackers to maintain persistent access and steal sensitive data from a Philippines military company

Compromised data includes personal data such as patients’ full names, ages, phone numbers and email addresses

US offers $11m as LockerGoga ransomware suspect becomes one of Europe’s most wanted men

Government-run train operator LNER has revealed details of a supplier data breach

A ransomware attack by KillSec on Brazil software provider MedicSolution threatens healthcare, impacting providers and patients

A flaw in the Cursor extension allows unauthorized code execution when opening repositories in Visual Studio

The vulnerability, dubbed SessionReaper, allows customer account takeover and unauthenticated remote code execution

Sophos found that average ransom demands and payments fell substantially in the education sector in 2025, as recovery time and costs fell

Microsoft has fixed over 80 vulnerabilities including two publicly disclosed zero-days in its latest Patch Tuesday release

Wiz Security warns that a recently discovered supply chain attack campaign targeting npm is far from over

A threat actor accidentally revealed their AI-powered methods by installing Huntress security software

Salty2FA phishing campaign showcases advanced techniques and professionalism of cybercrime operations

What could have been a historic supply chain attack seems to have been averted due to the rapid response of the open source community

ReliaQuest warns that phishing campaigns abusing the Axios user agent have surged 241% in three months