Information Security Magazine

A Yubico survey identified a significant gap between awareness and adoption of secure methods of authentication in enterprises

Ethical hackers have already found 32 zero days in various products at Pwn2Own Ireland

A breach of 8.8 million citizens on the Danish Central Register of Persons (CPR) occurred via third-party access

ClickFix sites stage a VBScript payload in the browser cache to bypass the Run dialog's length limit

Nikkei says two employee cloud accounts were accessed, with one used to send 9,000 phishing emails

The IBM subsidiary has also announced its Lightwell Clearinghouse is now available to all customers

Forescout found that just 6% of Internet of Medical Things (IoMT) and 16% of medical OT are capable of supporting post quantum cryptography

ASOS customers have received a seemingly legitimate push notifications claiming the retailer’s IT systems have been breached through a Snowflake breach

Report Fraud says cybercrime revenue stemming from account takeover increased 417% annually

An affiliate of The Gentlemen RaaS group ran a parallel leak site during extortion of two dozen victims

ClingSTUN exploits known IoT flaws and abuses public STUN servers to keep proxy access to devices

Rapid7 has uncovered new BPFDoor, BPF Rekoobe and AVERAT malware variants targeting telecom and network-edge appliances in South Korea and Taiwan

The memory buffer vulnerability can result in denial of service to customers, with CISA warning it poses “significant risks” to the federal government

Google has paused its Open Source Vulnerability Rewards Program due to a flood of AI submissions

Ofqual study finds growing number of UK schools are bouncing back “immediately” from cyber-attacks

A breach at school software provider Frontline Education has exposed employee data

Microsoft has warned that threat actors have gained the advantage over defenders by using AI to enhance the speed and scale of attacks

Investigators have disrupted the operations of ransomware group KillSec and arrested several key suspects

The Dutch Institute for Vulnerability Disclosure reveals agentic AI-powered attack using Zammad zero-days

Vulnerability in Cisco Catalyst SD-WAN Manager allows an unauthenticated, remote attacker to access systems with admin privileges