Information Security Magazine

Backdoor malware Auto-Color targets Linux systems, exploiting SAP NetWeaver flaw CVE-2025-31324

Hackers are actively exploiting two critical flaws in Cisco Identity Services Engine, said the US Cybersecurity and Infrastructure Security Agency

The federal government has applied for forfeiture of the funds, which were seized by FBI Dallas in April 2025

A Scottish charity has been fined £18,000 for systematic data protection failings

Two pro-Ukraine hacktivists have claimed responsibility for a destructive attack on Aeroflot

10,000 WordPress sites vulnerable to takeover due to critical flaws in HT Contact Form Widget plugin

Scattered Spider has targeted VMware vSphere environments, exploiting retail, airline and insurance sectors

Insurance firm Allianz Life said that a threat actor accessed personally identifiable information of the majority of its 1.4 million US customers

Despite claims by a hacker, French defense company Naval Group has detected no intrusions into its IT environments at the time of writing

Arizonan woman sentenced to 102 months for operating laptop farm for North Korean IT workers

Dating app Tea has been compromised by a hacker, resulting in the exposure of 13,000 selfies

The US and partners from nine countries have taken down part of the ransomware group’s infrastructure

Sygnia observed Chinese cyber campaign dubbed Fire Ant deploying sophisticated techniques to gain full compromise of victim environments, discovering isolated assets

Cisco Talos warned that the Chaos group, thought to be formed of former BlackSuit members, has launched a wave of attacks targeted a variety of sectors

A large-scale malware campaign known as SarangTrap has been observed using fake dating apps to steal personal data, targeting South Korean users

The US FBI has issued public announcements warning families of The Com, an online criminal network involving minors in various illicit activities

Microsoft said Chinese actor Storm-2603 is deploying Warlock ransomware following the exploitation of vulnerabilities in on-prem SharePoint systems

Investigators assessed that the criminal group’s stolen funds amount to €580,000

Wiz believes the active campaign is part of a broader crypto-scam infrastructure, which uses a wide range of exploitation techniques

A series of new cybersecurity regulations related to the water industry have been set out by New York state agencies