Information Security Magazine

The UK’s National Cyber Security Centre has released new guidance to help firms improve observability and threat hunting

A new report from TeamViewer found that 40% of global endpoints still run Windows 10, just days before security updates and support ends for the operating system

A cyber campaign using Nezha has been identified, targeting vulnerable web apps with PHP web shells and Ghost RAT

According to TransUnion, digital fraud has cost companies $534bn in losses globally with US business hit hardest

Jaguar Land Rover has reported a 25% drop in volume sales in the three months up to September 30, largely due to the impact of the ongoing cyber incident

North Korean hackers have stolen over $2bn in cryptocurrency already this year, says Elliptic

Two 17-year-olds have been arrested following a cyber-attack on the Kido nursery group

The Qilin group claims to have stolen sensitive personal and proprietary data from the Brewer

A critical Redis flaw, dubbed “RediShell,” has exposed 60,000 unprotected servers to exploitation

The Qilin ransomware gang has claimed attacks at Mecklenburg County Public Schools, stealing financial records and childrens’ medical files

Discord said a third-party customer services provider was compromised to access user data, with the attackers aiming to extort a financial ransom

A critical Oracle E-Business Suite vulnerability is being actively exploited by the Clop ransomware group

A critical GoAnywhere vulnerability is being exploited by the Medusa ransomware group, says Microsoft

Europol’s Cybercrime Conference has warned that cybercriminals are exploiting new technologies faster than law enforcement can adapt

A new TOR data leak site published by the Trinity of Chaos ransomware group unveils 39 firms’ data and threatens Salesforce litigation

Experts warn that threat actors may be gearing up for compromise after large uptick in scans of Palo Alto Network portals

Asahi confirmed it has fallen victim to a ransomware attack, and revealed it has started manual order processing amid ongoing operational disruption

Renault and Dacia have become the latest big-name brands to suffer a supply chain breach

Cisco Talos has identified a Chinese-speaking cybercrime group that targets high-value Internet Information Services (IIS) for SEO fraud

Patches for the targeted vulnerabilities were released in Oracle’s July 2025 security update