Information Security Magazine

The US Cybersecurity and Infrastructure Security Agency added flaws in Fortinet and a popular GitHub Action to its Known Exploited Vulnerabilities catalog

Security firm Barracuda said it has detected more than a million phishing-as-a-service (PhaaS) attacks in 2025

Gartner has claimed that AI agents will reduce the time it takes to exploit exposed accounts

Europol’s annual report warns of a growing threat from aligned state and cybercrime groups, enabled by AI technologies

A Cato Networks researcher discovered a new LLM jailbreaking technique enabling the creation of password-stealing malware

Report reveals common password use in RDP attacks, highlighting weak credentials remain a major security flaw

Leaked chat logs have exposed connections between the BlackBasta ransomware group and Russian authorities, according to new analysis by Trellix

Google is set to acquire Wiz, a cloud security platform founded in 2020, for $32bn in an all-cash deal

Flashpoint data points to a surge in data breaches fueled by compromised credentials, ransomware and exploits

Bitdefender said the malicious app campaign has resulted in more than 60 million downloads of malicious apps from the Google Play Store

Bitsight reveals that UK companies are more exposed to cyber risk than global peers via their digital supply chains

Cloudflare introduces E2E post-quantum cryptography, enhancing security against quantum threats

From March 17, Ofcom will enforce rules requiring tech platforms operating in the UK to remove illegal content, including child abuse material

DarkAtlas researchers have uncovered a direct link between BlackLock and the Eldorado ransomware group, confirming a rebranded identity of the notorious threat actor

A bipartisan delegation of US Congresspeople and Senators has asked the hearing between the UK government and Apple to be made public

Action Fraud reported a spike in social media and email account hacks in 2024, resulting in losses of nearly £1m

Common Good Cyber has released a new mapping database designed to help NGOs find the security tools they need

Researchers warn that popular open source software package tj-actions has been compromised

US authorities have extradited Rostislav Panev on charges of being a developer of the notorious LockBit ransomware

Barracuda observed threat actors impersonating the Clop ransomware group via email to extort payments, claiming to have exfiltrated sensitive data