Information Security Magazine

Google reveals North Korean hackers are using EtherHiding, a blockchain-based technique, to deliver malware and steal cryptocurrency

The US lending platform said early investigations found no evidence of unauthorized account access or fund theft

At ISACA Europe 2025, cybersecurity consultant Tony Gee shared some technical measures security teams could implement to fight against the infostealer scourge

Trend Micro have reported a campaign exploiting a flaw in Cisco SNMP to install Linux rootkits on devices

Microsoft systems analyze over 100 trillion daily signals, suggesting dramatically increasing AI-driven cyber-threats

LastPass warns customers it has not been breached, after phishing emails falsely claim a hack and urge users to update their desktop app

Data from the Identity Theft Resource Center reveals 23 million individuals victimized by breaches in Q3 2025

F5 has admitted a nation state actor has stolen source code and information on undisclosed vulnerabilities

A flaw in the Slider Revolution plugin has exposed millions of WordPress sites to unauthorized file access

Whisper 2FA is now one of the most active PhaaS tools alongside Tycoon and EvilProxy, responsible for one million attacks since July 2025

Microsoft has fixed over 170 CVEs in October’s Patch Tuesday, including six zero-day vulnerabilities

Outsourcing giant Capita has been fined £14m by the ICO after a major data breach in 2023

Investigations found that the network operates scam centers in Cambodia, Myanmar and across Southeast Asia

Legacy Windows protocols are still exposing organizations to credential theft, Resecurity found

A newly identified cybercrime group TA585 is running an advanced cyber operation distributing MonsterV2 malware

In a joint warning letter, UK ministers urged FTSE 350 CEOs to bolster cyber defenses

ReliaQuest report reveals Flax Typhoon attackers maintained year-long access to an ArcGIS system

A new EY report claims unmanaged AI risk is causing millions of pounds’ worth of losses for UK organizations

The UK cybersecurity agency reported 204 cyber incidents of “national significance” between September 2024 and August 2025 – an all-time high

A rise in attacks exploiting RMM tools like ScreenConnect enables system control via phishing tactics