Information Security Magazine

Wealthsimple confirmed a third-party vendor data breach affecting roughly 30,000 customers

Phishing campaign unveiled MostereRAT, targeting Windows systems with advanced evasion techniques

Cisco Talos found that abuse of remote services and remote access software are the most prevalent ‘pre-ransomware’ tactics deployed by threat actors

Palo Alto Networks, Cloudflare and Zscaler were also among confirmed victims of the attack

Security researchers have discovered a new malicious campaign impacting hundreds of GitHub users

Critical SAP S/4HANA vulnerability CVE-2025-42957 is being exploited in the wild

Bridgestone Americas confirmed the incident but has not detailed the scope of the attack

An investigation has revealed that files were stolen in a data breach affecting a South Carolina school district

Trend Micro observed the attackers using terminal-based installation methods for the AMOS malware, luring macOS users into installing cracked versions of apps

The joint guidance is a welcome first step towards a common, global adoption of SBOMs, experts argued

The OPSWAT report found that insider breaches cost impacted firms $2.7m on average due to factors such as regulatory fines and diminished productivity

A newly identified hacking group named GhostRedirector has compromised 65 Windows servers using previously unknown tools

North Korean hackers have been observed exploiting cyber threat intelligence platforms in a campaign targeting job seekers with malware-laced lures

Google Cloud’s Mandiant successfully disrupted an active ViewState deserialization attack affecting Sitecore deployments

JLR said it is investigating following claims by the actor “Scattered Lapsus$ Hunters” that it had stolen data from the firm and had issued an extortion demand

Hackers are using legitimate red team tool Hexstrike-AI to simplify and speed up vulnerability exploitation

A new Cobalt study finds healthcare organizations among the slowest at resolving serious vulnerabilities

A malicious campaign using Ethereum smart contracts has been observed targeting developers via npm and GitHub

The backdoor is a sophisticated VBA-based malware targeting Microsoft Outlook

A massive IPTV privacy network has been uncovered distributing unlicensed content from major brands including Apple TV, Disney+, HBO, Netflix and more