Information Security Magazine

Outsourcing giant Capita has been fined £14m by the ICO after a major data breach in 2023

Investigations found that the network operates scam centers in Cambodia, Myanmar and across Southeast Asia

Legacy Windows protocols are still exposing organizations to credential theft, Resecurity found

A newly identified cybercrime group TA585 is running an advanced cyber operation distributing MonsterV2 malware

In a joint warning letter, UK ministers urged FTSE 350 CEOs to bolster cyber defenses

ReliaQuest report reveals Flax Typhoon attackers maintained year-long access to an ArcGIS system

A new EY report claims unmanaged AI risk is causing millions of pounds’ worth of losses for UK organizations

The UK cybersecurity agency reported 204 cyber incidents of “national significance” between September 2024 and August 2025 – an all-time high

A rise in attacks exploiting RMM tools like ScreenConnect enables system control via phishing tactics

Spanish authorities have arrested a 25-year-old Brazilian accused of leading the GXC Team and selling malware and AI tools to cybercriminals

A new campaign distributing the Stealit infostealer employs previously unknown malware delivery techniques and infrastructure

Apple has doubled its top bug bounty reward to $2m but with bonuses it could reach $5m

The infamous BreachForums site has been taken offline again to disrupt Scattered Lapsus$ Hunters

Google has introduced a new AI Vulnerability Reward Program offering up to $30,000 for bug discoveries in its AI products

GTIG highlighted indicators that Clop is behind the extortion campaign targeting Oracle EBS instances, with its activity likely beginning as early as August 9

Forescout said that the TwoNet actor was lured into attacking a honeypot disguised as a water treatment utility, providing insights into the group’s tactics

A new report from SquareX Labs highlights security weaknesses in AI browsers like Comet, revealing new cyber-risks

A new ClayRat spyware campaign has been observed targeting Russian users via fake apps on Telegram and exfiltrating data

SonicWall said that a threat actor has accessed files containing encrypted credentials and configuration data for all customers who have used its cloud backup service

The ICO has won an Upper Tribunal appeal against Clearview AI over its ability to fine the company