Information Security Magazine

BlackFog found that publicly disclosed ransomware attacks on retail grew significantly in Q2 compared to Q1, with UK firms heavily targeted

Cloudflare highlighted a huge rise in hyper-volumetric DDoS attacks in Q2 2025, with attackers seeking to overwhelm defenses

CyCognito research finds that a third of education sector APIs, web apps and cloud assets are exposed to attack

The Co-op is teaming up with The Hacking Games to inspire pathways into ethical cybersecurity careers

MITRE has introduced AADAPT framework, a new cybersecurity framework aimed at mitigating risks in digital financial systems like cryptocurrency

A new phishing campaign uses SVG files for JavaScript redirects, bypassing traditional detection methods

The latest report from AppOmni has revealed 91% confidence in SaaS security while 75% of organizations have faced incidents

Socket has identified a new malware loader called XORIndex incorporated into malicious packages published to the npm registry, with over 9000 downloads so far

Darknet giant Abacus Market has gone offline due to a likely exit scam, according to TRM Labs

The NCSC’s new Vulnerability Research Institute will help it develop outreach with the external cybersecurity community

Grok-4 was jailbroken 48 hours post-launch using Echo Chamber and Crescendo attack methods

A vulnerability in Kigen eUICC cards has exposed billions of IoT devices via flawed eSIM profile management

CTM360 has identified over 17,000 fake news sites mimicking reputable brands like CNN, BBC and CNBC, spreading investment fraud across 50 countries

The NCSC has warned that there are still a significant number of organizations using Windows 10, which will soon be unsupported with security updates

Interlock ransomware continues to develop custom tooling and a new RAT has been detected by researchers

Louis Vuitton’s UK business has notified customers of a personal data breach

Operation Chakra-V scores success as a fraud syndicate is busted following the raid of a scam call center operating in Noida, Uttar Pradesh

The new CISA Associate designation recognizes ISACA members who have passed the CISA exam, but do not yet have the required experience

The man was handed a suspended prison sentence for offenses relating to the hack of Network Rail public Wi-Fi, exposing customers to offensive messaging

DoNot APT, also known as APT-C-35, traditionally operates exclusively in South Asia