Information Security Magazine

Maryland man accused of $53m Uranium Finance hack, exploited smart contract flaws, laundered funds

Phantom Stealer .NET harvests browser credentials, cookies, cards, sessions, as stealer-as-a-service

OpenAI has patched vulnerability, which Check Point said was because of a DNS loophole

TeamPCP is exploring ways to monetize the secrets harvested during supply chain attacks, with identified ties to the Lapsus$ and Vect ransomware gangs

Analysis from law firm Nockolds suggests non-cyber incidents are driving up employee data breaches

The National Cyber Security Centre wants UK firms to patch CVE-2025-53521

Tax-season phishing floods deliver RMM malware, credential theft, BEC and tax-form scams

Lloyds app glitch exposed up to 447,936 customers’ transactions and personal data during update

Researchers at ReliaQuest warn of persistent malware campaign targeting enterprise credentials

Researchers from watchTowr and Defused have found evidence that attackers are actively exploiting CVE-2026-3055, a critical NetScaler vulnerability

The UK Information Commissioner’s Office has handed a £100,000 fine to Birmingham-based TMAC

The European Commission has revealed details of a data breach impacting its AWS infrastructure

Push Security has uncovered a new AiTM phishing campaign targeting TikTok for Business accounts using Google and TikTok themed login pages

Socket and Endor Labs discovered a new TeamPCP campaign leading to the delivery of credential-stealing malware

‘Q-Day’ and the cybersecurity problems it brings could come as early as 2029 as Google accelerates its post-quantum cryptography migration

The UK government has sanctioned Xinbi, described as “the second-largest illicit online marketplace ever”

Security researchers from Georgia Tech have observed a surge in reported CVEs for which the flaw was introduced by AI-generated code

Attackers rapidly exploited a critical Oracle WebLogic RCE flaw the same day exploit code was released, according to a CloudSEK honeypot study

EtherRAT hides C2 in Ethereum smart contracts via EtherHiding, steals wallets and credentials

PwC Annual Threat Dynamics report says AI-threats are the biggest concern of clients