Information Security Magazine

Web traffic to AI sites surged 50% from Feb 2024 to Jan 2025, driven by browser-based GenAI tools

Arctic Wolf has spotted an increase in Akira ransomware attacks targeting SonicWall SSL VPNs

The Pwn2Own competition is offering a $1m reward to any teams able to unearth a WhatsApp code execution exploit

CrowdStrike revealed the surge in cloud intrusions was partly driven by a 40% increase in Chinese-state actors exploiting these environments

Microsoft has observed Russian state actor Secret Blizzard using an AiTM position to gain initial access, assisted by official domestic intercept systems

Spikes in attacker activity precede the disclosure of vulnerabilities 80% of the time, according to a new GreyNoise report

Flashpoint data reveals an 800% increase in credentials stolen via infostealers in just six months

The UK’s AI Security Institute has announced a new AI misalignment research program

The DoubleTrouble Android banking Trojan has evolved, using Discord for delivery and introducing several new features

CISA has launched a new tool to streamline cyber incident response and aid in adversary eviction

Semperis found that executives were physically threatened in 40% of ransomware incidents, in a bid to pressure victims to pay demands

The arrest of members of the Scattered Spider cyber-attack group have temporarily halted new intrusions, however, similar threat actors continue to pose risks

Avast researchers shared a step-by-step guide to decrypt files for victims of FunkSec ransomware

Experts argue that password managers are still useful despite Microsoft Authenticator ditching its capabilities

North Korea’s Lazarus Group has been blamed for a cyber-espionage campaign using open source packages

A SentinelLabs report has revealed patents linked to firms aiding China's cyber-espionage operations, exposing new capabilities

A covert ATM attack used a Raspberry Pi to breach bank systems, employing stealthy malware and anti-forensics techniques

Google’s Project Zero team will provide limited details of new vulnerabilities early following discovery, in a bid to speed up end users’ patching

32.1% of vulnerabilities listed in VulnCheck’s Known Exploited Vulnerabilities catalog were weaponized before being detected or within the following day

IBM found that the global average cost of a data breach has fallen by 9% compared to 2024, driven by improved detection and containment