Information Security Magazine

The Confucius cyber-espionage group has shifted its tactics from document-focused stealers to Python-based backdoors like AnonDoor

A new study by Zimperium has revealed serious risks in free VPN apps, exposing users to privacy threats and security flaws

Experts argued that the lapse of the Cybersecurity Information Sharing Act could have far-reaching consequences in US national cyber defenses

Forrester predicts agentic AI will be responsible for a major data breach in 2026

ENISA reveals phishing and vulnerability exploitation accounted for majority of intrusions in past year

Broadcom has released security patches for critical flaws affecting several VMware products

A new campaign has been observed using malicious Windows shortcuts in credential-themed ZIP files to deploy PowerShell script

PwC found that AI security has become a top investment priority in cyber budgets over the next 12 months, ahead of cloud and network security

Phantom Taurus is the latest formally identified cyber-espionage group aligned with Chinese state interest

The NCA warns that house buyers could face losses of over £80,000 from a type of BEC called payment diversion fraud

Image-sharing platform Imgur has blocked its services within the UK, following a regulatory notice from the ICO

New smishing attacks exploit Milesight routers to send phishing texts targeting Belgian users

New Android RAT Klopatra is targeting financial institutions using advanced evasion techniques

The Trump administration wants CISA to transition to a “new model” for supporting local government agencies’ cyber strategy

Tenable researchers have discovered three vulnerabilities in Google’s Gemini GenAI tool

Japanese brewery giant Asahi revealed that a cyber-attack had caused a “system failure”, with order and shipment operations suspended in Japan

Most UK cybersecurity professionals tell CIISec that their budgets are stagnating

While the exact suspicion was yet to be revealed it is linked to "foreign interference"

Microsoft Threat Intelligence stopped an AI-driven credential phishing campaign using SVG files disguised as PDFs

The Five Eyes countries, Germany and the Netherlands are launching a standard for managing OT security