Information Security Magazine

ITRC data finds 81% of US small businesses have suffered a data or security breach over the past year

The LiteSpeed Cache vulnerability allows administrator-level access, risking security for over 6 million WordPress sites

The new FakeCall variant uses advanced vishing tactics, featuring Bluetooth for device monitoring

In a major security update, Apple has fixed dozens of bugs and vulnerabilities across its operating systems and services

CISA’s 2025-2026 International Strategic Plan aims to strengthen external partnerships to reduce risks to critical infrastructure relied on in the US

Comparitech warns that voters could be misled as most local government sites are failing on basic security

Microsoft has spotted a major spearphishing campaign from the Russian APT29 group using RDP for compromise

ThreatFabric researchers have discovered significant updates to the LightSpy spyware, featuring plugins designed to interfere with device functionality

The phishing campaign targeted users via texts impersonating Amazon, linked to the threat actor Chenlun

Operation Magnus took down infrastructure used to run the Redline and Meta infostealers, widely used tools in cybercriminal activities

A Veeam report found that businesses are prioritizing NIS2 compliance, with 95% of applicable firms diverting funds from other areas of the business

Global Witness uncovered a network of 71 suspicious accounts on X supporting the Azeri government

The UK has joined forces with its Five Eyes peers to offer cybersecurity guidance to startups

The UK’s information commissioner claims most adults in the country have had their personal data exposed or compromised

Evasive Panda’s CloudScout uses MgBot to steal session cookies, infiltrating and extracting cloud data from Taiwanese institutions

The surge in job scams targets vulnerable individuals, mirroring pig butchering fraud tactics

Google researchers have observed Russian threat actor UNC5812 using a malware campaign via Telegram to access the devices of Ukrainian military recruits

Trend Micro’s Zero Day Initiative hands out over $1m in awards for Pwn2Own competitors, who found more than 70 zero-day flaws

Vipre research reveals that 10% of emails targeting the manufacturing sector are BEC attempts

Updated figures from the HHS revealed that 100 million patients have been notified that their data was breached in the Change Healthcare ransomware attack