Information Security Magazine

An attack campaign has been identified which exploits vulnerabilities in Cisco Adaptive Security Appliance software

The effort, named Operation Contender 3.0, led to the arrest of 260 suspected cybercriminals

JLR said it is in a position to start clearing its backlog of payments for suppliers, while its parts logistics center is returning to full operations

Trend Micro highlighted the new LockBit version’s improved technical improvements and cross-platform functionality compared to previous iterations

Critical flaw ForcedLeak in Salesforce's AgentForce allows CRM data theft via prompt injection

The security researchers who discovered the malicious npm package called it the “first malicious MCP in the wild”

Vietnamese phishing campaign evolves from Python infostealer to PureRAT trojan

The hackers are likely trying to collect data to feed the development of zero-day exploits, said Google researchers

The UK retailer estimated the losses from temporarily shutting down some of its systems to contain the threat

SecurityScorecard report finds 53% of Indian vendors suffered third-party breaches in the past year

The UK’s National Crime Agency has arrested a suspect in connection with a ransomware attack on Collins Aerospace

Malicious npm package Fezbox uses QR codes to steal credentials from browser cookies

New campaign merges traditional malware with DevOps tools, using GitHub CodeSpaces for DDoS attacks

Boyd Gaming Corporation has disclosed that an unauthorized actor removed data from its systems, including information about employees and other individuals

The equipment could be used to disable cell phone towers and conduct denial-of-services attacks across New York City

An unnamed federal agency was hacked last year after threat actors exploited a critical GeoServer vulnerability

Police have arrested five suspects linked to a €100m cryptocurrency fraud ring

Nimbus Manticore intensified European cyber-espionage, targeting aerospace, telecom, defense sectors

Gartner research found that 62% of organizations have experienced a deepfake attack in the past 12 months

Rising hardware, API, and network flaws expose organizations to new risks in an AI-driven landscape