Information Security Magazine

The CERT-UA investigation concluded that the attack’s techniques were “characteristic of Russian intelligence services”

A new attack targeting Microsoft Teams users used vishing, remote access tools and DLL sideloading to deploy a JavaScript backdoor

Google is set to roll out end-to-end encryption for all Gmail users, boosting security, compliance and data sovereignty efforts

BlueVoyant found that the use of lookalike domains in email-based attacks is allowing actors to extend the types of individuals and organizations being targeted

A thousand UK service providers will be expected to comply with the forthcoming Cyber Security and Resilience Bill

CISA recommends immediate action to address malware variant RESURGE exploiting Ivanti vulnerability CVE-2025-0282

New “ClickFake Interview” campaign attributed to the Lazarus Group targets crypto professionals with fake job offers

The funding will go to several projects within the Digital Europe Programme (DIGITAL) work program for 2025 to 2027

The UK’s National Cyber Security Agency has called on Next.js users to patch CVE-2025-29927

The DoJ has managed to recoup over $8m from scammers, stolen in romance baiting schemes

Forescout researchers found multiple vulnerabilities in leading solar power system manufacturers, which could be exploited to cause emergencies and blackouts

Claroty revealed that 89% of healthcare organizations use the top 1% of riskiest Internet-of-Medical-Things (IoMT) devices

Expert speakers discussed the impact of reported cutbacks to CISA on the ability of local officials to protect against surging cyber-attacks on US election infrastructure

A PhaaS platform, dubbed 'Morphing Meerkat,' uses DNS MX records to spoof over 100 brands and steal credentials, according to Infoblox Threat Intel

Newly identified CoffeeLoader uses multiple evasion techniques and persistence mechanisms to deploy payloads and bypass endpoint security

PJobRAT malware targets Taiwan Android users, stealing data through fake messaging platforms

The ICO’s Deputy Commissioner told Infosecurity that organizations that fail to implement MFA and suffer a breach can expect heavy penalties

Once considered inactive, the Chinese cyber espionage group FamousSparrow has reemerged, targeting organizations across the US, Mexico and Honduras

The UK’s National Crime Agency is warning of a growing cyber and physical threat from homegrown teens

The UK’s National Cyber Security Centre has released new guidance to help domain registrars enhance security