Information Security Magazine

Ransomware actors deploy a range of activities to make it harder for victims to recover and increase the consequences of not paying demands

The UK’s National Cyber Security Centre has released the Cyber Assessment Framework 4.0

Chanel and Pandora have revealed data breaches reportedly linked to attacks on their Salesforce instances

SecAlliance highlighted the evolution in smishing campaigns orchestrated by Chinese syndicates, which exploit digital wallet tokenization

Experts, including Allan Friedman, CISA's leading voice on SBOMs until July 2025, emphasized that AI BOMs should be standardized before being implemented

Critical vulnerabilities in NVIDIA's Triton Inference Server, discovered by researchers, could allow unauthenticated attackers to gain full server control through remote code execution

IANS found that stagnant budget growth rates have significantly impacted CISOs ability to increase their teams’ headcount

SecurityScorecard analysis highlights wide variety of Iranian threat actors and coordination with military activity

Cifas noted a record number of filings in its National Fraud Database for the first half of 2025

Python-based PXA Stealer has stolen data from more than 4000 victims in over 62 countries, according to SentinalLabs

Forescout also observed a big rise in CVEs added to CISA’s KEV catalog, some of which impacted end-of-life products

Web traffic to AI sites surged 50% from Feb 2024 to Jan 2025, driven by browser-based GenAI tools

Arctic Wolf has spotted an increase in Akira ransomware attacks targeting SonicWall SSL VPNs

The Pwn2Own competition is offering a $1m reward to any teams able to unearth a WhatsApp code execution exploit

CrowdStrike revealed the surge in cloud intrusions was partly driven by a 40% increase in Chinese-state actors exploiting these environments

Microsoft has observed Russian state actor Secret Blizzard using an AiTM position to gain initial access, assisted by official domestic intercept systems

Spikes in attacker activity precede the disclosure of vulnerabilities 80% of the time, according to a new GreyNoise report

Flashpoint data reveals an 800% increase in credentials stolen via infostealers in just six months

The UK’s AI Security Institute has announced a new AI misalignment research program

The DoubleTrouble Android banking Trojan has evolved, using Discord for delivery and introducing several new features