Information Security Magazine

Multiple vulnerabilities in Rockwell Automation and Mitsubishi products could allow ICS cyber-attacks

US and Israeli government agencies have warned that the Iranian state-sponsored threat actor Cotton Sandstorm is deploying new tradecraft to expand its operations

New phishing kit Xiu Gou, featuring a unique “doggo” mascot, targets users in US, UK, Spain, Australia and Japan with 2000+ scam websites

Emeraldwhale breach allowed access to over 10,000 repositories and resulted in the theft of more than 15,000 cloud service credentials

A report by the Canadian Centre for Cyber Security described China as the most sophisticated cyber threat to Canada, also identified India as an emerging threat

Palo Alto Networks’ Unit 42 has observed the first-ever collaboration between North Korean-backed Jumpy Pisces and Play ransomware

Malware-related attacks against global government organizations increased 236% year-on-year in Q1 2024, according to SonicWall

ITRC data finds 81% of US small businesses have suffered a data or security breach over the past year

The LiteSpeed Cache vulnerability allows administrator-level access, risking security for over 6 million WordPress sites

The new FakeCall variant uses advanced vishing tactics, featuring Bluetooth for device monitoring

In a major security update, Apple has fixed dozens of bugs and vulnerabilities across its operating systems and services

CISA’s 2025-2026 International Strategic Plan aims to strengthen external partnerships to reduce risks to critical infrastructure relied on in the US

Comparitech warns that voters could be misled as most local government sites are failing on basic security

Microsoft has spotted a major spearphishing campaign from the Russian APT29 group using RDP for compromise

ThreatFabric researchers have discovered significant updates to the LightSpy spyware, featuring plugins designed to interfere with device functionality

The phishing campaign targeted users via texts impersonating Amazon, linked to the threat actor Chenlun

Operation Magnus took down infrastructure used to run the Redline and Meta infostealers, widely used tools in cybercriminal activities

A Veeam report found that businesses are prioritizing NIS2 compliance, with 95% of applicable firms diverting funds from other areas of the business

Global Witness uncovered a network of 71 suspicious accounts on X supporting the Azeri government

The UK has joined forces with its Five Eyes peers to offer cybersecurity guidance to startups