Information Security Magazine

Security flaw in RealHomes CRM plugin allowed file uploads; patches released for 30,000+ sites

VulnCheck analysts found that vulnerabilities exploited before being publicly disclosed rose from 23.6% in 2024 to 28.96% in 2025

Phoney email alerts suggest users need to backup their LastPass accounts within 24 hours. LastPass says it would never require this action from users

UK Executives Warn They May Not Survive a Major Cyber-Attack, Vodafone Survey Finds

DLA Piper finds 22% increase in breached firms notifying European GDPR regulators

Cyber risks for the Milano-Cortina 2026 Winter Games include phishing and spoofed websites as key threat vectors

Loan phishing operation in Peru is stealing card info by impersonating financial institutions

Sophisticated malware previously thought to be the work of a well-resourced cyber-crime group was built by one person - with the aid of AI tools

The EU’s Cybersecurity Act 2.0 will aim to address some of the challenges of the current CSA, including the slow rollout of certification schemes

A new service, the Global Cybersecurity Vulnerability Enumeration (GCVE), offers an alternative to the US-led CVE

City of London Police has launched the UK’s national Report Fraud service

Gartner predicts 50% of organizations will adopt zero trust data governance by 2028

2 security vulnerabilities in the Chainlit framework expose risks from web flaws in AI applications

Three vulnerabilities in Anthropic's Git server for the MCP can be exploited via prompt injection

PwC’s 29th Global CEO Survey shows cyber risk rising to the top of CEO concerns as confidence in short term business growth weakens

Cybersecurity Researchers at ReliaQuest warn of an ongoing campaign delivered to “high-value individuals” via LinkedIn messages

Weaponized AI is fueling a new wave of cybercrime, said Group-IB in its latest report

A notorious marketplace for fraud, Tudou Guarantee, appears to have closed its public Telegram groups

New malware PDFSIDER enables covert, long-term access to compromised systems via advanced techniques

UK NCSC warned of disruptive cyber attacks by Russian hacktivists targeting critical infrastructure