Information Security Magazine

A bank, an airport, a non-profit and the Israeli branch of a US software company were among the targets of this new MuddyWater campaign

Almost a quarter of the zero days detected by Google in 2025 targeted security and networking appliances

Malicious insiders are using misusing AI for nefarious gain, while employees cutting corners also creates risk, warns Mimecast

Critical flaw "ContextCrush" in Context7 MCP Server could allow malicious instructions into AI tools

Exploit kit "Coruna" targets iPhones running iOS 13.0 to 17.2.1, focusing on financial data theft

Ox Security warns that Mail2Shell could enable threat actors to hijack FreeScout systems without user interaction

Two of the 48 Cisco vulnerabilities, affecting Secure Firewall Management Center, are maximum-severity flaws

A global operation has resulted in the takedown of popular cybercrime forum LeakBase

A coalition of seven Western nations has launched guidelines to help integrate security-by-design principles into future 6G standards

Law enforcers and industry partners have taken down notorious phishing-as-a-service platform Tycoon2FA

Increased attempts to compromise surveillance cameras linked to Iran during Middle East conflict

Malware campaign uses Ukrainian email service for credibility, deploying "BadPaw" to execute attacks

The OpenID Foundation warns that fragmented policies on posthumous digital accounts could open the door for fraudsters to exploit AI deepfakes

Espionage campaign exploits Israel-Iran conflict, distributing a trojanized Red Alert app via SMS

Cloudflare Threat Report warns that AI tools enable attackers who lacked required skills to generate effective attacks rapidly and at scale

Ariomex database reveals potential sanctions evasion and capital transfers tied to Iranian actors

Seemplicity finds US security leaders work 11 or more extra hours per week

Black Kite reveals 26,000 unnamed corporate victims linked to 136 third-party breaches

Zscaler ThreatLabz assessed with medium to high confidence that an Iranian adversary targeted Iraq’s Ministry of Foreign Affairs in a new cyber-attack

Google Chrome initiates quantum-resistant measures via Merkle Tree Certificates to secure HTTPS