Information Security Magazine

The NVD program manager has announced undergoing process improvements to catch up with its growing vulnerability backlog

Experts at the Google Cloud Next event set out how security teams need to adapt their focuses in the wake of trends such as rising cyber-attacks and advances in AI

Rockwell Automation, Hitachi Energy and Inaba Denki Sangyo have products affected by critical vulnerabilities carrying severity ratings as high as 9.9

Google Cloud’s Sandra Joyce said that Chinese state actors’ advanced techniques and ability to stay undetected pose huge challenges

Google Cloud announced a number of security products designed to reduce complexity for security leaders

The Cyber Security Breaches Survey 2025 has been released by the UK Home Office and DSIT today, reporting a slight decline in incidents compared to 2024 report

A new Android malware campaign uses fake Google Play pages to distribute the SpyNote Trojan

A new AI-powered framework dubbed “AkiraBot” has successfully spammed 80,000 websites since September 2024

Police have made more arrests in the ongoing Operation Endgame, cracking down on malware customers

WK Kellogg breach exposed employee data after attackers exploited flaws in Cleo software

New phishing method targets high-value accounts using real-time email validation

While ransomware attack claims are at an all-time high, financial losses from actual attacks may be reducing

73% of respondents in an Armis survey said they worried about nation-state actors using AI for cyber-attacks

Microsoft has issued security updates to fix 130+ vulnerabilities this month, including one zero-day

The UK and allies have warned of new mobile spyware targeting Uyghur, Tibetan and Taiwanese communities

Google’s latest Android update fixes 62 flaws, including two zero-days previously used in limited targeted attacks

NIST marks CVEs pre-2018 as “Deferred” in the NVD as agency focus shifts to managing emerging threats

Armis survey reveals that the growing threat of nation-state cyber-attacks is disrupting digital transformation

The US Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2025-31161 to its Known Exploited Vulnerabilities (KEV) catalog

The British government has launched a new code of practice designed to boost corporate cyber governance