Information Security Magazine

A new UNC6384 campaign highlights the threat actor’s growing sophistication and geographic expansion

Clearview AI faces a criminal complaint in Austria for allegedly ignoring EU data protection rulings

The King Addons for Elementor plugin contains two flaws allowing unauthenticated file uploads and privilege escalation

Cybercriminals are abusing AdaptixC2, a legitimate emulation framework, in ransomware campaigns

Over a quarter of employees work with AI tools that had not been authorized by their company

A new dark web analysis reveals more than 300 million records have been breached in 2025 to date

The former general manager of defense contractor Trenchant has admitted selling zero-days to Russian broker

Google Chrome will enhance security with enforced HTTPS connections from version 154, set for release in October 2026

The ongoing ‘PhantomRaven’ malicious campaign has infected 126 npm packages to date, representing 86,000 downloads

A rise in attacks on PHP servers, IoT devices and cloud gateways is linked to botnets exploiting flaws, according to new research published by Qualys

Atroposia is a newly discovered modular RAT that uses encrypted channels and advanced theft capabilities to target credentials and crypto wallets

The backbone breaker benchmark (b3) has been launched to enhance the security of LLMs within AI agents

The British Standards Institution claims business leaders aren’t focused enough on managing AI risk

A surge in fake investment platforms targeting cryptocurrency and forex markets has been driving a new wave of financial crime in Asia

A zero-day flaw in Chrome has been exploited by Mem3nt0 mori in Operation ForumTroll as part of a targeted espionage campaign

Cyber-related economic sanctions can alter adversary behavior, forcing underground networks to distance themselves from named actors

ITRC report charts shocking rise of identity fraud victims driven to thoughts of self-harm

Sysadmins are urged to patch WSUS vulnerability CVE-2025-59287 as soon as possible, with federal agencies required to update by November 14

Qilin ransomware activity has surged in late 2025, threatening data leaks via double extortion tactics

Europol called for action against caller ID spoofing, linking attacks to significant online fraud