https://www.infosecurity-magazine.com/network-security/ Copyright © 2026 Reed Exhibitions Ltd. All Rights Reserved. https://www.infosecurity-magazine.com/interviews/borussia-dortmund-it-chief/ From stadium infrastructure to player contracts, Borussia Dortmund's Head of IT reveals the cybersecurity challenges facing modern football clubs Wed, 19 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/interviews/borussia-dortmund-it-chief/ https://www.infosecurity-magazine.com/news/critical-infrastructure-medusa/ The FBI warned that the RaaS operation has significantly enhanced its tactics, techniques and procedures, making it harder for defenders to counter Wed, 19 Aug 2026 10:50:00 GMT https://www.infosecurity-magazine.com/news/critical-infrastructure-medusa/ https://www.infosecurity-magazine.com/news/cyber-incident-ut-san-antonio/ UT San Antonio has taken IT systems offline following a cyber incident, disrupting student registration and tuition payments days before term is due to resume Tue, 18 Aug 2026 11:20:00 GMT https://www.infosecurity-magazine.com/news/cyber-incident-ut-san-antonio/ https://www.infosecurity-magazine.com/news/etsi-proposes-17-cybersecurity/ The European Telecommunications Standards Institute has launched an approval process for standards vendors will have to meet under the Cyber Resilience Act Mon, 17 Aug 2026 11:15:00 GMT https://www.infosecurity-magazine.com/news/etsi-proposes-17-cybersecurity/ https://www.infosecurity-magazine.com/news/new-linux-botnet-evooo1bot-victims/ Evooo1Bot is a newly observed botnet based on the Mirai framework but equipped with advanced features, turning edge devices into persistent proxies Fri, 14 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/new-linux-botnet-evooo1bot-victims/ https://www.infosecurity-magazine.com/news/gunra-ransomware-fortinet-flaws/ Gunra actors are using stealth to exfiltrate vast volumes of data from Microsoft services, US and Korean agencies have warned Wed, 12 Aug 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/gunra-ransomware-fortinet-flaws/ https://www.infosecurity-magazine.com/news/attack-polish-power-plant-2025-led/ The Polish CERT has released details of another 2025 attack on a combined heat and power plant in the country Wed, 12 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/attack-polish-power-plant-2025-led/ https://www.infosecurity-magazine.com/news/ghostjacking-ai-gents-access/ Tenet reported that half of Fortune 500 companies are vulnerable to the Ghostjacking technique, which involves tricking AI agents with fake reports Mon, 10 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/ghostjacking-ai-gents-access/ https://www.infosecurity-magazine.com/news/khunt-toolkit-oracle-database-sql/ Attackers used SQL injection to compile a post-exploitation toolkit inside an Oracle database Thu, 06 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/khunt-toolkit-oracle-database-sql/ https://www.infosecurity-magazine.com/interviews/university-of-arts-london/ University of the Arts London's Keith Joy explains the unique cybersecurity challenges facing higher education and how institutions can secure users without restricting creativity Tue, 04 Aug 2026 09:06:00 GMT https://www.infosecurity-magazine.com/interviews/university-of-arts-london/ https://www.infosecurity-magazine.com/news/hollowframe-fake-python-dll/ New HollowFrame loader hid Go code in a fake Python DLL after pre-staging Defender exclusions Mon, 03 Aug 2026 11:26:00 GMT https://www.infosecurity-magazine.com/news/hollowframe-fake-python-dll/ https://www.infosecurity-magazine.com/news/trickbot-dns-tunneling-c2/ New TrickBot variant hides C2 communication inside DNS queries, replacing decade-old HTTP pattern Wed, 22 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/trickbot-dns-tunneling-c2/ https://www.infosecurity-magazine.com/opinions/from-fbi-cybercrime-to-barbie-ciso/ Mattel CISO Jill Knesek on what working as a Special Agent at the FBI taught her about cybersecurity leadership Mon, 20 Jul 2026 09:00:00 GMT https://www.infosecurity-magazine.com/opinions/from-fbi-cybercrime-to-barbie-ciso/ https://www.infosecurity-magazine.com/interviews/interview-ferrari-head-of/ The longest tenured and most successful Formula 1 team is no stranger to evolving with technological developments. This is how Ferrari ensures its cybersecurity strategy helps the team push forward Mon, 20 Jul 2026 08:00:00 GMT https://www.infosecurity-magazine.com/interviews/interview-ferrari-head-of/ https://www.infosecurity-magazine.com/news/compromised-logins-ransomware-entry/ Research of incidents by Sophos finds that phishing, brute force attacks and other identity-based threats have surpassed software vulnerabilities as means of delivering ransomware Wed, 15 Jul 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/compromised-logins-ransomware-entry/ https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/ Cisco Talos said China-linked APT UAT-7810 is growing its proxy relay network with new malware Wed, 08 Jul 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/ https://www.infosecurity-magazine.com/news/fbi-google-take-down-netnut-proxy/ The NetNut proxy network and the ‘Popa’ botnet are known to have infected devices with variants of Mirai DDoS botnets Fri, 03 Jul 2026 09:35:00 GMT https://www.infosecurity-magazine.com/news/fbi-google-take-down-netnut-proxy/ https://www.infosecurity-magazine.com/news/millenium-rat-telegram-60000/ Group-IB says Millenium RAT, now rewritten in C++, has hit 62,289 devices in 160+ countries Mon, 29 Jun 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/millenium-rat-telegram-60000/ https://www.infosecurity-magazine.com/opinions/ethical-ai-operational-discipline/ Safety requirements for AI in cybersecurity cannot be limited to proselytizing about good intents, it must demonstrate control, containment, and cleanup Mon, 29 Jun 2026 09:00:00 GMT https://www.infosecurity-magazine.com/opinions/ethical-ai-operational-discipline/ https://www.infosecurity-magazine.com/news/cisco-vulnerability-exploited/ A high-severity flaw in Cisco Catalyst SD-WAN Manager disclosed in early June was exploited as early as March Thu, 25 Jun 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/cisco-vulnerability-exploited/ https://www.infosecurity-magazine.com/news/twenty-million-us-ip-connections/ Digital Citizens Alliance report claims that millions of Americans may have unwittingly had IP connections used by cybercriminals Thu, 25 Jun 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/twenty-million-us-ip-connections/ https://www.infosecurity-magazine.com/news/cisa-sase-tic-3-0-zero-trust/ New CISA guidance shows federal agencies how to use SASE to move from legacy TIC 2.0 to zero trust Thu, 25 Jun 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/cisa-sase-tic-3-0-zero-trust/ https://www.infosecurity-magazine.com/news/iranlinked-muddywater-poses-as/ An NCC Group report warns state-backed hackers are attempting to hide activity by posing as ransomware groups and deploying commercially available malware Wed, 24 Jun 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/iranlinked-muddywater-poses-as/ https://www.infosecurity-magazine.com/interviews/interview-shopify-ciso-andrew/ Millions of online stores, from global brands to independent retailers, rely on Shopify’s platform to sell their products. This is how the company deploys zero trust, bug bounties, AI and more to keep itself and its customers safe from evolving hacker threats Wed, 24 Jun 2026 08:00:00 GMT https://www.infosecurity-magazine.com/interviews/interview-shopify-ciso-andrew/ https://www.infosecurity-magazine.com/news/operation-escaneo-cloudsek-latam/ CloudSEK maps Operation Escaneo, a campaign hitting Latin American infrastructure via perimeter bugs Thu, 18 Jun 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/operation-escaneo-cloudsek-latam/ https://www.infosecurity-magazine.com/news/ai-threats-alert-fatigue-challenge/ Filigran survey at Infosecurity Europe 2026 reveals AI-powered attacks as the top concern, with false positives, alert fatigue and manual processes draining security teams Wed, 17 Jun 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/ai-threats-alert-fatigue-challenge/ https://www.infosecurity-magazine.com/news/staffing-top-soc-challenge-ai/ SANS Institute study finds few SOCs have built AI into defined workflows, despite widespread adoption Wed, 17 Jun 2026 08:45:00 GMT https://www.infosecurity-magazine.com/news/staffing-top-soc-challenge-ai/ https://www.infosecurity-magazine.com/news/anubis-ransomware-adriatic-port/ How the Anubis ransomware group stole and leaked an Italian Adriatic port authority's data Mon, 15 Jun 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/anubis-ransomware-adriatic-port/ https://www.infosecurity-magazine.com/news/ai-coding-tools-security-agentic/ Ox Security field CTO, Boaz Barzel, makes the case for vibe security to tackle AI agent coding risks Fri, 05 Jun 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/ai-coding-tools-security-agentic/ https://www.infosecurity-magazine.com/news/reactive-security-failing/ A perfect storm of legacy devices, hyper connectivity and human fatigue is bad news for the healthcare sector, warns Cyber Salus Fri, 05 Jun 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/reactive-security-failing/ https://www.infosecurity-magazine.com/news/ai-edr-evasion-tooling/ A threat actor used AI coding tools to build and test EDR evasion malware, Sophos finds Tue, 02 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/ai-edr-evasion-tooling/ https://www.infosecurity-magazine.com/news/infosecurity-europe-semperis/ Semperis is set to bring ‘Enter the War Room: A Tabletop Experience’ to Infosecurity Europe to help cybersecurity leaders prepare to face real incidents Mon, 01 Jun 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/infosecurity-europe-semperis/ https://www.infosecurity-magazine.com/news/ai-soc-still-need-analysts/ Top cybersecurity vendors said AI won't replace entry-level – only routine ticket-taking and triage Mon, 01 Jun 2026 11:45:00 GMT https://www.infosecurity-magazine.com/news/ai-soc-still-need-analysts/ https://www.infosecurity-magazine.com/news/first-vpn-takedown-europol/ First VPN, a service used by ransomware actors and fraudsters, was dismantled by Europol Thu, 21 May 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/first-vpn-takedown-europol/ https://www.infosecurity-magazine.com/news-features/what-mythos-gptcybe-ai-mean-for/ OpenAI and Anthropic’s frontier AI models appear to have upended how we will think about cybersecurity. Infosecurity explores what this means for cyber practitioners Fri, 15 May 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news-features/what-mythos-gptcybe-ai-mean-for/ https://www.infosecurity-magazine.com/news/mustang-panda-fdmtp-backdoor-apj/ Mustang Panda campaign deploys updated FDMTP backdoor against Asia-Pacific and Japan networks Thu, 14 May 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/mustang-panda-fdmtp-backdoor-apj/ https://www.infosecurity-magazine.com/interviews/how-alpines-head-of-it-secures-an/ In Formula 1 speed is of the essence and team members need secure, but swift, access to data at all times. Here’s how BWT Alpine Formula One Team ensures it meets that challenge all season long Thu, 14 May 2026 09:30:00 GMT https://www.infosecurity-magazine.com/interviews/how-alpines-head-of-it-secures-an/ https://www.infosecurity-magazine.com/news/ransomware-over-half-cisos-would/ Survey of cybersecurity leaders suggests that majority would strongly consider paying cybercriminals, if that’s what it took to help restore encrypted systems Wed, 13 May 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/ransomware-over-half-cisos-would/ https://www.infosecurity-magazine.com/news/us-fcc-relaxes-foreign-router-ban/ The same extension applies to security updates shipped to US-based users of foreign-made drones Mon, 11 May 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/us-fcc-relaxes-foreign-router-ban/ https://www.infosecurity-magazine.com/news/australian-cyber-security-centre/ ACSC warns over a campaign targeting organizations which uses ClickFix to deliver Vidar infostealer malware Fri, 08 May 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/australian-cyber-security-centre/ https://www.infosecurity-magazine.com/news/llm-critical-infrastructure/ Commercial AI models were used to help plan and conduct cyber-attack against operational technology of a water and drainage facility, say researchers Thu, 07 May 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/llm-critical-infrastructure/ https://www.infosecurity-magazine.com/opinions/lessons-learned-from-colonial/ In May 2021, a coordinated government response helped contain the ransomware attack that disrupted America’s gas supply. Are we ready for the next major attack against critical infrastructure? Wed, 06 May 2026 13:30:00 GMT https://www.infosecurity-magazine.com/opinions/lessons-learned-from-colonial/ https://www.infosecurity-magazine.com/news/cisa-ci-fortify-isolation-recovery/ CISA’s CI Fortify initiative aim for critical infrastructure operators to build isolation & recovery Wed, 06 May 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/cisa-ci-fortify-isolation-recovery/ https://www.infosecurity-magazine.com/news/trellix-reveals-unauthorized/ Security vendor Trellix has suffered a breach involving unauthorized access Tue, 05 May 2026 08:55:00 GMT https://www.infosecurity-magazine.com/news/trellix-reveals-unauthorized/ https://www.infosecurity-magazine.com/news/small-defense-firms-lack-network/ Team Cymru’s Stephen Campbell warned that small US defense contractors are not well prepared to face cyber intrusions through edge devices Mon, 04 May 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/small-defense-firms-lack-network/ https://www.infosecurity-magazine.com/opinions/adapt-defenses-to-protect-against/ Democratization of cybercrime is driving PhaaS expansion. Here's what you need to know to protect your network Fri, 01 May 2026 09:00:00 GMT https://www.infosecurity-magazine.com/opinions/adapt-defenses-to-protect-against/ https://www.infosecurity-magazine.com/interviews/interview-ykk-securing-largest/ Infosecurity spoke to YKK Americas’ cybersecurity leader Rod Goldsmith about securing the world’s largest zipper manufacturer and protecting a global apparel supply chain Thu, 30 Apr 2026 11:30:00 GMT https://www.infosecurity-magazine.com/interviews/interview-ykk-securing-largest/ https://www.infosecurity-magazine.com/opinions/rising-risk-landscape-for-critical/ Cyber resilience in critical infrastructure is essential to critical services running. A stronger mindset is needed to protect against attacks Thu, 23 Apr 2026 10:00:00 GMT https://www.infosecurity-magazine.com/opinions/rising-risk-landscape-for-critical/ https://www.infosecurity-magazine.com/news/ncsc-backs-passkeys-new-era-of/ The UK’s NCSC has fully backed passkeys as consumers’ first choice for login, citing progress with FIDO and successful use across the NHS Thu, 23 Apr 2026 08:45:00 GMT https://www.infosecurity-magazine.com/news/ncsc-backs-passkeys-new-era-of/ https://www.infosecurity-magazine.com/news/macos-lotl-techniques-enterprise/ macOS LOTL techniques bypass detection using native tools and metadata abuse Wed, 22 Apr 2026 16:30:00 GMT https://www.infosecurity-magazine.com/news/macos-lotl-techniques-enterprise/ https://www.infosecurity-magazine.com/news/ncsc-silentglass-a-plugin-stop/ The UK’s cybersecurity agency said the devices will be available for purchase by organizations around the world Wed, 22 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/ncsc-silentglass-a-plugin-stop/ https://www.infosecurity-magazine.com/news/uk-pledges-90m-for-cybersecurity/ UK unveils £90m cybersecurity funding at CYBERUK to boost SME resilience, promote Cyber Essentials and a new Cyber Resilience Pledge, sparking industry debate Wed, 22 Apr 2026 14:10:00 GMT https://www.infosecurity-magazine.com/news/uk-pledges-90m-for-cybersecurity/ https://www.infosecurity-magazine.com/news/zionsiphon-malware-water/ ZionSiphon malware targets OT water systems with sabotage and ICS scanning capabilities Mon, 20 Apr 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/zionsiphon-malware-water/ https://www.infosecurity-magazine.com/opinions/openclaw-exposes-real-security/ As recent incidents have showed, without effective governance, visibility and control, risks around Agentic AI can escalate rapidly Fri, 17 Apr 2026 14:30:00 GMT https://www.infosecurity-magazine.com/opinions/openclaw-exposes-real-security/ https://www.infosecurity-magazine.com/news/cookeville-medical-center-data/ Tennessee's CRMC notifies over 337,000 patients of Rhysida ransomware breach exposing sensitive data Thu, 16 Apr 2026 15:01:00 GMT https://www.infosecurity-magazine.com/news/cookeville-medical-center-data/ https://www.infosecurity-magazine.com/news/researchers-surge-bruteforce/ Barracuda says 88% of brute-force attempts in Q1 were from the region Wed, 15 Apr 2026 09:45:00 GMT https://www.infosecurity-magazine.com/news/researchers-surge-bruteforce/ https://www.infosecurity-magazine.com/news/us-thwarts-dns-hijacking-network/ The FBI deployed a method to unplug US-based routers compromised by APT28 from the threat actor’s malicious network Wed, 08 Apr 2026 10:03:00 GMT https://www.infosecurity-magazine.com/news/us-thwarts-dns-hijacking-network/ https://www.infosecurity-magazine.com/opinions/when-world-splits-are-businesses/ Geopolitical rifts are becoming more frequent, more complex and more interconnected. Businesses cannot control global politics, but they can control their preparedness Mon, 06 Apr 2026 14:01:00 GMT https://www.infosecurity-magazine.com/opinions/when-world-splits-are-businesses/ https://www.infosecurity-magazine.com/opinions/uk-cyber-bill-what-ot-it-needs-now/ While the bill’s fine points may still evolve, its overall direction is clear. OT operators should act now. Fri, 03 Apr 2026 10:01:00 GMT https://www.infosecurity-magazine.com/opinions/uk-cyber-bill-what-ot-it-needs-now/ https://www.infosecurity-magazine.com/news/most-cni-firms-5m-downtime-ot/ E2e-assure says 80% of critical infrastructure providers could face millions in downtime from cyber-attacks Thu, 02 Apr 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/most-cni-firms-5m-downtime-ot/ https://www.infosecurity-magazine.com/news/deepload-malware-clickfix-ai-code/ Researchers at ReliaQuest warn of persistent malware campaign targeting enterprise credentials Mon, 30 Mar 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/deepload-malware-clickfix-ai-code/ https://www.infosecurity-magazine.com/news/critical-citrix-netscaler/ Researchers from watchTowr and Defused have found evidence that attackers are actively exploiting CVE-2026-3055, a critical NetScaler vulnerability Mon, 30 Mar 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/critical-citrix-netscaler/ https://www.infosecurity-magazine.com/news/critical-oracle-weblogic-rce/ Attackers rapidly exploited a critical Oracle WebLogic RCE flaw the same day exploit code was released, according to a CloudSEK honeypot study Thu, 26 Mar 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/critical-oracle-weblogic-rce/ https://www.infosecurity-magazine.com/news/hackers-exploit-id-industrial-scale/ Cybersecurity company’s annual report issues warning over a “mass-marketed impersonation crisis” over attackers abusing legitimate credentials Wed, 25 Mar 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/hackers-exploit-id-industrial-scale/ https://www.infosecurity-magazine.com/opinions/supply-chain-cyber-leadership/ In an increasingly interconnected business environment, third-party resilience is no longer optional. Wed, 25 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/opinions/supply-chain-cyber-leadership/ https://www.infosecurity-magazine.com/news/us-fcc-bans-foreign-made-routers/ The US Federal Communications Commission has placed all “consumer-grade” internet routers produced outside the US on its “covered list” Wed, 25 Mar 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/us-fcc-bans-foreign-made-routers/ https://www.infosecurity-magazine.com/news/citrix-patch-netscaler/ A critical vulnerability in Citrix’s NetScaler products allows unauthenticated remote attackers to leak information from the appliance's memory Tue, 24 Mar 2026 15:15:00 GMT https://www.infosecurity-magazine.com/news/citrix-patch-netscaler/ https://www.infosecurity-magazine.com/news/cybersecurity-software-failure-20/ Poor patch management, increasingly complex IT environments and continued use of obsolete software puts organizations at risk from cyber threats, says the Absolute Security 2026 Resilience Risk Index Tue, 24 Mar 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-software-failure-20/ https://www.infosecurity-magazine.com/news/cyber-staff-unsure-on-preventing/ ISACA survey found that confusion over responsibility and lack of understanding around AI cyber-attacks makes containing them difficult Mon, 23 Mar 2026 16:30:00 GMT https://www.infosecurity-magazine.com/news/cyber-staff-unsure-on-preventing/ https://www.infosecurity-magazine.com/news/cisa-orders-us-government-patch/ CISA added CVE-2026-20131 to its KEV catalog as it is being used in ransomware campaigns Mon, 23 Mar 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/cisa-orders-us-government-patch/ https://www.infosecurity-magazine.com/opinions/strategic-leadership-in-digital/ Executives who treat transformation as a technology upgrade often see limited returns. Those who treat it as a strategic reinvention unlock new business models, security by design and adaptive operating models. Fri, 20 Mar 2026 10:00:00 GMT https://www.infosecurity-magazine.com/opinions/strategic-leadership-in-digital/ https://www.infosecurity-magazine.com/news/ransomware-affiliate-gentlemen/ Hastalamuerte leaks The Gentlemen RaaS ops: FortiGate exploits, BYOVD evasion, Qilin split tactics Thu, 19 Mar 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-affiliate-gentlemen/ https://www.infosecurity-magazine.com/news-features/what-cisos-should-know-and-do/ Infosecurity spoke to several experts, including OpenClaw’s own security advisor, to explore what CISOs should do to contain the viral AI agent tool’s security vulnerabilities Fri, 13 Mar 2026 14:05:00 GMT https://www.infosecurity-magazine.com/news-features/what-cisos-should-know-and-do/ https://www.infosecurity-magazine.com/opinions/eu-vulnerability-database/ In a world where attackers innovate without central permission, defenders must learn to do the same Fri, 13 Mar 2026 11:00:00 GMT https://www.infosecurity-magazine.com/opinions/eu-vulnerability-database/ https://www.infosecurity-magazine.com/news/cisa-cisco-sd-wan-flaws-directive/ CISA issued urgent directive as attackers exploit Cisco SD-WAN flaw granting admin access to networks Thu, 12 Mar 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/cisa-cisco-sd-wan-flaws-directive/ https://www.infosecurity-magazine.com/news/wordpress-clickfix-infostealer/ Over 250 legitimate websites, including news outlets and a US Senate candidate’s official webpage, been compromised to infect visitors with infostealers, warn Rapid7 researchers Wed, 11 Mar 2026 14:45:00 GMT https://www.infosecurity-magazine.com/news/wordpress-clickfix-infostealer/ https://www.infosecurity-magazine.com/blogs/expanded-identity-attack-vectors/ Modern identity fraud has shifted from forging documents to manipulating the digital signals automated systems rely on to determine trust Wed, 11 Mar 2026 10:15:00 GMT https://www.infosecurity-magazine.com/blogs/expanded-identity-attack-vectors/ https://www.infosecurity-magazine.com/news/ai-security-startups-cyber/ Over one in five winners of IT-Harvest’s 2026 Cyber 150 are AI security companies Mon, 09 Mar 2026 13:25:00 GMT https://www.infosecurity-magazine.com/news/ai-security-startups-cyber/ https://www.infosecurity-magazine.com/news/zero-day-enterprise-record-high/ Almost a quarter of the zero days detected by Google in 2025 targeted security and networking appliances Fri, 06 Mar 2026 12:29:00 GMT https://www.infosecurity-magazine.com/news/zero-day-enterprise-record-high/ https://www.infosecurity-magazine.com/news/cisco-issues-patches-48/ Two of the 48 Cisco vulnerabilities, affecting Secure Firewall Management Center, are maximum-severity flaws Thu, 05 Mar 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/cisco-issues-patches-48/ https://www.infosecurity-magazine.com/news/gcot-6g-cybersecurity-guidelines/ A coalition of seven Western nations has launched guidelines to help integrate security-by-design principles into future 6G standards Wed, 04 Mar 2026 16:30:00 GMT https://www.infosecurity-magazine.com/news/gcot-6g-cybersecurity-guidelines/ https://www.infosecurity-magazine.com/news/iran-attacks-surveillance-cameras/ Increased attempts to compromise surveillance cameras linked to Iran during Middle East conflict Wed, 04 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/iran-attacks-surveillance-cameras/ https://www.infosecurity-magazine.com/news/iran-cyber-attacks-global-google/ John Hultquist suggests “aggressive” Iranian cyber attackers will target the US and its Gulf allies with plausibly deniable ransomware attacks, hacktivist campaigns and more Mon, 02 Mar 2026 15:45:00 GMT https://www.infosecurity-magazine.com/news/iran-cyber-attacks-global-google/ https://www.infosecurity-magazine.com/news/project-compass-com-arrests/ International law enforcement operation led by Europol targets network of teenagers and young adults involved in ransomware attacks, extortion and other crimes Fri, 27 Feb 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/project-compass-com-arrests/ https://www.infosecurity-magazine.com/news/google-prolific-china-hacking/ UNC2814 hit 53 victims in 42 countries with novel backdoor in decade long cyber espionage operation Thu, 26 Feb 2026 12:09:00 GMT https://www.infosecurity-magazine.com/news/google-prolific-china-hacking/ https://www.infosecurity-magazine.com/news/ai-accelerates-attack-breakout/ ReliaQuest claims AI has reduced breakout and exfiltration time to under 10 minutes Tue, 24 Feb 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/ai-accelerates-attack-breakout/ https://www.infosecurity-magazine.com/news/ai-powered-cyberattacks-up/ CrowdStrike Global Threat Report warns how adversaries are leveraging AI to make campaigns more efficient and more effective Tue, 24 Feb 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/ai-powered-cyberattacks-up/ https://www.infosecurity-magazine.com/opinions/why-your-organization-should-start/ Quantum preparedness manageable, using skills and resources security teams already have and embedding the activities in ongoing security remediation work Wed, 18 Feb 2026 14:01:00 GMT https://www.infosecurity-magazine.com/opinions/why-your-organization-should-start/ https://www.infosecurity-magazine.com/interviews/national-gas-cto-darren-curley-it/ In conversation with Infosecurity, National Gas CTO Darren Curley explains why more security solutions don’t always mean better protection Wed, 18 Feb 2026 13:00:00 GMT https://www.infosecurity-magazine.com/interviews/national-gas-cto-darren-curley-it/ https://www.infosecurity-magazine.com/news/rise-in-ransomware-targeting/ Dragos annual report warns of a surge in ransomware attacks causing increased operational disruption in industrial environments Tue, 17 Feb 2026 12:50:00 GMT https://www.infosecurity-magazine.com/news/rise-in-ransomware-targeting/ https://www.infosecurity-magazine.com/news-features/why-ransomware-remains/ Ten years ago, ransom demands cost under $1000. Now ransomware attacks cost millions and are more disruptive than ever. Infosecurity explores how we got here and what needs to change Tue, 17 Feb 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news-features/why-ransomware-remains/ https://www.infosecurity-magazine.com/news/sme-cyber-attack-threat-ncsc/ NCSC’s Richard Horne has warned that cybercriminals do not care about business size and called for SMEs to act now to secure their organizations Mon, 16 Feb 2026 16:30:00 GMT https://www.infosecurity-magazine.com/news/sme-cyber-attack-threat-ncsc/ https://www.infosecurity-magazine.com/news/world-leaks-ransomware-rustyrocket/ Accenture Cybersecurity warns over difficult to detect, “sophisticated toolset” being deployed as part of extortion campaigns Thu, 12 Feb 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/world-leaks-ransomware-rustyrocket/ https://www.infosecurity-magazine.com/news/ncsc-warning-severe-cyberattacks/ NCSC call firms to ‘act now’ following disruptive malware attacks targeting Polish energy providers Tue, 10 Feb 2026 11:50:00 GMT https://www.infosecurity-magazine.com/news/ncsc-warning-severe-cyberattacks/ https://www.infosecurity-magazine.com/news/us-agencies-scrap-end-of-support/ CISA has issued a new directive requiring federal agencies to decommission all end of support edge devices within 12 months to reduce ongoing exploitation risks Mon, 09 Feb 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/us-agencies-scrap-end-of-support/ https://www.infosecurity-magazine.com/news/global-systembc-botnet-10000/ SystemBC malware linked to 10,000 infected IPs, posing risks to sensitive government infrastructure Wed, 04 Feb 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/global-systembc-botnet-10000/ https://www.infosecurity-magazine.com/interviews/sophos-ciso-software-flaws-vendor/ In this Infosecurity interview, we speak with Sophos CISO Ross McKerchar about one of the biggest topics dominating cybersecurity headlines today, software vulnerabilities Tue, 03 Feb 2026 15:00:00 GMT https://www.infosecurity-magazine.com/interviews/sophos-ciso-software-flaws-vendor/ https://www.infosecurity-magazine.com/news/nsa-zero-trust-implementation/ NSA released new guidelines to help organizations achieve target-level Zero Trust maturity Mon, 02 Feb 2026 16:05:00 GMT https://www.infosecurity-magazine.com/news/nsa-zero-trust-implementation/ https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-jan-26/ 2026 has started with a string of cybersecurity industry mergers & acquisitions as vendors position themselves around agentic AI Mon, 02 Feb 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-jan-26/ https://www.infosecurity-magazine.com/news/google-disrupts-proxy-networks/ Google has taken coordinated action against the massive IPIDEA residential proxy network, enhancing customer protections and disrupting cybercrime operations Thu, 29 Jan 2026 17:15:00 GMT https://www.infosecurity-magazine.com/news/google-disrupts-proxy-networks/ https://www.infosecurity-magazine.com/news/fbi-operation-winter-shield-cyber/ The FBI outlines ten actions which organizations can take to defend networks against cybercriminal and nation-state threats Thu, 29 Jan 2026 16:50:00 GMT https://www.infosecurity-magazine.com/news/fbi-operation-winter-shield-cyber/ https://www.infosecurity-magazine.com/news-features/data-privacy-day-ai-rise-protect/ As AI tools like ChatGPT and Microsoft 365 Copilot surge in the workplace, Data Privacy Day 2026 highlights urgent data protection risks. Discover how employee AI use could leak sensitive information Wed, 28 Jan 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news-features/data-privacy-day-ai-rise-protect/ https://www.infosecurity-magazine.com/news/pyodide-sandbox-escape-rce-grist/ Critical sandbox escape vulnerability in Grist-Core enables remote code execution via a malicious formula Tue, 27 Jan 2026 16:45:00 GMT https://www.infosecurity-magazine.com/news/pyodide-sandbox-escape-rce-grist/ https://www.infosecurity-magazine.com/news/cisa-post-quantum-cryptography/ CISA released initial list of PQC-capable hardware and software to guide companies amid quantum threats Mon, 26 Jan 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/cisa-post-quantum-cryptography/ https://www.infosecurity-magazine.com/news/nhs-open-letter-demands-improved/ Open letter by NHS technology leaders outlines plans to identify risks to software supply chain security across health and social care system Fri, 23 Jan 2026 14:38:00 GMT https://www.infosecurity-magazine.com/news/nhs-open-letter-demands-improved/ https://www.infosecurity-magazine.com/news/tamperedchef-malvertising-fake-pdf/ TamperedChef creates backdoors and steals user credentials – particularly in organizations reliant on technical equipment Fri, 16 Jan 2026 12:05:00 GMT https://www.infosecurity-magazine.com/news/tamperedchef-malvertising-fake-pdf/ https://www.infosecurity-magazine.com/news/rondodox-botnet-targets-hpe/ Check Point Research has reported a surge in attacks on a vulnerability in HPE OneView, driven by the Linux-based RondoDox botnet Fri, 16 Jan 2026 09:15:00 GMT https://www.infosecurity-magazine.com/news/rondodox-botnet-targets-hpe/ https://www.infosecurity-magazine.com/news/global-agencies-secure-industrial/ CISA, NCSC and the FBI have released a new security guide to enhance protection for OT environments Thu, 15 Jan 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/global-agencies-secure-industrial/ https://www.infosecurity-magazine.com/news/hackers-fake-paypal-notices-deploy/ Phishing attacks have been identified using fake PayPal alerts to exploit remote monitoring and management tools Wed, 14 Jan 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/hackers-fake-paypal-notices-deploy/ https://www.infosecurity-magazine.com/news/microsoft-three-zerodays-busy/ Microsoft has patched three zero-day vulnerabilities in the first patch Tuesday of 2026, including one under active exploitation Wed, 14 Jan 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/microsoft-three-zerodays-busy/ https://www.infosecurity-magazine.com/news/cisa-closes-ten-emergency/ US agency CISA has retired ten Emergency Directives issued between 2019 and 2024, marking a new step in managing federal cyber-risk Mon, 12 Jan 2026 16:45:00 GMT https://www.infosecurity-magazine.com/news/cisa-closes-ten-emergency/ https://www.infosecurity-magazine.com/news/gobruteforcer-botnet-linux-servers/ The GoBruteforcer botnet has been observed targeting exposed Linux servers on services like FTP and MySQL Thu, 08 Jan 2026 17:30:00 GMT https://www.infosecurity-magazine.com/news/gobruteforcer-botnet-linux-servers/ https://www.infosecurity-magazine.com/news/malware-loader-pkrmtsi-payloads/ Malicious Windows packer named pkr_mtsi used as a flexible malware loader in malvertising campaigns Wed, 07 Jan 2026 16:45:00 GMT https://www.infosecurity-magazine.com/news/malware-loader-pkrmtsi-payloads/ https://www.infosecurity-magazine.com/blogs/inside-the-chip-cybersecurity/ Traditional defenses are no longer enough. As cyber threats burrow deeper into firmware and hardware, true protection must start at the source. This article explores a shift toward Hardware Root of Trust — embedding proactive, autonomous security inside the chip to redefine digital trust and resilience at the foundation Wed, 07 Jan 2026 09:40:00 GMT https://www.infosecurity-magazine.com/blogs/inside-the-chip-cybersecurity/ https://www.infosecurity-magazine.com/news-features/cybersecurity-for-critical/ Critical infrastructure faces growing cybersecurity risks as legacy systems converge with IT and cloud technologies. Explore the challenges, threats and strategies for securing CNI in a rapidly evolving digital landscape Thu, 01 Jan 2026 11:11:00 GMT https://www.infosecurity-magazine.com/news-features/cybersecurity-for-critical/ https://www.infosecurity-magazine.com/news/la-poste-still-offline-after-major/ French postal service warns of “major network incident” just before Christmas Wed, 24 Dec 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/la-poste-still-offline-after-major/ https://www.infosecurity-magazine.com/news/signed-variant-macsync-stealer/ A newly discovered macOS malware mimics legitimate apps code-signed and notarized by Apple Tue, 23 Dec 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/signed-variant-macsync-stealer/ https://www.infosecurity-magazine.com/news/nezha-abused-post-exploitation/ Open-source server monitoring tool, Nezha, is being exploited by attackers for remote system control Mon, 22 Dec 2025 14:30:00 GMT https://www.infosecurity-magazine.com/news/nezha-abused-post-exploitation/ https://www.infosecurity-magazine.com/news/chinese-ink-dragon-hides-european/ China’s Ink Dragon is using European government networks to hide its espionage activity Wed, 17 Dec 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/chinese-ink-dragon-hides-european/ https://www.infosecurity-magazine.com/news/amazon-russian-gru-hackers-target/ Amazon researchers believe this campaign is part of a bigger operation spearheaded by Russia’s military intelligence service, the GRU Tue, 16 Dec 2025 12:15:00 GMT https://www.infosecurity-magazine.com/news/amazon-russian-gru-hackers-target/ https://www.infosecurity-magazine.com/news/russian-phishing-phantom-stealer/ A new phishing campaign has been identified, delivering the Phantom information-stealing malware via an ISO attachment Mon, 15 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/russian-phishing-phantom-stealer/ https://www.infosecurity-magazine.com/news/top-25-dangerous-software/ MITRE has released its Top 25 CWE list for 2025, compiled from software and hardware flaws behind almost 40,000 CVEs Mon, 15 Dec 2025 10:45:00 GMT https://www.infosecurity-magazine.com/news/top-25-dangerous-software/ https://www.infosecurity-magazine.com/news/russia-hackers-target-us-critical/ Pro-Russia hacktivist groups have been observed exploiting exposed virtual network computing connections to breach OT systems Wed, 10 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/russia-hackers-target-us-critical/ https://www.infosecurity-magazine.com/news/microsoft-three-zerodays-patch/ December’s Patch Tuesday sees the release of patches for over 50 CVEs including three zero-days Wed, 10 Dec 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/microsoft-three-zerodays-patch/ https://www.infosecurity-magazine.com/news/marquis-software-breach/ A data breach at Marquis Software Solutions due to a firewall flaw has affected over 780,000 people across the US Mon, 08 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/marquis-software-breach/ https://www.infosecurity-magazine.com/news/reactjs-hit-by-react2shell/ A critical RCE flaw in React.js, dubbed React2Shell (CVE-2025-55182), has been disclosed with a maximum CVSS score of 10.0, posing severe risks for server-side implementations Fri, 05 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/reactjs-hit-by-react2shell/ https://www.infosecurity-magazine.com/news/louvre-bolster-security-57m-public/ The French museum is planning to revamp its safety and security systems following a high-profile burglary in October Fri, 05 Dec 2025 12:30:00 GMT https://www.infosecurity-magazine.com/news/louvre-bolster-security-57m-public/ https://www.infosecurity-magazine.com/news/uk-cyber-service-blocks-billion/ A new cyber defense service has prevented almost one billion early-stage cyber-attacks in the past year, British Security Minister claims Wed, 03 Dec 2025 16:08:00 GMT https://www.infosecurity-magazine.com/news/uk-cyber-service-blocks-billion/ https://www.infosecurity-magazine.com/news/australian-man-seven-years-evil/ A Western Australia man will spend seven years behind bars after stealing intimate data via Wi-Fi Mon, 01 Dec 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/australian-man-seven-years-evil/ https://www.infosecurity-magazine.com/news/fcc-hackers-hijacking-radio/ Hackers have been hijacking US radio equipment to broadcast false emergency alerts, prompting FCC warnings Thu, 27 Nov 2025 16:50:00 GMT https://www.infosecurity-magazine.com/news/fcc-hackers-hijacking-radio/ https://www.infosecurity-magazine.com/news/flexibleferret-malware-macos-go/ A new macOS malware chain using staged scripts and a Go-based backdoor has been attributed to FlexibleFerret, designed to steal credentials and maintain system access Tue, 25 Nov 2025 13:45:00 GMT https://www.infosecurity-magazine.com/news/flexibleferret-malware-macos-go/ https://www.infosecurity-magazine.com/news/chinal-operation-wrthug-thousands/ SecurityScorecard has revealed a new Chinese campaign targeting thousands of ASUS routers globally Wed, 19 Nov 2025 10:20:00 GMT https://www.infosecurity-magazine.com/news/chinal-operation-wrthug-thousands/ https://www.infosecurity-magazine.com/news/half-ransomware-access-hijacked/ Beazley Security data finds the top cause of initial access for ransomware in Q3 was compromised VPN credentials Wed, 19 Nov 2025 09:40:00 GMT https://www.infosecurity-magazine.com/news/half-ransomware-access-hijacked/ https://www.infosecurity-magazine.com/news/half-million-stolen-ftse-100/ Socura finds 460,000 compromised credentials belonging to FTSE 100 company employees Tue, 18 Nov 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/half-million-stolen-ftse-100/ https://www.infosecurity-magazine.com/news/kraken-benchmarking-enhance/ Cisco Talos has observed overlaps between Kraken and the earlier HelloKitty cartel through attack tactics using SMB flaws for big-game hunting and double extortion Mon, 17 Nov 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/kraken-benchmarking-enhance/ https://www.infosecurity-magazine.com/news/cyber-readiness-stalls-incident/ New Immersive report finds cyber resilience and decision making are flatlining Mon, 17 Nov 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/cyber-readiness-stalls-incident/ https://www.infosecurity-magazine.com/news/microsoft-windows-kernel-zero-day/ Microsoft has patched a zero-day vulnerability in the Windows Kernel under active exploitation by threat actors Wed, 12 Nov 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/microsoft-windows-kernel-zero-day/ https://www.infosecurity-magazine.com/news/government-cyber-security/ The UK government is overhauling cybersecurity laws for the first time since 2018 with the Cyber Security and Resilience Bill Wed, 12 Nov 2025 09:40:00 GMT https://www.infosecurity-magazine.com/news/government-cyber-security/ https://www.infosecurity-magazine.com/news/qilin-ransomware-activity-surges/ Qilin group ransomware incidents have surged in SMBs, exploiting security gaps and collaborating with Scattered Spider threat group Tue, 11 Nov 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/qilin-ransomware-activity-surges/ https://www.infosecurity-magazine.com/news/ncsc-retire-web-check-mail-check/ The UK’s National Cyber Security Centre has urged users of its Web Check and Mail Check services to find alternatives Mon, 10 Nov 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/ncsc-retire-web-check-mail-check/ https://www.infosecurity-magazine.com/blogs/strategies-secure-saas-environments/ Misalignment between InfoSec and SaaS teams creates an "InfoSec↔SaaS Divide," leading to delays and risk exposure. Bridging this operational gap is vital for securing SaaS data and unlocking the future benefits of agentic AI Fri, 07 Nov 2025 08:30:00 GMT https://www.infosecurity-magazine.com/blogs/strategies-secure-saas-environments/ https://www.infosecurity-magazine.com/news/hacktivistdriven-ddos-attacks/ ENISA report reveals DDoS accounted for 60% of public sector security incidents last year Thu, 06 Nov 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/hacktivistdriven-ddos-attacks/ https://www.infosecurity-magazine.com/news/identity-is-now-the-top-cloud-risk/ ReliaQuest data reveals identity issues were responsible for 44% of cloud security alerts in Q3 Tue, 04 Nov 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news/identity-is-now-the-top-cloud-risk/ https://www.infosecurity-magazine.com/news/cisa-nsa-secure-exchange-servers/ CISA and NSA have released a blueprint to enhance Microsoft Exchange Server security against cyber-attacks Mon, 03 Nov 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/cisa-nsa-secure-exchange-servers/ https://www.infosecurity-magazine.com/news/gdi-flaws-enable-rce-windows/ Flaws in Windows Graphics Device Interface (GDI) have been identified that allow remote code execution and information disclosure Mon, 03 Nov 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/gdi-flaws-enable-rce-windows/ https://www.infosecurity-magazine.com/news/php-servers-and-iot-devices-cyber/ A rise in attacks on PHP servers, IoT devices and cloud gateways is linked to botnets exploiting flaws, according to new research published by Qualys Wed, 29 Oct 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news/php-servers-and-iot-devices-cyber/ https://www.infosecurity-magazine.com/news/chrome-zero-day-flaw-exploited/ A zero-day flaw in Chrome has been exploited by Mem3nt0 mori in Operation ForumTroll as part of a targeted espionage campaign Tue, 28 Oct 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/chrome-zero-day-flaw-exploited/ https://www.infosecurity-magazine.com/news/actively-exploited-wsus-bug-cisa/ Sysadmins are urged to patch WSUS vulnerability CVE-2025-59287 as soon as possible, with federal agencies required to update by November 14 Tue, 28 Oct 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/actively-exploited-wsus-bug-cisa/ https://www.infosecurity-magazine.com/news/qilin-ransomware-40-cases-monthly/ Qilin ransomware activity has surged in late 2025, threatening data leaks via double extortion tactics Mon, 27 Oct 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/qilin-ransomware-40-cases-monthly/ https://www.infosecurity-magazine.com/interviews/chrome-enterprise-how-to-protect/ Chrome Enterprise’s Dean Paterek tells Infosecurity about the cybersecurity challenges in the browser, and how Chrome Enterprise customers can ramp up their defenses Fri, 24 Oct 2025 15:10:00 GMT https://www.infosecurity-magazine.com/interviews/chrome-enterprise-how-to-protect/ https://www.infosecurity-magazine.com/news/vulnerabilities-tplink-vpn-routers/ Forescout researchers discovered critical and high-severity vulnerabilities in several TP-Link VPN routers Thu, 23 Oct 2025 12:30:00 GMT https://www.infosecurity-magazine.com/news/vulnerabilities-tplink-vpn-routers/ https://www.infosecurity-magazine.com/opinions/is-edr-giving-you-a-false-sense-of/ Traditional EDR tools are falling short as modern threats evolve. This article explores how fast-moving adversaries are exploiting defender tools, creating a false sense of security and overwhelming security teams Wed, 22 Oct 2025 15:15:00 GMT https://www.infosecurity-magazine.com/opinions/is-edr-giving-you-a-false-sense-of/ https://www.infosecurity-magazine.com/news/ransomware-payouts-surge-dollar36m/ According to ExtraHop’s latest threat landscape report, average ransomware payments surged 44% to $3.6m in 2025 despite fewer incidents Tue, 21 Oct 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-payouts-surge-dollar36m/ https://www.infosecurity-magazine.com/news/watchguard-fireware-os-flaw/ A critical out-of-bounds write flaw (CVE-2025-9242) in WatchGuard Fireware OS could allow remote code execution Tue, 21 Oct 2025 11:42:00 GMT https://www.infosecurity-magazine.com/news/watchguard-fireware-os-flaw/ https://www.infosecurity-magazine.com/news/salt-typhoon-citrix-flaw-cyber/ A cyber intrusion by China-linked group Salt Typhoon has been observed targeting global infrastructure via DLL sideloading Mon, 20 Oct 2025 13:15:00 GMT https://www.infosecurity-magazine.com/news/salt-typhoon-citrix-flaw-cyber/ https://www.infosecurity-magazine.com/opinions/ciso-crucible-strength-control/ Deloitte's Peter Gooch discusses how CISOs can overcome the immense strains and challenges of their roles Fri, 17 Oct 2025 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/ciso-crucible-strength-control/ https://www.infosecurity-magazine.com/news/rootkit-campaign-exploits-cisco/ Trend Micro have reported a campaign exploiting a flaw in Cisco SNMP to install Linux rootkits on devices Thu, 16 Oct 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/rootkit-campaign-exploits-cisco/ https://www.infosecurity-magazine.com/news/microsoft-process-100-trillion/ Microsoft systems analyze over 100 trillion daily signals, suggesting dramatically increasing AI-driven cyber-threats Thu, 16 Oct 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-process-100-trillion/ https://www.infosecurity-magazine.com/news/f5-nation-state-breach-immediate/ F5 has admitted a nation state actor has stolen source code and information on undisclosed vulnerabilities Thu, 16 Oct 2025 09:39:00 GMT https://www.infosecurity-magazine.com/news/f5-nation-state-breach-immediate/ https://www.infosecurity-magazine.com/news/last-windows-10-patch-tuesday-six/ Microsoft has fixed over 170 CVEs in October’s Patch Tuesday, including six zero-day vulnerabilities Wed, 15 Oct 2025 10:45:00 GMT https://www.infosecurity-magazine.com/news/last-windows-10-patch-tuesday-six/ https://www.infosecurity-magazine.com/news/legacy-windows-protocols-expose/ Legacy Windows protocols are still exposing organizations to credential theft, Resecurity found Tue, 14 Oct 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/legacy-windows-protocols-expose/ https://www.infosecurity-magazine.com/news/hackers-target-screenconnects/ A rise in attacks exploiting RMM tools like ScreenConnect enables system control via phishing tactics Mon, 13 Oct 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/hackers-target-screenconnects/ https://www.infosecurity-magazine.com/news/apple-bug-bounty-payouts-can-now/ Apple has doubled its top bug bounty reward to $2m but with bonuses it could reach $5m Mon, 13 Oct 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/apple-bug-bounty-payouts-can-now/ https://www.infosecurity-magazine.com/news/russia-hacktivistsattack-water/ Forescout said that the TwoNet actor was lured into attacking a honeypot disguised as a water treatment utility, providing insights into the group’s tactics Fri, 10 Oct 2025 09:15:00 GMT https://www.infosecurity-magazine.com/news/russia-hacktivistsattack-water/ https://www.infosecurity-magazine.com/news/sonicwall-cloud-firewall/ SonicWall said that a threat actor has accessed files containing encrypted credentials and configuration data for all customers who have used its cloud backup service Thu, 09 Oct 2025 12:10:00 GMT https://www.infosecurity-magazine.com/news/sonicwall-cloud-firewall/ https://www.infosecurity-magazine.com/news/ncsc-observability-threat-hunting/ The UK’s National Cyber Security Centre has released new guidance to help firms improve observability and threat hunting Thu, 09 Oct 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/ncsc-observability-threat-hunting/ https://www.infosecurity-magazine.com/news/redis-servers-remote-exploitation/ A critical Redis flaw, dubbed “RediShell,” has exposed 60,000 unprotected servers to exploitation Tue, 07 Oct 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/redis-servers-remote-exploitation/ https://www.infosecurity-magazine.com/interviews/ing-ciso-tech-regulations/ ING CISO, Debbie Janecek, spoke to Infosecurity about how new regulations and technologies are impacting security strategies in the finance sector Mon, 06 Oct 2025 12:00:00 GMT https://www.infosecurity-magazine.com/interviews/ing-ciso-tech-regulations/ https://www.infosecurity-magazine.com/news/scanning-of-palo-alto-portals/ Experts warn that threat actors may be gearing up for compromise after large uptick in scans of Palo Alto Network portals Mon, 06 Oct 2025 11:00:00 GMT https://www.infosecurity-magazine.com/news/scanning-of-palo-alto-portals/ https://www.infosecurity-magazine.com/news/free-vpn-apps-security-flaws/ A new study by Zimperium has revealed serious risks in free VPN apps, exposing users to privacy threats and security flaws Thu, 02 Oct 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/free-vpn-apps-security-flaws/ https://www.infosecurity-magazine.com/news/phishing-dominates-euwide/ ENISA reveals phishing and vulnerability exploitation accounted for majority of intrusions in past year Thu, 02 Oct 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/phishing-dominates-euwide/ https://www.infosecurity-magazine.com/news/smishing-exploit-cellular-routers/ New smishing attacks exploit Milesight routers to send phishing texts targeting Belgian users Tue, 30 Sep 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/smishing-exploit-cellular-routers/ https://www.infosecurity-magazine.com/news/asahi-operations-japan-attack/ Japanese brewery giant Asahi revealed that a cyber-attack had caused a “system failure”, with order and shipment operations suspended in Japan Tue, 30 Sep 2025 11:00:00 GMT https://www.infosecurity-magazine.com/news/asahi-operations-japan-attack/ https://www.infosecurity-magazine.com/news/dutch-teens-arrested/ While the exact suspicion was yet to be revealed it is linked to "foreign interference" Mon, 29 Sep 2025 17:00:00 GMT https://www.infosecurity-magazine.com/news/dutch-teens-arrested/ https://www.infosecurity-magazine.com/news/cell-tower-hacking-gear-seized-nyc/ The equipment could be used to disable cell phone towers and conduct denial-of-services attacks across New York City Wed, 24 Sep 2025 11:15:00 GMT https://www.infosecurity-magazine.com/news/cell-tower-hacking-gear-seized-nyc/ https://www.infosecurity-magazine.com/news/cyber-vendors-pull-out-mitre/ MITRE said it understands why Microsoft, SentinelOne and Palo Alto pulled out of its 2025 of ATT&CK Evaluations test – and promises to do better next year Mon, 22 Sep 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/cyber-vendors-pull-out-mitre/ https://www.infosecurity-magazine.com/news-features/shadow-ai-governance-cisos/ Shadow AI is on the rise and security leaders must develop strategies to mitigate this risk while ensuring employees can enjoy the innovative benefits these tools have to offer Thu, 18 Sep 2025 09:00:00 GMT https://www.infosecurity-magazine.com/news-features/shadow-ai-governance-cisos/ https://www.infosecurity-magazine.com/news/finwise-bank-warns-of-insider-data/ An insider data breach at FinWise may have impacted 689,000 customers Tue, 16 Sep 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/finwise-bank-warns-of-insider-data/ https://www.infosecurity-magazine.com/news/fileless-malware-deploys-advanced/ A sophisticated fileless malware campaign has been observed using legitimate tools to deliver AsyncRAT executed in memory Thu, 11 Sep 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/fileless-malware-deploys-advanced/ https://www.infosecurity-magazine.com/news/wyden-urges-ascension-hack-ftc/ Senator Ron Wyden of Oregon has urged the FTC to investigate Microsoft for cybersecurity lapses linked to ransomware attacks on US critical infrastructure Thu, 11 Sep 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/wyden-urges-ascension-hack-ftc/ https://www.infosecurity-magazine.com/news/two-zero-days-patch-tuesday-cves/ Microsoft has fixed over 80 vulnerabilities including two publicly disclosed zero-days in its latest Patch Tuesday release Wed, 10 Sep 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/two-zero-days-patch-tuesday-cves/ https://www.infosecurity-magazine.com/news/salty2fa-phishing-kit/ Salty2FA phishing campaign showcases advanced techniques and professionalism of cybercrime operations Tue, 09 Sep 2025 14:30:00 GMT https://www.infosecurity-magazine.com/news/salty2fa-phishing-kit/ https://www.infosecurity-magazine.com/news/npm-supply-chain-attack-averted/ What could have been a historic supply chain attack seems to have been averted due to the rapid response of the open source community Tue, 09 Sep 2025 13:30:00 GMT https://www.infosecurity-magazine.com/news/npm-supply-chain-attack-averted/ https://www.infosecurity-magazine.com/news/cloudflare-victimized-in-salesloft/ Cloudflare has notified customers that hackers may have accessed their data as part of the Salesloft Drift campaign Wed, 03 Sep 2025 11:45:00 GMT https://www.infosecurity-magazine.com/news/cloudflare-victimized-in-salesloft/ https://www.infosecurity-magazine.com/news/azure-ad-credentials-exposed/ Experts have revealed an Azure AD vulnerability exposing ClientId and ClientSecret in a publicly accessible appsettings.json file Tue, 02 Sep 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/azure-ad-credentials-exposed/ https://www.infosecurity-magazine.com/news/salesloft-attacks-target-google/ Adversaries targeting the Salesloft Drift application integration with Salesforce have also compromised Google Workspace accounts Mon, 01 Sep 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/salesloft-attacks-target-google/ https://www.infosecurity-magazine.com/news/whatsapp-patches-zeroday-zeroclick/ WhatsApp has fixed a zero-day vulnerability linked to a sophisticated cyber-attack Mon, 01 Sep 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/whatsapp-patches-zeroday-zeroclick/ https://www.infosecurity-magazine.com/news/state-hackers-majority/ Recorded Future highlighted the vast capabilities of state actors to rapidly weaponize newly disclosed vulnerabilities for geopolitical purposes Fri, 29 Aug 2025 11:35:00 GMT https://www.infosecurity-magazine.com/news/state-hackers-majority/ https://www.infosecurity-magazine.com/news/fake-support-attacks-hit-microsoft/ Fake IT support lures are being used to trick employees into installing remote‑access tools via Microsoft Teams Thu, 28 Aug 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/fake-support-attacks-hit-microsoft/ https://www.infosecurity-magazine.com/news/china-salt-typhoon-dutch-telcos/ Salt Typhoon’s primary Dutch targets were small internet service providers and hosting providers Thu, 28 Aug 2025 14:45:00 GMT https://www.infosecurity-magazine.com/news/china-salt-typhoon-dutch-telcos/ https://www.infosecurity-magazine.com/news/ransomware-deletes-data-backups/ Microsoft observed Storm-0501 pivot to the victim’s cloud environment to exfiltrate data rapidly and prevent the victim’s recovery Thu, 28 Aug 2025 09:05:00 GMT https://www.infosecurity-magazine.com/news/ransomware-deletes-data-backups/ https://www.infosecurity-magazine.com/news/nevada-security-incident-shuts-down/ The Office of the Governor of Nevada revealed that the incident has shut down in-person State services, while government phone lines and websites are offline Wed, 27 Aug 2025 16:30:00 GMT https://www.infosecurity-magazine.com/news/nevada-security-incident-shuts-down/ https://www.infosecurity-magazine.com/news-features/legacy-it-strategic-priority-cisos/ Warnings about Windows 10's end-of-life date in October highlight the significant cyber risks posed by growing reliance on legacy IT Wed, 27 Aug 2025 11:30:00 GMT https://www.infosecurity-magazine.com/news-features/legacy-it-strategic-priority-cisos/ https://www.infosecurity-magazine.com/news/russian-espionage-group-targets/ Russian state-backed hackers are exploiting a seven-year-old Cisco Smart Install vulnerability (CVE-2018-0171) in end-of-life devices, prompting warnings from the FBI and Cisco Talos Thu, 21 Aug 2025 15:20:00 GMT https://www.infosecurity-magazine.com/news/russian-espionage-group-targets/ https://www.infosecurity-magazine.com/news/nist-unveils-guidelines-spot-face/ NIST has released new guidelines examining the pros and cons of detection methods for face morphing software Thu, 21 Aug 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/nist-unveils-guidelines-spot-face/ https://www.infosecurity-magazine.com/news/warlock-ransomware-sharepoint/ Trend Micro highlighted a sophisticated post-compromise attack chain to deploy the Warlock ransomware in unpatched SharePoint on-prem environments Wed, 20 Aug 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/warlock-ransomware-sharepoint/ https://www.infosecurity-magazine.com/news/microsoft-outofband-update/ Microsoft has issued an emergency patch to fix Windows recovery problems for some users Wed, 20 Aug 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/microsoft-outofband-update/ https://www.infosecurity-magazine.com/news/sap-netweaver-flaw-exploit-released/ A critical flaw in SAP NetWeaver AS Java is being widely exploited, allowing unauthenticated remote code execution Tue, 19 Aug 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/sap-netweaver-flaw-exploit-released/ https://www.infosecurity-magazine.com/news/canadian-financial-regulator-hacked/ The Canadian Investment Regulatory Organization (CIRO) said it will work to identify the personal information breached and notify those affected Tue, 19 Aug 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/canadian-financial-regulator-hacked/ https://www.infosecurity-magazine.com/news/attacker-patches-vulnerability/ Red Canary observed the novel tactic in a cluster of activity targeting a legacy vulnerability to access cloud-based Linux systems Tue, 19 Aug 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/attacker-patches-vulnerability/ https://www.infosecurity-magazine.com/news/usb-malware-spreads-cryptominer/ A multi-stage attack delivered via USB devices has been observed installing cryptomining malware using DLL hijacking and PowerShell Mon, 18 Aug 2025 15:40:00 GMT https://www.infosecurity-magazine.com/news/usb-malware-spreads-cryptominer/ https://www.infosecurity-magazine.com/news/chinese-apt-web-hosting-taiwan/ Cisco Talos observed the newly identified group compromise a Taiwanese web hosting provider to conduct a range of malicious activities Mon, 18 Aug 2025 13:45:00 GMT https://www.infosecurity-magazine.com/news/chinese-apt-web-hosting-taiwan/ https://www.infosecurity-magazine.com/news/cisco-critical-rce-flaw-firewall/ Cisco has issued a software update to address the vulnerability, which can allow an unauthenticated, remote attacker to inject arbitrary shell commands Fri, 15 Aug 2025 11:30:00 GMT https://www.infosecurity-magazine.com/news/cisco-critical-rce-flaw-firewall/ https://www.infosecurity-magazine.com/news/fortinet-exploit-code-available/ Fortinet reveals details of a new critical-rated vulnerability in FortiSIEM circulating in the wild Thu, 14 Aug 2025 10:45:00 GMT https://www.infosecurity-magazine.com/news/fortinet-exploit-code-available/ https://www.infosecurity-magazine.com/news/st-paul-mayor-interlock-data-leak/ Mayor of St. Paul, Minnesota, Melvin Carter, confirmed that employee data was published online by the Interlock ransomware gang Wed, 13 Aug 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/st-paul-mayor-interlock-data-leak/ https://www.infosecurity-magazine.com/news/microsoft-fixes-100-cves-august/ Microsoft announced updates for 107 vulnerabilities on Patch Tuesday, including one zero-day Wed, 13 Aug 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/microsoft-fixes-100-cves-august/ https://www.infosecurity-magazine.com/news/servers-unpatched-microsoft/ Over 29,000 Microsoft Exchange servers remain unpatched against a vulnerability that could allow attackers to seize control of entire domains in hybrid cloud environments Tue, 12 Aug 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/servers-unpatched-microsoft/ https://www.infosecurity-magazine.com/news/cybercriminals-low-cost-initial/ Rapid7 found that threat actors are able to purchase low-cost initial access broker services, with many packages offering a variety of options Tue, 12 Aug 2025 14:30:00 GMT https://www.infosecurity-magazine.com/news/cybercriminals-low-cost-initial/ https://www.infosecurity-magazine.com/opinions/corporate-deepfake-safeguarding-ai/ Daryl Huff says businesses must fight fire with fire when it comes to defending against the rising corporate deepfake threat Fri, 08 Aug 2025 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/corporate-deepfake-safeguarding-ai/ https://www.infosecurity-magazine.com/news/microsoft-exchange-vulnerability/ Microsoft Exchange customers have been urged to apply fixes set out in a hybrid deployment security update published in April Thu, 07 Aug 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-exchange-vulnerability/ https://www.infosecurity-magazine.com/news/sonicwall-attacks-legacy-bug/ SonicWall has claimed an uptick in Akira ransomware intrusions is due to legacy password use Thu, 07 Aug 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/sonicwall-attacks-legacy-bug/ https://www.infosecurity-magazine.com/news/attackers-critical-apex-one/ Trend Micro has released a temporary fix for the flaws, which enable remote code execution on on-prem Apex One machines Wed, 06 Aug 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/attackers-critical-apex-one/ https://www.infosecurity-magazine.com/news/ncsc-updates-cyber-assessment/ The UK’s National Cyber Security Centre has released the Cyber Assessment Framework 4.0 Wed, 06 Aug 2025 10:45:00 GMT https://www.infosecurity-magazine.com/news/ncsc-updates-cyber-assessment/ https://www.infosecurity-magazine.com/news/proiran-hackers-aligned-cyber/ SecurityScorecard analysis highlights wide variety of Iranian threat actors and coordination with military activity Tue, 05 Aug 2025 11:30:00 GMT https://www.infosecurity-magazine.com/news/proiran-hackers-aligned-cyber/ https://www.infosecurity-magazine.com/news/microsoft-google-zero-day-exploits/ Forescout also observed a big rise in CVEs added to CISA’s KEV catalog, some of which impacted end-of-life products Mon, 04 Aug 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-google-zero-day-exploits/ https://www.infosecurity-magazine.com/news/uptick-akira-ransomware-actors/ Arctic Wolf has spotted an increase in Akira ransomware attacks targeting SonicWall SSL VPNs Mon, 04 Aug 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/uptick-akira-ransomware-actors/ https://www.infosecurity-magazine.com/news/secret-blizzard-moscow-embassies/ Microsoft has observed Russian state actor Secret Blizzard using an AiTM position to gain initial access, assisted by official domestic intercept systems Fri, 01 Aug 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/secret-blizzard-moscow-embassies/ https://www.infosecurity-magazine.com/news/hackers-exploit-vulnerabilities/ Spikes in attacker activity precede the disclosure of vulnerabilities 80% of the time, according to a new GreyNoise report Fri, 01 Aug 2025 11:15:00 GMT https://www.infosecurity-magazine.com/news/hackers-exploit-vulnerabilities/ https://www.infosecurity-magazine.com/news/staggering-800-rise-infostealer/ Flashpoint data reveals an 800% increase in credentials stolen via infostealers in just six months Fri, 01 Aug 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/staggering-800-rise-infostealer/ https://www.infosecurity-magazine.com/news/hafnium-chinese-surveillance-tools/ A SentinelLabs report has revealed patents linked to firms aiding China's cyber-espionage operations, exposing new capabilities Wed, 30 Jul 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/hafnium-chinese-surveillance-tools/ https://www.infosecurity-magazine.com/news/backdoor-atm-network-raspberry-pi/ A covert ATM attack used a Raspberry Pi to breach bank systems, employing stealthy malware and anti-forensics techniques Wed, 30 Jul 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/backdoor-atm-network-raspberry-pi/ https://www.infosecurity-magazine.com/news/owasp-agentic-ai-security-guidance/ The comprehensive guidance focuses on technical recommendations for securing agentic AI applications, from development to deployment Wed, 30 Jul 2025 09:00:00 GMT https://www.infosecurity-magazine.com/news/owasp-agentic-ai-security-guidance/ https://www.infosecurity-magazine.com/news/chinese-espionage-targets-vmware/ Sygnia observed Chinese cyber campaign dubbed Fire Ant deploying sophisticated techniques to gain full compromise of victim environments, discovering isolated assets Fri, 25 Jul 2025 12:20:00 GMT https://www.infosecurity-magazine.com/news/chinese-espionage-targets-vmware/ https://www.infosecurity-magazine.com/news/ransomware-compromised-sharepoint/ Microsoft said Chinese actor Storm-2603 is deploying Warlock ransomware following the exploitation of vulnerabilities in on-prem SharePoint systems Thu, 24 Jul 2025 14:45:00 GMT https://www.infosecurity-magazine.com/news/ransomware-compromised-sharepoint/ https://www.infosecurity-magazine.com/news/new-york-cybersecurity-regulations/ A series of new cybersecurity regulations related to the water industry have been set out by New York state agencies Wed, 23 Jul 2025 15:45:00 GMT https://www.infosecurity-magazine.com/news/new-york-cybersecurity-regulations/ https://www.infosecurity-magazine.com/news/us-government-interlockattacks/ A joint US government advisory highlighted novel initial access techniques deployed by Interlock, and urged businesses and critical infrastructure to stay vigilant Wed, 23 Jul 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/us-government-interlockattacks/ https://www.infosecurity-magazine.com/news/microsoft-compromising-sharepoint/ On-prem SharePoint customers have been told to assume compromise, with attackers observed to be exfiltrating data from victim servers across critical sectors Mon, 21 Jul 2025 11:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-compromising-sharepoint/ https://www.infosecurity-magazine.com/news/cisa-issues-advisories-ics-vulns/ The US CISA has issued advisories for Industrial Control Systems vulnerabilities affecting multiple vendors including Johnson Controls, ABB, Hitachi Energy, and Schneider Electric Fri, 18 Jul 2025 16:27:00 GMT https://www.infosecurity-magazine.com/news/cisa-issues-advisories-ics-vulns/ https://www.infosecurity-magazine.com/news/microsoft-exposes-scattered/ Microsoft has reported Scattered Spider continues to evolve tactics to compromise both on-premises infrastructure and cloud environments Thu, 17 Jul 2025 11:15:00 GMT https://www.infosecurity-magazine.com/news/microsoft-exposes-scattered/ https://www.infosecurity-magazine.com/news/european-financial-dora-compliance/ A Veeam survey found that 96% of financial services organizations believe their current levels of data resilience falls short of DORA compliance, citing major challenges Thu, 17 Jul 2025 09:00:00 GMT https://www.infosecurity-magazine.com/news/european-financial-dora-compliance/ https://www.infosecurity-magazine.com/news/54-million-affected-episource/ A data breach at Episource has exposed the personal information of 5.4 million individuals after attackers accessed systems for 10 days Wed, 16 Jul 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/54-million-affected-episource/ https://www.infosecurity-magazine.com/news/education-sector-most-exposed-to/ CyCognito research finds that a third of education sector APIs, web apps and cloud assets are exposed to attack Wed, 16 Jul 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/education-sector-most-exposed-to/ https://www.infosecurity-magazine.com/news/saas-security-adoption-grows/ The latest report from AppOmni has revealed 91% confidence in SaaS security while 75% of organizations have faced incidents Tue, 15 Jul 2025 14:15:00 GMT https://www.infosecurity-magazine.com/news/saas-security-adoption-grows/ https://www.infosecurity-magazine.com/news/interlock-ransomware-new-rat/ Interlock ransomware continues to develop custom tooling and a new RAT has been detected by researchers Mon, 14 Jul 2025 11:15:00 GMT https://www.infosecurity-magazine.com/news/interlock-ransomware-new-rat/ https://www.infosecurity-magazine.com/news/british-man-sentenced-rail-wifi/ The man was handed a suspended prison sentence for offenses relating to the hack of Network Rail public Wi-Fi, exposing customers to offensive messaging Fri, 11 Jul 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/british-man-sentenced-rail-wifi/ https://www.infosecurity-magazine.com/news/nippon-steel-it-subsidiary-0day/ Personal data of Nippon Steel Solutions’ customers, partners and employees may be compromised Thu, 10 Jul 2025 12:35:00 GMT https://www.infosecurity-magazine.com/news/nippon-steel-it-subsidiary-0day/ https://www.infosecurity-magazine.com/news/bert-ransomware-globally-multiple/ Trend Micro has observed the Bert ransomware group in operation since April 2025, with confirmed victims in sectors including healthcare, technology and event services Tue, 08 Jul 2025 09:00:00 GMT https://www.infosecurity-magazine.com/news/bert-ransomware-globally-multiple/ https://www.infosecurity-magazine.com/news/qantas-contacted-cybercriminal/ Qantas said it is currently validating the contact, and has informed law enforcement Mon, 07 Jul 2025 10:45:00 GMT https://www.infosecurity-magazine.com/news/qantas-contacted-cybercriminal/ https://www.infosecurity-magazine.com/news/privilege-escalation-flaw-azure-ml/ A critical Azure Machine Learning flaw allows privilege escalation, risking subscription compromise Thu, 03 Jul 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/privilege-escalation-flaw-azure-ml/ https://www.infosecurity-magazine.com/news/automation-vulnerability/ ReliaQuest warns that initial access vulnerability exploitation is driving successful ransomware attacks Thu, 03 Jul 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news/automation-vulnerability/ https://www.infosecurity-magazine.com/news/linux-users-urged-to-patch/ Two elevation of privilege vulnerabilities have been discovered on the popular Sudo utility, affecting 30-50 million endpoints in the US alone Thu, 03 Jul 2025 10:00:00 GMT https://www.infosecurity-magazine.com/news/linux-users-urged-to-patch/ https://www.infosecurity-magazine.com/interviews/nfl-cyber-risks-live-sport/ NFL’s director of cybersecurity and risk management Kam Karaji discusses how to deliver effective cybersecurity across multiple jurisdictions and locations Wed, 02 Jul 2025 13:00:00 GMT https://www.infosecurity-magazine.com/interviews/nfl-cyber-risks-live-sport/ https://www.infosecurity-magazine.com/news/it-worker-jailed-revenge-attack/ An IT worker has been jailed for launching a cyber-attack after he was suspended at work Mon, 30 Jun 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/it-worker-jailed-revenge-attack/ https://www.infosecurity-magazine.com/news/hawaiian-airlines-cybersecurity/ The US airline said that incident was affecting some of its IT systems, but flights are continuing to operate safely and as scheduled Fri, 27 Jun 2025 13:30:00 GMT https://www.infosecurity-magazine.com/news/hawaiian-airlines-cybersecurity/ https://www.infosecurity-magazine.com/news/moveit-attack-risk-scanning-surge/ GreyNoise observed a surge in scanning activity targeting MOVEit Transfer systems since May 27, indicating the software could face renewed attacks Fri, 27 Jun 2025 09:00:00 GMT https://www.infosecurity-magazine.com/news/moveit-attack-risk-scanning-surge/ https://www.infosecurity-magazine.com/news/patient-death-linked-nhs-cyber/ A patient’s death was linked to the 2024 ransomware attack on Synnovis, which disrupted NHS facilities Thu, 26 Jun 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/patient-death-linked-nhs-cyber/ https://www.infosecurity-magazine.com/news/half-customer-signups-now/ Okta says over 46% of new customer registrations are bot-driven fraud attempts Wed, 25 Jun 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/half-customer-signups-now/ https://www.infosecurity-magazine.com/news/ncsc-urges-experts-join-cyber/ The NCSC says its Cyber Advisor program is not growing fast enough Tue, 24 Jun 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/ncsc-urges-experts-join-cyber/ https://www.infosecurity-magazine.com/news/cyber-essentials-breaks-quarterly/ The UK government’s Cyber Essentials scheme hits 10,000 certifications for the first time in a quarter but challenges persist Mon, 23 Jun 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/cyber-essentials-breaks-quarterly/ https://www.infosecurity-magazine.com/news/personal-data-oxford-council/ Oxford City Council revealed that attackers accessed data of individuals who worked on Council-administered elections between 2001 and 2022 Fri, 20 Jun 2025 13:45:00 GMT https://www.infosecurity-magazine.com/news/personal-data-oxford-council/