Information Security Magazine

A severe flaw identified in the Forminator WordPress plugin allows arbitrary file deletion and potential site takeover

A critical Azure Machine Learning flaw allows privilege escalation, risking subscription compromise

The CVE Board has launched a Consumer Working Group and a Researcher Working Group, allowing new stakeholders to shape the future of the CVE Program

ReliaQuest warns that initial access vulnerability exploitation is driving successful ransomware attacks

SentinelLabs observed North Korean actors deploying novel TTPs to target crypto firms, including a mix of programming languages and signal-based persistence

Two elevation of privilege vulnerabilities have been discovered on the popular Sudo utility, affecting 30-50 million endpoints in the US alone

New Android malware Qwizzserial has infected 100,000 devices, primarily in Uzbekistan, stealing SMS data via Telegram distribution

A third of AI-generated login URLs lead to incorrect or dangerous domains, according to Netcraft

The French cybersecurity agency identified Houken, a new Chinese intrusion campaign targeting various industries in France

The Treasury said that Aeza Group has provided infrastructure services for notorious infostealer and ransomware operators

Benefits admin specialist Kelly Benefits has revealed a breach impacting over 500,000 individuals across 45 client organizations

Qantas admits that a “significant” volume of customer data may have been stolen from a contact center

Cloudflare now blocks AI web crawlers by default, requiring permission from site owners for access

Google has patched a critical type confusion vulnerability in Chrome, the fourth zero-day fix in 2025

Proofpoint has identified similarities between the tactics of a pro-Russian cyber espionage group and a cybercriminal gang

The ICC said the new incident was the second “of its type” it has faced in recent years, relating to an espionage attack in 2023

CertiK found $2.47bn in crypto was stolen in H1 2025, largely due to two major security incidents – ByBit and Cetus

The threat actor Sarcoma has been held responsible for a ransomware attack on a Swiss health foundation

Interpol warns that scam centers are expanding beyond Southeast Asia

Both the US authorities and Microsoft have taken action to disrupt North Korean IT worker schemes