Information Security Magazine

NHS provider Synnovis is notifying clients about the extent of a data breach 17 months after it suffered a ransomware attack

GlobalLogic has notified 10,000 employees their data was stolen in the Oracle EBS campaign

UK cyber-insurers paid 230% more to policyholders in 2024 than the year before

Microsoft has patched a zero-day vulnerability in the Windows Kernel under active exploitation by threat actors

The UK government is overhauling cybersecurity laws for the first time since 2018 with the Cyber Security and Resilience Bill

A new cyber-attack has been observed exploiting Google Find Hub to remotely wipe Android devices, linked to North Korean APTs

Qilin group ransomware incidents have surged in SMBs, exploiting security gaps and collaborating with Scattered Spider threat group

Threat actors were exploiting vulnerable versions of Triofox after a patched version was released, said Google Cloud researchers

CISA has demanded federal agencies patch a zero-day vulnerability affecting Samsung devices used in LandFall spyware attacks

KnowBe4 claims the new Quantum Route Redirect kit is supercharging phishing attacks on Microsoft365 users

A new study has revealed 65% of top AI firms have leaked sensitive data on GitHub, risking $400bn in assets

Volexity has linked spear phishing operations to China-aligned UTA0388 in new campaigns using advanced tactics and LLMs

The UK’s National Crime Agency is warning men under 45 that crypto dreams can soon become a scam nightmare

The UK’s National Cyber Security Centre has urged users of its Web Check and Mail Check services to find alternatives

Sandworm deployed data wipers against Ukrainian governmental entities and companies in the energy, logistics and grain sectors

Experts have uncovered large-scale phishing exploiting Booking.com, Airbnb and Expedia accounts, targeting hotels and customers

A new Cisco report exposed large language models to multi-turn adversarial attacks with 90% success rates

ENISA report reveals DDoS accounted for 60% of public sector security incidents last year

Google warns of “just-in-time AI” malware using LLMs to evade detection and generate malicious code on-demand

Europe will likely face a combination of heightened cyber-physical attacks and information operations coming from nation-state groups in 2026