Information Security Magazine

Rising hardware, API, and network flaws expose organizations to new risks in an AI-driven landscape

ReliaQuest report claims time from initial access to lateral movement has shrunk to just 18 minutes

Stellantis confirmed that customers’ personal information was potentially exposed

UK carmaker Jaguar Land Rover has said production will remain shuttered until October 1

Experts at a Gartner event highlighted areas of focus in identity, processes and third-party risk management to tackle the novel tactics employed by Scattered Spider

MITRE said it understands why Microsoft, SentinelOne and Palo Alto pulled out of its 2025 of ATT&CK Evaluations test – and promises to do better next year

The FBI has warned that adversaries have published fake versions of its cybercrime reporting portal IC3

Heathrow, Brussels, Dublin and Berlin airports are among those disrupted by a cyber-attack on Collins Aerospace

ESET found that the FSB-affiliated groups, Gamaredon and Turla, are sharing tools to help conduct espionage attacks against Ukrainian organizations

Researchers at Radware found a zero-click flaw in ChatGPT Deep Research agent when connected to Gmail and browsing

Trend Micro said the use of AI platforms to create and host fake CAPTCHA pages helps attackers develop more sophisticated phishing campaigns at scale and speed

One of the teenage suspects is accused of involvement in at least 120 attacks, resulting in $115m in ransom payments

A breach at the New York Blood Center resulted in theft of data for 194,000 people, including SSNs, IDs, bank and health information

One third of Android and over half iOS apps shown to be leaking insecure APIs and hardcoded secrets

SonicWall said that threat actors accessed firewall preference files stored in the cloud for around 5% of its firewall install base

Insight Partners has released more details of a 2024 ransomware breach impacting thousands of individuals

The UK’s National Crime Agency is the new chair of the Five Eyes Law Enforcement Group

FileFix campaign hides PowerShell script and encrypted EXEs in JPGs via multilingual phishing

A trio of critical vulnerabilities in the Chaos-Mesh platform allow in-cluster attackers to run arbitrary code, even in default configuration

An employee of outsourcing firm TaskUs allegedly sold data stolen during the Coinbase data breach to hackers for $200 per record before her arrest in January 2025