Information Security Magazine

NSA and CISA are urging developers to adopt memory safe languages (MSLs) to combat vulnerabilities in software

Semperis estimates that at least 15,000 enterprise SaaS applications are still vulnerable to a flaw discovered in 2023

Two SAP GUI vulnerabilities have been identified exposing sensitive data due to weak encryption in input history features

NCC Group found that ransomware attacks fell for the third consecutive month in May 2025, despite a surge in incidents impacting retailers

UK ransomware victims are paying extortionists twice as much as a year ago

The Common Good Cyber Fund will receive funding from the UK and Canadian governments, with further pledges from G7 nations

Okta says over 46% of new customer registrations are bot-driven fraud attempts

A representative of NCSC-FI shared some lessons learned from a 2024 data breach affecting the Finnish capital

A long-running malware campaign targeting WordPress via a rogue plugin has been observed skimming data, stealing credentials and user profiling

Data breach at McLaren Health Care affecting over 743,000 individuals has been linked to a ransomware attack

Cobalt found that many security professionals believe a “strategic pause” in genAI deployment is necessary to recalibrate defenses

New ITRC data reveals identity crimes are down but impersonation scams now account for a third of all scams

The NCSC says its Cyber Advisor program is not growing fast enough

Draugnet is a new anonymous threat reporting platform built for the MISP ecosystem

A cyber-attack by pro-Iranian group Cyber Fattah has leaked personal information from the Saudi Games online

A cyber-attack on CoinMarketCap exposed users to a fake Web3 wallet prompt, draining $43,266 from wallets

The DHS warned of a heightened risk of cyber and physical attacks on US targets by Iran in retaliation for strikes on Iranian nuclear facilities over the weekend

The UK government’s Cyber Essentials scheme hits 10,000 certifications for the first time in a quarter but challenges persist

SecurityScorecard has discovered a covert cyber-espionage botnet dubbed “LapDogs” linked to China

The UK’s Cyber Monitoring Centre (CMC) assessed the incident as a Category 2 systemic event, based on the significant economic impact