Information Security Magazine

Microsoft revealed it has seized 338 websites associated with RaccoonO365, a phishing kit which has stolen at least 5000 Microsoft credentials worldwide

New IO research reveals a surge in AI attacks attempting to corrupt underlying training data

A secret-stealing worm is spreading fast across the npm ecosystem, experts have warned

Fifteen ransomware groups have claimed shutdown on BreachForums; experts warn of rebrands and copycats

The attack, which is linked to ShinyHunters, has reportedly compromised data relating to 7.4 million unique email addresses

AI-native Villager, which automates Kali and DeepSeek penetration tests, has reached 11,000 PyPI downloads fueling dual-use threat

Reports of email phishing attempts impersonating the UK’s HM Revenue & Customs plummeted in the first half of 2025

Jaguar Land Rover (JLR) has confirmed that its pause in production will last until at least Wednesday, September 24

Thales claims there were over 40,000 API incidents in the first half of 2025

An insider data breach at FinWise may have impacted 689,000 customers

HybridPetya ransomware mimics Petya/NotPetya, with an added UEFI bootkit and Secure Boot bypass

SEO poisoning attack has been observed targeting Chinese Windows users via lookalike domains, installing Hiddengh0st and Winos

Genians observed the Kimsuky group impersonate a defense institution in a spear-phishing attack, leveraging ChatGPT to create fake military ID cards

US Department of Homeland Security OIG claims CISA mismanaged a key cyber retention incentive program

Threat actors are using multiple lures to trick users into installing RMM tools

HP Wolf has reported the use of multiple, uncommon binaries and novel uses of legitimate image files in recent malicious campaigns

Apple has sent at least four notifications in 2025, according to the French national cybersecurity agency

ICO warned that growing hacks by children into school computer systems is setting them up for “a life of cybercrime”

The US cybersecurity agency called for the CVE program to remain publicly maintained and vendor-neutral while emphasizing the need for broader engagement

A sophisticated fileless malware campaign has been observed using legitimate tools to deliver AsyncRAT executed in memory