Information Security Magazine

Oxford City Council revealed that attackers accessed data of individuals who worked on Council-administered elections between 2001 and 2022

Around half of the world’s top 100 websites have already integrated passkey support

Bridewell’s analysis of advertised UK cybersecurity roles revealed that the public sector offers one the lowest average salaries across all industries

A prominent expert on Russian information operations was targeted by a sophisticated spear phishing attack likely coming from Russian hackers

Banana Squad exploited GitHub to distribute malicious Python code disguised as legitimate tools

Python RAT PylangGhost, linked to Famous Chollima, targeted crypto professionals via fake job sites

Doughnut maker Krispy Kreme has revealed that sensitive financial and personal data of over 160,000 individuals has been impacted following a November 2024 cyber incident

Banking giant UBS revealed it had suffered a data breach following a cyber-attack on procurement service provider Chain IQ

Cato Networks researchers demonstrated an attack leveraging Atlassian’s AI agent-enabling server

An alleged former member of the infamous Ryuk ransomware group has been extradited to the US

Pro-Israel Predatory Sparrow Group steals $90m in crypto from Iranian exchange Nobitex

Two critical Linux flaws allow unprivileged users to gain root access, affecting major distributions

Barracuda observed a big spike in spam emails generated using AI tools, making up the majority detected in April 2025

Upgraded GodFather banking malware now uses on-device virtualization to hijack apps, enabling real-time fraud

ClickFix techniques are enabling threat actors to bypass defenses using tools like MSHTA, says ReliaQuest

The new Cyber Growth Action Plan aims to support the UK’s cyber industry, including the development of innovative new technologies and startups

The group positions itself “not just as a ransomware group, but as a full-service cybercrime platform”, according to Cybereason

Payment processor Paddle has agreed to settle with the FTC over allegations related to tech support scams

New SEO poisoning attacks identified, using Hacklink to hijack search rankings and inject malicious links into sites

23andMe has been fined over £2m by the UK ICO for failing to adequately protect genetic data