Information Security Magazine

The UK cybersecurity agency reported 204 cyber incidents of “national significance” between September 2024 and August 2025 – an all-time high

A rise in attacks exploiting RMM tools like ScreenConnect enables system control via phishing tactics

Spanish authorities have arrested a 25-year-old Brazilian accused of leading the GXC Team and selling malware and AI tools to cybercriminals

A new campaign distributing the Stealit infostealer employs previously unknown malware delivery techniques and infrastructure

Apple has doubled its top bug bounty reward to $2m but with bonuses it could reach $5m

The infamous BreachForums site has been taken offline again to disrupt Scattered Lapsus$ Hunters

Google has introduced a new AI Vulnerability Reward Program offering up to $30,000 for bug discoveries in its AI products

GTIG highlighted indicators that Clop is behind the extortion campaign targeting Oracle EBS instances, with its activity likely beginning as early as August 9

Forescout said that the TwoNet actor was lured into attacking a honeypot disguised as a water treatment utility, providing insights into the group’s tactics

A new report from SquareX Labs highlights security weaknesses in AI browsers like Comet, revealing new cyber-risks

A new ClayRat spyware campaign has been observed targeting Russian users via fake apps on Telegram and exfiltrating data

SonicWall said that a threat actor has accessed files containing encrypted credentials and configuration data for all customers who have used its cloud backup service

The ICO has won an Upper Tribunal appeal against Clearview AI over its ability to fine the company

The UK’s National Cyber Security Centre has released new guidance to help firms improve observability and threat hunting

A new report from TeamViewer found that 40% of global endpoints still run Windows 10, just days before security updates and support ends for the operating system

A cyber campaign using Nezha has been identified, targeting vulnerable web apps with PHP web shells and Ghost RAT

According to TransUnion, digital fraud has cost companies $534bn in losses globally with US business hit hardest

Jaguar Land Rover has reported a 25% drop in volume sales in the three months up to September 30, largely due to the impact of the ongoing cyber incident

North Korean hackers have stolen over $2bn in cryptocurrency already this year, says Elliptic

Two 17-year-olds have been arrested following a cyber-attack on the Kido nursery group