Information Security Magazine

New Immersive report finds cyber resilience and decision making are flatlining

The five defendants allegedly assisted North Korean hackers with obtaining remote IT employment with US companies

Carmaker JLR has posted $639m Q2 losses and a one-off $258m hit after a major ransomware attack

Anthropic’s Claude Code AI assistant performed 80% to 90% of the tasks involved in a recent cyber-attack campaign, said Anthropic researchers

Akira ransomware has extorted $244M since September 2025, with some attacks exfiltrating data in just two hours, a joint cybersecurity advisory warns

Google filed a civil lawsuit against 25 individuals accused of ties to a Chinese cyber collective known as the ‘Smishing Triad’

A new npm worm dubbed “IndonesianFoods” has doubled the number of known malicious packages

An IANS study finds CISO compensation rose 6.7% on average in 2025 while budget growth halved compared to 2024

A global law enforcement operation has taken down the Rhadamanthys infostealer, VenomRAT trojan and the Elysium botnet

Industry body techUK calls for real-time intelligence sharing across sectors to combat fraud

NHS provider Synnovis is notifying clients about the extent of a data breach 17 months after it suffered a ransomware attack

GlobalLogic has notified 10,000 employees their data was stolen in the Oracle EBS campaign

UK cyber-insurers paid 230% more to policyholders in 2024 than the year before

Microsoft has patched a zero-day vulnerability in the Windows Kernel under active exploitation by threat actors

The UK government is overhauling cybersecurity laws for the first time since 2018 with the Cyber Security and Resilience Bill

A new cyber-attack has been observed exploiting Google Find Hub to remotely wipe Android devices, linked to North Korean APTs

Qilin group ransomware incidents have surged in SMBs, exploiting security gaps and collaborating with Scattered Spider threat group

Threat actors were exploiting vulnerable versions of Triofox after a patched version was released, said Google Cloud researchers

CISA has demanded federal agencies patch a zero-day vulnerability affecting Samsung devices used in LandFall spyware attacks

KnowBe4 claims the new Quantum Route Redirect kit is supercharging phishing attacks on Microsoft365 users