Information Security Magazine

Misconfigured AI-linked MCP servers are exposing users to data breaches and remote code execution threats

A patient’s death was linked to the 2024 ransomware attack on Synnovis, which disrupted NHS facilities

The ClickFix social engineering technique has become the second most common attack vector, behind only phishing, according to ESET research

The hackers are also suspected of being behind several cyber-attacks, including against the French Football Federation

Interpol claims cybercrime has risen sharply in Africa with cyber-offences accounting for a "medium-to-high" share of all crime

Glasgow City Council has warned of service disruption and potential data loss after a security incident

The threat actor used a combination of open-source and publicly available tools to establish their attack framework

NSA and CISA are urging developers to adopt memory safe languages (MSLs) to combat vulnerabilities in software

Semperis estimates that at least 15,000 enterprise SaaS applications are still vulnerable to a flaw discovered in 2023

Two SAP GUI vulnerabilities have been identified exposing sensitive data due to weak encryption in input history features

NCC Group found that ransomware attacks fell for the third consecutive month in May 2025, despite a surge in incidents impacting retailers

UK ransomware victims are paying extortionists twice as much as a year ago

The Common Good Cyber Fund will receive funding from the UK and Canadian governments, with further pledges from G7 nations

Okta says over 46% of new customer registrations are bot-driven fraud attempts

A representative of NCSC-FI shared some lessons learned from a 2024 data breach affecting the Finnish capital

A long-running malware campaign targeting WordPress via a rogue plugin has been observed skimming data, stealing credentials and user profiling

Data breach at McLaren Health Care affecting over 743,000 individuals has been linked to a ransomware attack

Cobalt found that many security professionals believe a “strategic pause” in genAI deployment is necessary to recalibrate defenses

New ITRC data reveals identity crimes are down but impersonation scams now account for a third of all scams

The NCSC says its Cyber Advisor program is not growing fast enough