Information Security Magazine

SonicWall said that threat actors accessed firewall preference files stored in the cloud for around 5% of its firewall install base

Insight Partners has released more details of a 2024 ransomware breach impacting thousands of individuals

The UK’s National Crime Agency is the new chair of the Five Eyes Law Enforcement Group

FileFix campaign hides PowerShell script and encrypted EXEs in JPGs via multilingual phishing

A trio of critical vulnerabilities in the Chaos-Mesh platform allow in-cluster attackers to run arbitrary code, even in default configuration

An employee of outsourcing firm TaskUs allegedly sold data stolen during the Coinbase data breach to hackers for $200 per record before her arrest in January 2025

Microsoft revealed it has seized 338 websites associated with RaccoonO365, a phishing kit which has stolen at least 5000 Microsoft credentials worldwide

New IO research reveals a surge in AI attacks attempting to corrupt underlying training data

A secret-stealing worm is spreading fast across the npm ecosystem, experts have warned

Fifteen ransomware groups have claimed shutdown on BreachForums; experts warn of rebrands and copycats

The attack, which is linked to ShinyHunters, has reportedly compromised data relating to 7.4 million unique email addresses

AI-native Villager, which automates Kali and DeepSeek penetration tests, has reached 11,000 PyPI downloads fueling dual-use threat

Reports of email phishing attempts impersonating the UK’s HM Revenue & Customs plummeted in the first half of 2025

Jaguar Land Rover (JLR) has confirmed that its pause in production will last until at least Wednesday, September 24

Thales claims there were over 40,000 API incidents in the first half of 2025

An insider data breach at FinWise may have impacted 689,000 customers

HybridPetya ransomware mimics Petya/NotPetya, with an added UEFI bootkit and Secure Boot bypass

SEO poisoning attack has been observed targeting Chinese Windows users via lookalike domains, installing Hiddengh0st and Winos

Genians observed the Kimsuky group impersonate a defense institution in a spear-phishing attack, leveraging ChatGPT to create fake military ID cards

US Department of Homeland Security OIG claims CISA mismanaged a key cyber retention incentive program