Information Security Magazine

ReliaQuest warns that phishing campaigns abusing the Axios user agent have surged 241% in three months

A House select committee said Chinese actors impersonated Representative John Moolenaar to steal information that could be used to influence trade talks

Salesloft has revealed that threat actors targeted customer Salesforce data after breaching its GitHub account

Wealthsimple confirmed a third-party vendor data breach affecting roughly 30,000 customers

Phishing campaign unveiled MostereRAT, targeting Windows systems with advanced evasion techniques

Cisco Talos found that abuse of remote services and remote access software are the most prevalent ‘pre-ransomware’ tactics deployed by threat actors

Palo Alto Networks, Cloudflare and Zscaler were also among confirmed victims of the attack

Security researchers have discovered a new malicious campaign impacting hundreds of GitHub users

Critical SAP S/4HANA vulnerability CVE-2025-42957 is being exploited in the wild

Bridgestone Americas confirmed the incident but has not detailed the scope of the attack

An investigation has revealed that files were stolen in a data breach affecting a South Carolina school district

Trend Micro observed the attackers using terminal-based installation methods for the AMOS malware, luring macOS users into installing cracked versions of apps

The joint guidance is a welcome first step towards a common, global adoption of SBOMs, experts argued

The OPSWAT report found that insider breaches cost impacted firms $2.7m on average due to factors such as regulatory fines and diminished productivity

A newly identified hacking group named GhostRedirector has compromised 65 Windows servers using previously unknown tools

North Korean hackers have been observed exploiting cyber threat intelligence platforms in a campaign targeting job seekers with malware-laced lures

Google Cloud’s Mandiant successfully disrupted an active ViewState deserialization attack affecting Sitecore deployments

JLR said it is investigating following claims by the actor “Scattered Lapsus$ Hunters” that it had stolen data from the firm and had issued an extortion demand

Hackers are using legitimate red team tool Hexstrike-AI to simplify and speed up vulnerability exploitation

A new Cobalt study finds healthcare organizations among the slowest at resolving serious vulnerabilities