Information Security Magazine

The FBI says mainly Chinese-made IoT devices pose a threat from Badbox 2.0 malware

The ransomware group combines IT vendor impersonation and phishing frameworks like Evilginx to breach its targets

Experts at Infosecurity Europe 2025 highlighted a range of major industry trends, from advanced social engineering techniques to vulnerability exploits

2017 ransomware attack on shipping company A P Moller Maersk marked a turning point for the cybersecurity industry, according to its former CISO Adam Banks

During Infosecurity Europe 2025, Nick Woodcraft, from the UK Government, shared his experience in implementing measures to protect domains within the .gov.uk DNS namespace

Engagement with ransomware actors doesn’t necessarily mean payment; it’s about getting the best outcomes, a leading negotiator had argued

A panel of CISOs at Infosecurity Europe urged their peers to use risk management and clear communication to tame a chaotic cyber landscape

Sophisticated nation-state and cybercriminal groups are using insiders to infect targets via hardware devices, despite a lack of reporting of this threat

Malicious actors are making more use of AI in attacks, even as governments look to boost AI investments

At Infosecurity Europe 2025, Axonius’ Jon Ridyard proposed seven best practices to build mature vulnerability management processes

Endpoint and network security is still essential, even as malicious actors turn to supply chains, identities and AI

Moving to cloud-native architecture and modern platforms is allowing enterprises to automate operations and improve security

Experts argue the case for “communities of support” to boost SMB cyber-resilience

Experts argue that CISOs should avoid product duplication and simplify their language to ensure budget is spent wisely

Agentic AI systems could threaten security and data privacy, unless organizations test each model and component

The attacks on UK retailers are “a wake-up call” for the industry, said River Island’s Information Security Officer

A phishing campaign spoofing Booking.com has been observed targeting hospitality sector, using ClickFix to install malware

Sophos has uncovered a scheme planting malicious code in 130+ GitHub repositories, targeting hackers and gamers

Stolen devices are a bigger cause of data loss than stolen credentials or ransomware, according to a new Blancco study

Startups at Infosecurity Europe focus on attack surface management and improving security data, even as some new vendors avoid AI-led marketing