Information Security Magazine

M&S chairman Archie Norman provided more insights into the April ransomware attack, but did not confirm whether a payment was made to the attackers

Researchers from Koi Security have detected 18 malicious Chrome and Edge extensions masquerading as benign productivity and entertainment tools

Check Point discovered around 500 suspected Scattered Spider phishing domains, suggesting the group is preparing to expand its targeting

Sonatype’s latest Open Source Malware Index report has identified more than 16,000 malicious open source packages, representing a 188% annual increase

The company behind AV/EDR evasion tool Shellter has confirmed the product is being used by threat actors

China’s Hikvision vows legal battle after Canada bans its operations, citing national security concerns

Trend Micro has observed the Bert ransomware group in operation since April 2025, with confirmed victims in sectors including healthcare, technology and event services

Iran-aligned BladedFeline group has been observed targeting the government of Iraq and KRG with advanced malware

Vulnerability research company WatchTowr published a detection analysis for the Citrix Blled 2 flaw

Cybersecurity researchers have observed a 156% increase in credential theft incidents between 2024 and Q1 2025

Qantas said it is currently validating the contact, and has informed law enforcement

Check Point has discovered over 1000 suspicious domains registered in the run-up to Amazon Prime Day

Distributor Ingram Micro says it has found ransomware on its internal systems

Some admins of Hunters International are now part of the encryption-less cyber extortion group World Leaks

Taiwan warned that popular Chinese-owned apps, including TikTok and Weibo, are harvesting personal data and sending it back to servers in China

The EU’s Quantum Strategy includes plans to develop secure quantum communication infrastructure across the region

A severe flaw identified in the Forminator WordPress plugin allows arbitrary file deletion and potential site takeover

A critical Azure Machine Learning flaw allows privilege escalation, risking subscription compromise

The CVE Board has launched a Consumer Working Group and a Researcher Working Group, allowing new stakeholders to shape the future of the CVE Program

ReliaQuest warns that initial access vulnerability exploitation is driving successful ransomware attacks