Information Security Magazine

Rapid7 found that 56% of all compromises in Q1 2025 resulted from the theft of valid account credentials with no MFA in place

Resellers and channel partners can add value, fill gaps in security teams and offer expertise in niche markets

Effective cybersecurity played a key role Ukraine drone attack on Russian strategic bombers, a leading government security expert has claimed

CISA is facing $495m budget cut, losing 1000 employees and reducing staff to 2324

CISOs should demand more of their vendors and use regulation as an ally to persuade board members to accelerate the transition to post-quantum safety

Malware campaign used fake DocuSign pages to deploy NetSupport RAT through clipboard manipulation

Abnormal AI found that engagement rates with VEC attacks globally is “worrisomely high”, overtaking BEC in the EMEA region

Risk Ledger found that 90% of UK professionals view supply chain cyber incidents as a top concern for 2025

Two local information disclosure flaws in Linux crash-reporting tools have been identified exposing system data to attackers

A new malware campaign targeting Windows and Linux systems has been identified, deploying tools for evasion and credential theft

Wiz finds new threat group running cryptojacking campaign via exploited and misconfigured DevOps assets

Semperis will host an immersive ransomware simulation focused on water utilities during Infosecurity Europe 2025

A report on the dark web marketplace Russian Market showed Acreed has emerged as the leading infostealer

Dutch, US and Finnish investigators have taken cybercrime service AVCheck offline

Australian firms with an annual turnover of AUS $3m are now required to report any payments to ransomware groups to authorities

Five major banking associations in the US claim the new SEC cyber incident disclosure rule puts a strain on their resources

The FBI provided details of Funnull’s malicious activities, selling infrastructure to criminal groups to facilitate cryptocurrency fraud in the US

The UK MoD has unveiled a new Cyber and Electromagnetic Command, which will focus on offensive cyber operations and “electromagnetic warfare” capabilities

Security teams should use vulnerability context alongside KEV lists to prioritize patching, OX argued

The firm’s remote monitoring management tool, ScreenConnect, has reportedly been patched