Information Security Magazine

A flaw in the Slider Revolution plugin has exposed millions of WordPress sites to unauthorized file access

Whisper 2FA is now one of the most active PhaaS tools alongside Tycoon and EvilProxy, responsible for one million attacks since July 2025

Microsoft has fixed over 170 CVEs in October’s Patch Tuesday, including six zero-day vulnerabilities

Outsourcing giant Capita has been fined £14m by the ICO after a major data breach in 2023

Investigations found that the network operates scam centers in Cambodia, Myanmar and across Southeast Asia

Legacy Windows protocols are still exposing organizations to credential theft, Resecurity found

A newly identified cybercrime group TA585 is running an advanced cyber operation distributing MonsterV2 malware

In a joint warning letter, UK ministers urged FTSE 350 CEOs to bolster cyber defenses

ReliaQuest report reveals Flax Typhoon attackers maintained year-long access to an ArcGIS system

A new EY report claims unmanaged AI risk is causing millions of pounds’ worth of losses for UK organizations

The UK cybersecurity agency reported 204 cyber incidents of “national significance” between September 2024 and August 2025 – an all-time high

A rise in attacks exploiting RMM tools like ScreenConnect enables system control via phishing tactics

Spanish authorities have arrested a 25-year-old Brazilian accused of leading the GXC Team and selling malware and AI tools to cybercriminals

A new campaign distributing the Stealit infostealer employs previously unknown malware delivery techniques and infrastructure

Apple has doubled its top bug bounty reward to $2m but with bonuses it could reach $5m

The infamous BreachForums site has been taken offline again to disrupt Scattered Lapsus$ Hunters

Google has introduced a new AI Vulnerability Reward Program offering up to $30,000 for bug discoveries in its AI products

GTIG highlighted indicators that Clop is behind the extortion campaign targeting Oracle EBS instances, with its activity likely beginning as early as August 9

Forescout said that the TwoNet actor was lured into attacking a honeypot disguised as a water treatment utility, providing insights into the group’s tactics

A new report from SquareX Labs highlights security weaknesses in AI browsers like Comet, revealing new cyber-risks