Information Security Magazine

Iran-aligned BladedFeline group has been observed targeting the government of Iraq and KRG with advanced malware

Vulnerability research company WatchTowr published a detection analysis for the Citrix Blled 2 flaw

Cybersecurity researchers have observed a 156% increase in credential theft incidents between 2024 and Q1 2025

Qantas said it is currently validating the contact, and has informed law enforcement

Check Point has discovered over 1000 suspicious domains registered in the run-up to Amazon Prime Day

Distributor Ingram Micro says it has found ransomware on its internal systems

Some admins of Hunters International are now part of the encryption-less cyber extortion group World Leaks

Taiwan warned that popular Chinese-owned apps, including TikTok and Weibo, are harvesting personal data and sending it back to servers in China

The EU’s Quantum Strategy includes plans to develop secure quantum communication infrastructure across the region

A severe flaw identified in the Forminator WordPress plugin allows arbitrary file deletion and potential site takeover

A critical Azure Machine Learning flaw allows privilege escalation, risking subscription compromise

The CVE Board has launched a Consumer Working Group and a Researcher Working Group, allowing new stakeholders to shape the future of the CVE Program

ReliaQuest warns that initial access vulnerability exploitation is driving successful ransomware attacks

SentinelLabs observed North Korean actors deploying novel TTPs to target crypto firms, including a mix of programming languages and signal-based persistence

Two elevation of privilege vulnerabilities have been discovered on the popular Sudo utility, affecting 30-50 million endpoints in the US alone

New Android malware Qwizzserial has infected 100,000 devices, primarily in Uzbekistan, stealing SMS data via Telegram distribution

A third of AI-generated login URLs lead to incorrect or dangerous domains, according to Netcraft

The French cybersecurity agency identified Houken, a new Chinese intrusion campaign targeting various industries in France

The Treasury said that Aeza Group has provided infrastructure services for notorious infostealer and ransomware operators

Benefits admin specialist Kelly Benefits has revealed a breach impacting over 500,000 individuals across 45 client organizations