Information Security Magazine

A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and Canada and harvest user credentials

Group-IB analysis argued Scattered Spider is a decentralized collective of independent clusters

More than 60 organizations, including M&S, Microsoft UK and Vodafone, have signed the UK government's Cyber Resilience Pledge, a new initiative aimed at boosting cyber security and resilience across British businesses

Threat actors are exploiting an Adobe ColdFusion vulnerability which has a CVSS score of 10.0

Attacks also used a compromised chatbot in campaign to steal sensitive information from Business Users

Check Point researchers have identified a new cyber adversary targeting Israeli government and IT businesses, tracked as ‘Cavern Manticore’

Zscaler found sites hiding prompt-injection text to manipulate AI agents into crypto payments

Opera GX flaw let sites automatically install mods to steal data from other pages, now patched

IWF and NCA warn that growing numbers of images and videos are being manipulated into sexual abuse material

Researchers have revealed JadePuffer, the first agentic AI-powered ransomware campaign, highlighting how autonomous agents can automate cyber-attacks

The ransomware landscape is reconsolidating around major players, with Qilin emerging as the leading RaaS operation, researchers say

Researchers warn that collaboration could lead to “unprecedented” ransomware attacks, as FBI also issues warning

The NetNut proxy network and the ‘Popa’ botnet are known to have infected devices with variants of Mirai DDoS botnets

Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities first

Bitdefender researchers warned of curious ransomware campaign which has targeted businesses around the world

The NCSC has shared best practice advice from pen testers which could help improve system resilience

A teenager accused of hacking as part of Scattered Spider has been arrested

Securonix said the Veil#Drop campaign abuses Google Blogspot to deliver PureLog Stealer in memory

FortiGuard says the Brazilian banking trojan Ousaban is targeting Spain and Portugal via phishing

The new classifier in Fable 5 blocks the jailbreak technique that prompted the US export controls “in over 99% of cases”