Information Security Magazine

Australia-based Genea said it is investigating the cyber incident to determine whether any personal data was accessed by an unauthorized third party

The head of the Australian Security Intelligence Organisation gave his Annual Threat Assessment for the year ahead

Venture capital firm Insight Partners, which counts Recorded Future, SentinelOne and Wiz in its portfolio, confirmed an intrusion into its systems via a social engineering attack

Google has warned that Russian state-backed hackers are targeting Signal to eavesdrop on persons of interest in Ukraine

Hudson Rock has found evidence that infostealers have compromised hundreds of US military and defense contractor credentials

Significant OpenSSH flaws are exposing systems to man-in-the-middle and denial-of service attacks

Trend Micro found that Chinese espionage group Mustang Panda is deploying malware via legitimate Microsoft tools, enabling it to bypass ESET antivirus applications

A new Snake Keylogger variant, responsible for over 280 million blocked infection attempts worldwide, has been identified targeting Windows users

The BlackLock or Eldorado ransomware gang could be the year’s fastest-growing ransomware-as-a-service group

Proofpoint also identified two new threat actors operating components of web inject campaigns, TA2726 and TA2727

A threat actor claims to have hacked and published data on 12 million Zacks Investment Research accounts

Pro-Russia hackers NoName057(16) has targeted Italian banks, airports and ports in a series of DDoS attacks

South Korea’s Personal Information Protection Commission is blocking DeepSeek AI downloads over privacy concerns

Microsoft has observed a new variant of XCSSET, a sophisticated macOS malware that infects Xcode projects

A Golang backdoor is using Telegram as its command and control (C2) channel, an approach that makes detection harder for defenders, according to Netskope researchers

Two Estonian nationals have pleaded guilty to running a cryptocurrency-related Ponzi scheme

Vulnerabilities in firewalls from Palo Alto Networks and SonicWall are currently under active exploitation

Volexity highlighted how Russian nation-state actors are stealing Microsoft device authentication codes to compromise accounts

The organization becomes the AI Security Institute as the UK shifts its focus to tackling AI risks to national security

Symantec found that tools previously only used by Chinese nation-state espionage actors were deployed in a ransomware attack