Information Security Magazine

Pro-Israel Predatory Sparrow Group steals $90m in crypto from Iranian exchange Nobitex

Two critical Linux flaws allow unprivileged users to gain root access, affecting major distributions

Barracuda observed a big spike in spam emails generated using AI tools, making up the majority detected in April 2025

Upgraded GodFather banking malware now uses on-device virtualization to hijack apps, enabling real-time fraud

ClickFix techniques are enabling threat actors to bypass defenses using tools like MSHTA, says ReliaQuest

The new Cyber Growth Action Plan aims to support the UK’s cyber industry, including the development of innovative new technologies and startups

The group positions itself “not just as a ransomware group, but as a full-service cybercrime platform”, according to Cybereason

Payment processor Paddle has agreed to settle with the FTC over allegations related to tech support scams

New SEO poisoning attacks identified, using Hacklink to hijack search rankings and inject malicious links into sites

23andMe has been fined over £2m by the UK ICO for failing to adequately protect genetic data

Phishing campaign targeting Taiwan has been identified, using tax-themed emails and malware like Winos and HoldingHands

WatchTowr has found three vulnerabilities in the Sitecore Experience Platform, used by HSBC and L’Oréal

Microsoft’s Sovereign Cloud solutions are designed to ensure European cloud data is stored and processed in Europe

New City of London Police data reveals British men and women lost over £100m to romance fraudsters in 2024

Cyber-attacks using HijackLoader and DeerStealer have been identified exploiting phishing tactics via ClickFix

Operation DEEP Sentinel has shut down Archetyp Market, the longest-running dark web drug marketplace

Nessus users should update patches as soon as possible

Trend Micro identified a novel “wipe mode” included in Anubis ransomware to prevent file recovery, increasing pressure on victims to give in to demands

Some 36% of Grafana instances are vulnerable to account takeover bug, putting DevOps teams at risk

Canadian airline WestJet is investigating a cyber-attack that struck on June 13