Information Security Magazine

The UK government’s proposed ransomware payment ban for public sector and critical infrastructure will come with national security exemptions

A new WEF report reveals that AI-powered threats like disinformation are among executives’ biggest concerns

The Pall Mall Process begins outreach to define guidelines for private commercial intrusion industry

3 critical zero-day flaws in PickleScan, affecting Python and PyTorch, allowed undetected attacks

Infected 4.3 million Chrome and Edge users via extensions; ShadyPanda exploited browser marketplaces

Google said it found indications that two newly identified vulnerabilities affecting Android “may be under limited, targeted exploitation”

The UK Information Commissioner’s Office has launched an investigation into the mobile gaming sector

New IO study claims 88% of US and UK firms are concerned about state-sponsored cyber-attacks

Android malware Albiriox emerged as MaaS, offering device takeover and real-time fraud capabilities

The South Korean police are tracking the suspect behind a cyber-attack targeting e-commerce giant Coupang

Malicious npm package targets AI security with misleading prompts, exploiting automated analysis

November 2025 saw cybersecurity giants like Palo Alto Networks, Bugcrowd and Zscaler invest in AI-powered security solutions

Europol, alongside Swiss and German authorities, dismantled the illegal cryptocurrency mixing service ‘Cryptomixer’

A Western Australia man will spend seven years behind bars after stealing intimate data via Wi-Fi

At least one London council has had data compromised after a suspected ransomware attack last week

BitSight research has revealed how threat actors exploit calendar subscriptions to deliver phishing links, malware and social engineering attacks through hijacked domains

Darktrace observed a 620% spike in Black Friday-themed phishing in the weeks leading up to the 2025 edition of the sale day

The personal data of over two million amateur football players registered in France could be exposed

Hackers have been hijacking US radio equipment to broadcast false emergency alerts, prompting FCC warnings

A new Bloody Wolf campaign exploits legitimate remote-administration software for cyber-attacks on government targets in Central Asia