Information Security Magazine

A covert ATM attack used a Raspberry Pi to breach bank systems, employing stealthy malware and anti-forensics techniques

Google’s Project Zero team will provide limited details of new vulnerabilities early following discovery, in a bid to speed up end users’ patching

32.1% of vulnerabilities listed in VulnCheck’s Known Exploited Vulnerabilities catalog were weaponized before being detected or within the following day

IBM found that the global average cost of a data breach has fallen by 9% compared to 2024, driven by improved detection and containment

A total of 396 compromised Microsoft SharePoint systems have been identified globally, affecting 145 organizations across 41 countries in the wake of the ToolShell zero-day vulnerability

The comprehensive guidance focuses on technical recommendations for securing agentic AI applications, from development to deployment

Some of Orange’s professional and consumer services may be disrupted for a few days because of the cyber incident

Flaw in Base44 allowed unauthorized access to private apps, bypassing authentication systems

Backdoor malware Auto-Color targets Linux systems, exploiting SAP NetWeaver flaw CVE-2025-31324

Hackers are actively exploiting two critical flaws in Cisco Identity Services Engine, said the US Cybersecurity and Infrastructure Security Agency

The federal government has applied for forfeiture of the funds, which were seized by FBI Dallas in April 2025

A Scottish charity has been fined £18,000 for systematic data protection failings

Two pro-Ukraine hacktivists have claimed responsibility for a destructive attack on Aeroflot

10,000 WordPress sites vulnerable to takeover due to critical flaws in HT Contact Form Widget plugin

Scattered Spider has targeted VMware vSphere environments, exploiting retail, airline and insurance sectors

Insurance firm Allianz Life said that a threat actor accessed personally identifiable information of the majority of its 1.4 million US customers

Despite claims by a hacker, French defense company Naval Group has detected no intrusions into its IT environments at the time of writing

Arizonan woman sentenced to 102 months for operating laptop farm for North Korean IT workers

Dating app Tea has been compromised by a hacker, resulting in the exposure of 13,000 selfies

The US and partners from nine countries have taken down part of the ransomware group’s infrastructure