Information Security Magazine

Discord said a third-party customer services provider was compromised to access user data, with the attackers aiming to extort a financial ransom

A critical Oracle E-Business Suite vulnerability is being actively exploited by the Clop ransomware group

A critical GoAnywhere vulnerability is being exploited by the Medusa ransomware group, says Microsoft

Europol’s Cybercrime Conference has warned that cybercriminals are exploiting new technologies faster than law enforcement can adapt

A new TOR data leak site published by the Trinity of Chaos ransomware group unveils 39 firms’ data and threatens Salesforce litigation

Experts warn that threat actors may be gearing up for compromise after large uptick in scans of Palo Alto Network portals

Asahi confirmed it has fallen victim to a ransomware attack, and revealed it has started manual order processing amid ongoing operational disruption

Renault and Dacia have become the latest big-name brands to suffer a supply chain breach

Cisco Talos has identified a Chinese-speaking cybercrime group that targets high-value Internet Information Services (IIS) for SEO fraud

Patches for the targeted vulnerabilities were released in Oracle’s July 2025 security update

WestJet revealed that customer personal details and membership data were stolen in the June 2025 attack

The US government shutdown is estimated to result in around 65% of CISA staff being furloughed, with fears that threat actors will exploit critical security gaps

The initial investigation shows early signs of links with the FIN11 and Clop cyber extortion groups

The Confucius cyber-espionage group has shifted its tactics from document-focused stealers to Python-based backdoors like AnonDoor

A new study by Zimperium has revealed serious risks in free VPN apps, exposing users to privacy threats and security flaws

Experts argued that the lapse of the Cybersecurity Information Sharing Act could have far-reaching consequences in US national cyber defenses

Forrester predicts agentic AI will be responsible for a major data breach in 2026

ENISA reveals phishing and vulnerability exploitation accounted for majority of intrusions in past year

Broadcom has released security patches for critical flaws affecting several VMware products

A new campaign has been observed using malicious Windows shortcuts in credential-themed ZIP files to deploy PowerShell script