Information Security Magazine

Government-run train operator LNER has revealed details of a supplier data breach

A ransomware attack by KillSec on Brazil software provider MedicSolution threatens healthcare, impacting providers and patients

A flaw in the Cursor extension allows unauthorized code execution when opening repositories in Visual Studio

The vulnerability, dubbed SessionReaper, allows customer account takeover and unauthenticated remote code execution

Sophos found that average ransom demands and payments fell substantially in the education sector in 2025, as recovery time and costs fell

Microsoft has fixed over 80 vulnerabilities including two publicly disclosed zero-days in its latest Patch Tuesday release

Wiz Security warns that a recently discovered supply chain attack campaign targeting npm is far from over

A threat actor accidentally revealed their AI-powered methods by installing Huntress security software

Salty2FA phishing campaign showcases advanced techniques and professionalism of cybercrime operations

What could have been a historic supply chain attack seems to have been averted due to the rapid response of the open source community

ReliaQuest warns that phishing campaigns abusing the Axios user agent have surged 241% in three months

A House select committee said Chinese actors impersonated Representative John Moolenaar to steal information that could be used to influence trade talks

Salesloft has revealed that threat actors targeted customer Salesforce data after breaching its GitHub account

Wealthsimple confirmed a third-party vendor data breach affecting roughly 30,000 customers

Phishing campaign unveiled MostereRAT, targeting Windows systems with advanced evasion techniques

Cisco Talos found that abuse of remote services and remote access software are the most prevalent ‘pre-ransomware’ tactics deployed by threat actors

Palo Alto Networks, Cloudflare and Zscaler were also among confirmed victims of the attack

Security researchers have discovered a new malicious campaign impacting hundreds of GitHub users

Critical SAP S/4HANA vulnerability CVE-2025-42957 is being exploited in the wild

Bridgestone Americas confirmed the incident but has not detailed the scope of the attack