Information Security Magazine

Huntress researchers highlighted a new ransomware variant, named Settra, and the post-compromise techniques used in two recent attacks

The US cybersecurity agency is moving to a new vulnerability coordination platform called VINCE-NT

Black Kite has found that manufacturing remained the most targeted sector for ransomware attacks, and saw a big jump in incidents in H1 2026

ESET said FamousSparrow has replaced SparrowDoor with SparroWocky

CISA released guidance on using cyber decoys to detect & disrupt malicious activity inside networks

Researchers at Zimperium have uncovered a new Android malware strain, dubbed RatHat, with spyware and backdoor capabilities

New government figures reveal a 20% annual increase in certifications

Cisco urged ISE customers to apply a software update, as well as check for signs of exploitation

Spanish data protection agency AEPD reveals the country’s first AI-powered data breach

Attackers are exploiting a critical flaw in a third-party WooCommerce plugin to upload PHP webshells

CISA and NIST issued final guidance to help protect cloud identity tokens and assertions

Hiscox highlighted the huge financial and operational costs of cyber-attacks, with the average cost of an incident at $52,000

OPSWAT researchers find two zero-days in TP-Link cameras

A group of cyber threat detection providers, including CrowdStrike, Palo Alto Networks and Sophos, have joined SE Labs’ PIVOT program

The UK’s National Cyber Security Centre says Iranian Chosen Brick spyware is designed to snoop on dissidents

A new report highlights the vast growth in fraudulent candidates, presenting significant insider threat challenges to organizations

Fenix24 found only four of more than 800 clients came close to stated ransomware recovery targets of 24-48 hours

Alleged Black Axe leaders extradited to the US over romance scams, BEC and money laundering claims

IANS finds AI is dominating net-new budgets even as overall funding for the function is flat

Microsoft has been forced to issue an out-of-band fix for several issues stemming from this month’s Patch Tuesday