Infosecurity Magazine

Latest News and Features

NCSC Plugs Gap in Cyber-Deception Guidance

News

The National Cyber Security Centre has released new learnings from a cyber deception pilot

Hired to Hack: Protecting Your Business from Remote Recruitment Scams

Opinion

ICO Fines LastPass £1.2m After 2022 Breach

News

South Korean Police Raid Coupang Over Data Breach as CEO Resigns

News

OpenAI Enhances Defensive Models to Mitigate Cyber-Threats

News

OpenAI has reported a surge in performance as GPT-5.1-Codex-Max reaching 76% in capability assessments, and warned of upcoming cyber-risks

Malware Discovered in 19 Visual Studio Code Extensions

News

Scam-Busting FCA Firm Checker Tool Given Cautious Welcome

News

Google Releases Critical Chrome Security Update to Address Three Zero-Days

News

“Cyber Tax” Warning as Two-Fifths of SMBs Raise Prices After Breach

News

ClickFix Social Engineering Sparks Rise of CastleLoader Attacks

News

A new malware campaign has been identified using a Python-based delivery system to deploy CastleLoader malware

White Papers

The Customer Identity Buyer’s Guide

White Paper

How Leading Brands Stop Fraud & Prevent Threats

White Paper

The Digital Operational Resilience Act (DORA): A Comprehensive Guide to TPRM Compliance

White Paper

On-Demand Webinars

  • Revisiting CIA: Developing Your Security Strategy in the SaaS Shared Reality
  • Mastering AI Security With ISACA’s New AAISM Certification
  • Exposing AI’s Blind Spots: Security vs Safety in the Age of Gen AI
  • Audit & Compliance in the Era of AI and Emerging Technology
  • Modernizing GRC: From Checkbox to Strategic Advantage
  • How Mid-Market Businesses Can Leverage Microsoft Security for Proactive Defenses
  • Risk-Based IT Compliance: The Case for Business-Driven Cyber Risk Quantification
  • OT Security Ecosystem for Targeted Risk Reduction and Reporting
  • The Invisible Frontline: Proactive Approaches to Browser Defense
  • Mastering Identity and Access for Non-Human Cloud Entities

Podcasts

  • How 2025 Shaped the Future of Cybersecurity
  • Beyond Bug Bounties: How Private Researchers Are Taking Down Ransomware Operations
  • Can AI Solve the Vulnerability Problem in Critical Infrastructure?
  • ToolShell Deep Dive: The SharePoint Exploit Crisis Uncovered
  • Unpacking Trump's Cybersecurity Executive Order
  • Your Guide to Infosecurity Europe: Insider Tips from Leading Cybersecurity Experts
  • Vulnerability Overload: The NVD and CVE Challenges Ahead
  • The Information Heist: Cracking the Code on Infostealers
  • Unlocking Infosecurity Europe: Must-See Sessions & Pro Tips
  • Change Healthcare Cyber-Attack: Inside the Disruption and the Lessons Learned

More news and features

Pro-Russia Hackers Target US Critical Infrastructure in New Wave

News

Google Fixes Zero Click Gemini Enterprise Flaw That Exposed Corporate Data

News

Log4Shell Downloaded 40 Million Times in 2025

News

Microsoft Fixes Three Zero-Days in Final Patch Tuesday of 2025

News

React2Shell Exploit Campaigns Tied to North Korean Cyber Intrusion Tactics

News

Sysdig has found sophisticated malicious campaigns exploiting React2Shell that delivered EtherRAT and suggested North Korean hackers’ involvement

Malicious VS Code Extensions Deploy Advanced Infostealer

News

Two malicious Visual Studio Code extensions, Bitcoin Black and Codo AI, have been observed harvesting sensitive user data

DeadLock Ransomware Uses BYOVD to Evade Security Measures

News

UK NCSC Raises Alarms Over Prompt Injection Attacks

News

Gartner Calls For Pause on AI Browser Use

News

Energy Operations: Managing Password Security and Continuity

Blog

Energy companies face rising credential-based cyber threats as IT and OT systems converge. The article explains how legacy equipment, shared accounts and operational pressures complicate strong authentication

Blogs

Energy Operations: Managing Password Security and Continuity

Blog

Securing AI for Cyber Resilience: Building Trustworthy and Secure AI Systems

Blog

Next-Gen Infosec

How to Prevent Data Leakages

Next-Gen

Top Cloud Misconceptions that Could Damage Your Organization

Next-Gen

Improve Asset Visibility in OT Security With Hybrid AI-Cloud Approaches

Next-Gen