The CISA KEV catalog was expanded with 245 vulnerabilities in 2025, including 24 flaws exploited by ransomware groups.

The zero-day exploitations of Ivanti's MDM platform meant unprecedented pwning of 1000s of orgs by a Chinese APT — and ...

Explore Infosecurity Magazine’s most-read cybersecurity stories of 2025, from major vendor shake-ups and zero-day exploits to AI-driven threats and supply chain attacks ...

Threat actors used two malicious Chrome extensions that have 900,000 users to steal their chats with AI models like ChatGPT ...

Chrome extensions called "Phantom Shuttle" stole user data for years before Google removed them from the Chrome Web Store ...

Mustang Panda deployed TONESHELL via a signed kernel-mode rootkit, targeting Asian government networks and evading security ...

Predator has remained available through the Intellexa spyware consortium despite US sanctions imposed in 2024 on ...

A new Shai-Hulud npm strain and a fake Jackson Maven package show how attackers abuse trusted dependencies to steal secrets ...

The security company Synthient currently sees more than 2 million infected Kimwolf devices distributed globally but with ...

Explore NordVPN’s biggest developments of 2025, from privacy and security audits to new features, apps, and platform upgrades ...

Ever thought about getting paid to nap? Or maybe dive into murky ponds for hours on end? The modern job market isn’t what it ...

Expect significant innovations in AI-driven cyber tools and a closer convergence between cybersecurity and geopolitics, they ...