World-renowned physicist, Professor Brian Cox, will headline day one of Infosecurity Europe, analyzing the science behind quantum computing and the challenges it brings

Security firm Barracuda said it has detected more than a million phishing-as-a-service (PhaaS) attacks in 2025

The US Cybersecurity and Infrastructure Security Agency added flaws in Fortinet and a popular GitHub Action to its Known Exploited Vulnerabilities catalog

Gartner has claimed that AI agents will reduce the time it takes to exploit exposed accounts

Europol’s annual report warns of a growing threat from aligned state and cybercrime groups, enabled by AI technologies

The Cybersecurity and Infrastructure Security Agency (CISA) adds CVE-2025-24472 and CVE-2025-30066 to its Known Exploited Vulnerabilities Catalog.

CERT NZ issued a critical advisory for CVE-2025-24813, a severe Apache Tomcat vulnerability affecting multiple versions.

Overwhelmed AppSec teams are turning to agentic AI to handle the tedious manual work of security reporting, threat modeling, and code reviews, but successful implementation requires careful human oversight.

The refreshed initiative aims to meet increased demand for PAM solutions and drive revenue growth for partners

The refreshed initiative aims to meet increased demand for PAM solutions and drive revenue growth for partners

By simply sending HTTP requests, attackers can trigger the deserialisation of malicious data in Tomcat's session storage and gain control.

Newly discovered vulnerability ZDI-CAN-25373 takes advantage of Windows shortcuts has been exploited by 11 state-sponsored groups since 2017

Research finds that organizations are granting root access by default and making other big missteps, including a Jenga-like building concept, in deploying and configuring AI services in cloud deployments.

CISA this week added CVE-2025-24472 to its catalog of known exploited vulnerabilities, citing ransomware activity targeting the authentication bypass flaw.

Trend Micro uncovered a method that nation-state threat actors are using to target victims via the Windows .Ink shortcut file extension.

Several major companies in the finance sector were impacted by the third-party breach, prompting them to notify thousands of customers of their compromised data.

Ransomware attackers know where your kids go to school and they want you to know it, according to professional negotiators at Sygnia.

FBI warns computer users to keep an eye out for malware, including ransomware, distributed through working document converters.

New guidance from the NCSC outlines a three-phase timeline for organisations to transition to quantum-resistant encryption methods by 2035.