Explore Infosecurity Magazine’s most-read cybersecurity stories of 2025, from major vendor shake-ups and zero-day exploits to AI-driven threats and supply chain attacks ...
A critical LangChain Core vulnerability (CVE-2025-68664, CVSS 9.3) allows secret theft and prompt injection through unsafe ...
A critical LangChain AI vulnerability exposes millions of apps to theft and code injection, prompting urgent patching and ...
Chinese hackers are exploiting a critical Cisco email security flaw, gaining root access and installing backdoors. This ...
Software supply chain attacks are evolving as open source and AI-generated code introduce new third-party risks. Learn how visibility and shift-left security reduce exposure.
The company suffered one sophisticated five-alarm campaign and one messy spray-and-pray attack, mere days apart.
A China-affiliated threat actor has been abusing a zero-day vulnerability in multiple Cisco email appliances to gain access to the underlying system and establish persistence. Cisco confirmed the news ...
Security researchers uncovered a range of cyber issues targeting AI systems that users and developers should be aware of — ...
Likely Chinese nation-state hackers are exploiting an unpatched flaw in Cisco email appliances as part of an ongoing campaign to gain persistent access. Hackers ...
The AI firm has rolled out a new security update to Atlas’ browser agent after uncovering a new class of prompt injection ...
Which cyber defenses actually work against current threats? An analysis of cyber-insurance claims data shows six technologies ...