https://www.infosecurity-magazine.com/news/ Copyright © 2026 Reed Exhibitions Ltd. All Rights Reserved. https://www.infosecurity-magazine.com/news/nik-c2-malware-victims-openai-keys/ NIK C2 malware can fall back on victims’ OpenAI API keys to run AI queries Thu, 29 Oct 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/nik-c2-malware-victims-openai-keys/ https://www.infosecurity-magazine.com/news/crest-financial-cyber-resilience/ CREST has published a framework for strengthening cyber resilience across financial services Thu, 29 Oct 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/crest-financial-cyber-resilience/ https://www.infosecurity-magazine.com/news/online-scam-volumes-double/ Akamai research reveals that scam detections topped six million in Q2 2026 Thu, 29 Oct 2026 11:15:00 GMT https://www.infosecurity-magazine.com/news/online-scam-volumes-double/ https://www.infosecurity-magazine.com/news/ico-reprimand-staffordshire-police/ The UK’s privacy regulator has issued a reprimand to Staffordshire Police following a serious breach of personal information Thu, 29 Oct 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/ico-reprimand-staffordshire-police/ https://www.infosecurity-magazine.com/news/nist-guidance-post-quantum/ The guidance sets out how federal agencies can prioritize PQC adoption for the most sensitive systems, to meet the 2031 transition deadline Thu, 29 Oct 2026 09:45:00 GMT https://www.infosecurity-magazine.com/news/nist-guidance-post-quantum/ https://www.infosecurity-magazine.com/news/robot-malware-indian-bank-customers/ MR ROBOT Android malware rents banking trojans that steal one-time passwords and card data Thu, 29 Oct 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/robot-malware-indian-bank-customers/ https://www.infosecurity-magazine.com/news/japan-gmo-internet-disconnect/ GMO Internet has told customers to unplug their PCs in advance of a possible ransomware attack Wed, 28 Oct 2026 15:49:00 GMT https://www.infosecurity-magazine.com/news/japan-gmo-internet-disconnect/ https://www.infosecurity-magazine.com/news/attackers-hide-malware-behind/ Attackers have used fake ChatGPT and Claude projects to distribute Yoba malware Wed, 28 Oct 2026 15:13:00 GMT https://www.infosecurity-magazine.com/news/attackers-hide-malware-behind/ https://www.infosecurity-magazine.com/news/ai-is-turning-cisos-into/ Nvidia’s Mark Weatherford says CISOs must translate AI cybersecurity risks into business priorities, clarify risk ownership and balance innovation with security controls Wed, 28 Oct 2026 14:10:00 GMT https://www.infosecurity-magazine.com/news/ai-is-turning-cisos-into/ https://www.infosecurity-magazine.com/news/energy-giant-engie-supply-chain/ An undisclosed number of Engie customers have had their data compromised after a supply chain incident Wed, 28 Oct 2026 14:05:00 GMT https://www.infosecurity-magazine.com/news/energy-giant-engie-supply-chain/ https://www.infosecurity-magazine.com/news/cyber-unmhealth-surgeries/ The University of New Mexico is working to restore systems following the incident, which has been claimed by the BYOD ransomware group Tue, 27 Oct 2026 16:45:00 GMT https://www.infosecurity-magazine.com/news/cyber-unmhealth-surgeries/ https://www.infosecurity-magazine.com/news/hackers-infect-953-online-stores/ Attackers have infected 953 online stores with a scanner-evading JavaScript loader since July 2025 Tue, 27 Oct 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/hackers-infect-953-online-stores/ https://www.infosecurity-magazine.com/news/openai-compaction-flaw-ai/ Researchers uncovered an OpenAI API flaw that exposed hidden AI reasoning traces, prompting a fix and a $6000 bug bounty reward Tue, 27 Oct 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/openai-compaction-flaw-ai/ https://www.infosecurity-magazine.com/news/isc2-launches-cyberai-workforce/ ISC2’s new Cyber-AI Workforce Coalition serves as a “vendor-neutral convener” to map the future of AI security careers, ISC2 CEO Scott Beale told Infosecurity Tue, 27 Oct 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/isc2-launches-cyberai-workforce/ https://www.infosecurity-magazine.com/news/exploit-teams-chat-breach/ Arctic Wolf warned that the function enables highly effective social engineering attacks, which lead to incidents such as ransomware Tue, 27 Oct 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/exploit-teams-chat-breach/ https://www.infosecurity-magazine.com/news/copenhagen-university-data-breach/ Hackers have stolen personal information on over 520,000 people from the University of Copenhagen Tue, 27 Oct 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/copenhagen-university-data-breach/ https://www.infosecurity-magazine.com/news/first-isc2-ai-security/ ISC2 is seeking 3000 volunteers to enrol to a pilot exam phase for its upcoming AI security certification Tue, 27 Oct 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/first-isc2-ai-security/ https://www.infosecurity-magazine.com/news/watchdog-police-fire-service/ UK police forces and fire and rescue services have been urged to strengthen cybersecurity as rising cyber threats outpace current defenses Tue, 27 Oct 2026 09:39:00 GMT https://www.infosecurity-magazine.com/news/watchdog-police-fire-service/ https://www.infosecurity-magazine.com/news/cisa-aggressive-strategy-critical/ CISA’s new strategy, CISA 2030, will focus on rapid detection and response and resiliency of critical services ahead of “passive defense” Mon, 26 Oct 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/cisa-aggressive-strategy-critical/ https://www.infosecurity-magazine.com/news/gheist-attackers-abuse-stolen/ A large-scale GitHub campaign abused stolen access tokens to target 13,500+ branches and repositories with secret-stealing workflows Mon, 26 Oct 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/gheist-attackers-abuse-stolen/ https://www.infosecurity-magazine.com/news/linux-flaws-exposed-before-fixes/ Six Linux flaws were made public, including one with a working root exploit and no merged fix Mon, 26 Oct 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/linux-flaws-exposed-before-fixes/ https://www.infosecurity-magazine.com/news/microsoft-patch-update-net-flaw/ Microsoft’s updates address two newly disclosed vulnerabilities in the .NET developer platform, as well as flaws not fully addressed in an earlier release Mon, 26 Oct 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/microsoft-patch-update-net-flaw/ https://www.infosecurity-magazine.com/news/blue-initiative-maritime/ Blue Initiative launches a new vulnerability database for IT and OT CVEs relevant to the maritime industry Mon, 26 Oct 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/blue-initiative-maritime/ https://www.infosecurity-magazine.com/news/php-publishes-mitigation-advice/ PHP warns of critical RCE vulnerability CVE-2026-115560, but says limited exploit conditions mean most deployments are unlikely to be affected Mon, 26 Oct 2026 09:15:00 GMT https://www.infosecurity-magazine.com/news/php-publishes-mitigation-advice/ https://www.infosecurity-magazine.com/news/capcom-confirms-data-breach/ Japanese video games giant Capcom confirmed unauthorized access to its online account system Fri, 23 Oct 2026 11:45:00 GMT https://www.infosecurity-magazine.com/news/capcom-confirms-data-breach/ https://www.infosecurity-magazine.com/news/tokenspraying-attacks-target/ Security researchers identified attempts to access corporate networks which have been linked to a major Microsoft 365-targeted BEC campaign using phishing, stolen session tokens and social engineering Fri, 23 Oct 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/tokenspraying-attacks-target/ https://www.infosecurity-magazine.com/news/tech-third-party-breach-victims/ Kroll found that 69% of data breach victims in the past year were affected by a third-party breach, with attacks on tech companies the most common cause Fri, 23 Oct 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/tech-third-party-breach-victims/ https://www.infosecurity-magazine.com/news/eu-bookingcom-scam-risks/ The EU Commission will assess whether Booking.com has adequately protected customers from phishing attacks Thu, 22 Oct 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/eu-bookingcom-scam-risks/ https://www.infosecurity-magazine.com/news/iranian-hacking-group-hosting-c2/ Stealthy malware campaign by ‘Prince of Persia’ threat group targeting organisations worldwide discovered operating on American soil Thu, 22 Oct 2026 13:05:00 GMT https://www.infosecurity-magazine.com/news/iranian-hacking-group-hosting-c2/ https://www.infosecurity-magazine.com/news/microsoft-chinese-ai-connectwise/ Microsoft said it has observed threat actor activity in multiple ConnectWise customer environments, with the attackers leveraging the ARTEX agentic AI platform Thu, 22 Oct 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-chinese-ai-connectwise/ https://www.infosecurity-magazine.com/news/php2shell-exploitation-attempt/ Threat intelligence analysts now observe large-scale evidence of exploitation of the two critical PHP vulnerabilities Thu, 22 Oct 2026 10:10:00 GMT https://www.infosecurity-magazine.com/news/php2shell-exploitation-attempt/ https://www.infosecurity-magazine.com/news/cloud-security-maturity-lags-sans/ Nearly all organizations now run production workloads in the cloud, but a new SANS survey found most have yet to achieve mature cloud security programs Thu, 22 Oct 2026 08:20:00 GMT https://www.infosecurity-magazine.com/news/cloud-security-maturity-lags-sans/ https://www.infosecurity-magazine.com/news/new-phaas-uses-ai-phishing-lures/ Researchers have uncovered Athena StealthRoute, a phishing-as-a-service platform featuring an AI Studio that generates phishing lures and decoy content designed to conceal attacks Wed, 21 Oct 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/new-phaas-uses-ai-phishing-lures/ https://www.infosecurity-magazine.com/news/symantec-ai-agent-llmjacking/ Researchers at Symantec have uncovered an AI agent designed to operate a full cyber-attack without human intervention Wed, 21 Oct 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/symantec-ai-agent-llmjacking/ https://www.infosecurity-magazine.com/news/rival-gangs-vie-for-market/ Cybercriminal groups The Gentlemen and Qilin dominate ransomware attacks - and both are evolving their tactics in an attempt to outdo one another Wed, 21 Oct 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/rival-gangs-vie-for-market/ https://www.infosecurity-magazine.com/news/safepay-compromised-critical/ A new CISA advisory warns of the threat posed by SafePay to businesses and critical infrastructure, and urges defenders to take action to mitigate the group’s tactics Wed, 21 Oct 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/safepay-compromised-critical/ https://www.infosecurity-magazine.com/news/critical-php-vulnerabilities-leaked/ Two critical vulnerabilities in PHP were leaked one day before their scheduled disclosure and security patches Wed, 21 Oct 2026 10:20:00 GMT https://www.infosecurity-magazine.com/news/critical-php-vulnerabilities-leaked/ https://www.infosecurity-magazine.com/news/children-data-stolen-password1/ The ICO has slammed security failings by the Welsh local government data unit and IT service provider following the 2024 incident Wed, 21 Oct 2026 09:05:00 GMT https://www.infosecurity-magazine.com/news/children-data-stolen-password1/ https://www.infosecurity-magazine.com/news/head-ai-security-roles/ A new IANS report has found that despite the growth of the head of AI security role, accountability for AI governance in firms remains unsettled Tue, 20 Oct 2026 14:40:00 GMT https://www.infosecurity-magazine.com/news/head-ai-security-roles/ https://www.infosecurity-magazine.com/news/opencode-quietly-patched-critical/ OpenCode silently patched a critical RCE flaw, leaving vulnerable users unaware of the security risk, researchers at Pillar Security warned Tue, 20 Oct 2026 13:55:00 GMT https://www.infosecurity-magazine.com/news/opencode-quietly-patched-critical/ https://www.infosecurity-magazine.com/news/ai-agent-adoption-oversight/ Rapid adoption of agentic AI comes with potential business benefits. But if done incorrectly it also carries risks around AI activity management and security Tue, 20 Oct 2026 12:05:00 GMT https://www.infosecurity-magazine.com/news/ai-agent-adoption-oversight/ https://www.infosecurity-magazine.com/news/siemens-clickfix-exploiting-side/ Siemens identified the activity to be from the Romulus multi-platform ClickFix campaign, with Siemens Software Center users urged to apply an update Tue, 20 Oct 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/siemens-clickfix-exploiting-side/ https://www.infosecurity-magazine.com/news/exploited-vulnerabilities-three/ Known exploited vulnerabilities take a median time of 87 days to be patched, according to a new Moody’s report Mon, 19 Oct 2026 15:25:00 GMT https://www.infosecurity-magazine.com/news/exploited-vulnerabilities-three/ https://www.infosecurity-magazine.com/news/conduent-settle-data-breach-action/ The 2024 cyber incident affected the healthcare data of 62 million people, who launched a class action lawsuit against the business services firm Mon, 19 Oct 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/conduent-settle-data-breach-action/ https://www.infosecurity-magazine.com/news/opencode-breach-openai-anthropic/ A breach affecting the OpenCode Console may lead to the exposure of API keys for Anthropic, OpenAI and Google Gemini users Mon, 19 Oct 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/opencode-breach-openai-anthropic/ https://www.infosecurity-magazine.com/news/connectwise-shuts-off-cloud/ Cloud Backup, SaaS Security, and Cloud Management services offline as IT service provider investigates possibility that unknown attackers have full access to client environments via stolen tokens Mon, 19 Oct 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/connectwise-shuts-off-cloud/ https://www.infosecurity-magazine.com/news/cybersecurity-job-postings-fall/ CyberSN observed a particularly big dip in cybersecurity leadership positions such as CISO and Cybersecurity Director in 2026 compared to 2025 Mon, 19 Oct 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-job-postings-fall/ https://www.infosecurity-magazine.com/news/ransomware-threats-physical/ New report warns that threats of violence against employees of organizations hit by ransomware are on the rise as attackers find new ways to guarantee payments Fri, 16 Oct 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-threats-physical/ https://www.infosecurity-magazine.com/news/china-actor-beyondtrust-flaw-google/ The suspected PRC-aligned group Armory Castle has been observed exploiting the newly disclosed flaw for long-term persistence Fri, 16 Oct 2026 10:10:00 GMT https://www.infosecurity-magazine.com/news/china-actor-beyondtrust-flaw-google/ https://www.infosecurity-magazine.com/news/cyber-incident-bae-us-bankruptcy/ Several services of the US Bankruptcy Noticing Center are unavailable due to a cyber incident affecting defense contractor BAE Systems Fri, 16 Oct 2026 09:05:00 GMT https://www.infosecurity-magazine.com/news/cyber-incident-bae-us-bankruptcy/ https://www.infosecurity-magazine.com/news/france-expose-danfoss-controllers/ France-based operators of Danfoss refrigeration controllers have sharply reduced their internet exposure after the October 11 cyber-attack Thu, 15 Oct 2026 13:45:00 GMT https://www.infosecurity-magazine.com/news/france-expose-danfoss-controllers/ https://www.infosecurity-magazine.com/news/aoki-infostealer-ai-coding/ Symantec warned that Aoki can steal API keys and tokens from a number of popular AI coding assistants, including Claude and Gemini Thu, 15 Oct 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/aoki-infostealer-ai-coding/ https://www.infosecurity-magazine.com/news/high-risk-vulnerabilities-llm-tool/ CVE-2026-35029 and CVE-2026-59823 affect LiteLLM, which is commonly used by enterprises to connect their AI applications to providers like OpenAI and Anthropic Thu, 15 Oct 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/high-risk-vulnerabilities-llm-tool/ https://www.infosecurity-magazine.com/news/microsoft-yam-store-one-billion/ Microsoft and partners reveal a major Chinese-language phishing network centered around the Yam Store marketplace Thu, 15 Oct 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-yam-store-one-billion/ https://www.infosecurity-magazine.com/news/ico-reprimands-met-over-thirdparty/ The ICO has handed the Metropolitan Police a reprimand and enforcement notice after privacy failings linked to the Auror platform Thu, 15 Oct 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/ico-reprimands-met-over-thirdparty/ https://www.infosecurity-magazine.com/news/romulus-malware-clickfix-deliver/ Researchers at Forescout said the discovery shows how ClickFix is evolving from a delivery technique into full-blown cyber-criminal infrastructure Wed, 14 Oct 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/romulus-malware-clickfix-deliver/ https://www.infosecurity-magazine.com/news/passkey-authentications-double/ Dashlane data finds that passkey adoption is growing but not quickly enough Wed, 14 Oct 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/passkey-authentications-double/ https://www.infosecurity-magazine.com/news/french-supermarket-hack-more/ At least two French supermarkets using temperature regulation devices from Dixell Electronics also experienced food stock disruptions Wed, 14 Oct 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/french-supermarket-hack-more/ https://www.infosecurity-magazine.com/news/microsoft-patch-tuesday-record-1/ Microsoft issued its largest ever round of security updates in the October Patch Tuesday Wed, 14 Oct 2026 08:45:00 GMT https://www.infosecurity-magazine.com/news/microsoft-patch-tuesday-record-1/ https://www.infosecurity-magazine.com/news/companies-leave-critical/ New Chainguard research reveals larger companies struggle to patch vulnerabilities due to business priorities and operational disruption Wed, 14 Oct 2026 07:55:00 GMT https://www.infosecurity-magazine.com/news/companies-leave-critical/ https://www.infosecurity-magazine.com/news/retail-firms-confirm-cyber/ Several Europe-based retail firms have confirmed experiencing cyber incidents, while H&M said it is “investigating” such claims Tue, 13 Oct 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/retail-firms-confirm-cyber/ https://www.infosecurity-magazine.com/news/defenders-skeptical-agentic-ai/ Flashpoint research suggests that only 25% of security teams have actively deployed AI, with many concerned about AI Agents’ negative impact Tue, 13 Oct 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/defenders-skeptical-agentic-ai/ https://www.infosecurity-magazine.com/news/uk-government-sweeping-ai-security/ The government is planning tweaks to legislation, new incident response and more to head of AI security threats Tue, 13 Oct 2026 09:45:00 GMT https://www.infosecurity-magazine.com/news/uk-government-sweeping-ai-security/ https://www.infosecurity-magazine.com/news/fifth-cisos-take-time-off-avoid/ Socura report claims CISOs are calling in sick or taking holiday to miss Patch Tuesday Tue, 13 Oct 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/fifth-cisos-take-time-off-avoid/ https://www.infosecurity-magazine.com/news/luna-moth-leaks-ransomware-playbook/ Leaked documents suggest a multi-pronged operation, with social engineering and more technical attackers working together to manipulate a single target Mon, 12 Oct 2026 15:15:00 GMT https://www.infosecurity-magazine.com/news/luna-moth-leaks-ransomware-playbook/ https://www.infosecurity-magazine.com/news/french-supermarket-chains/ The CEO of Cooperative U confirmed a cyber-attack affected the food stock in several stores from October 11 Mon, 12 Oct 2026 11:57:00 GMT https://www.infosecurity-magazine.com/news/french-supermarket-chains/ https://www.infosecurity-magazine.com/news/net-closes-shinyhunters-another/ The FBI has arrested a Canadian cybersecurity executive as it continues its crackdown on ShinyHunters Mon, 12 Oct 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/net-closes-shinyhunters-another/ https://www.infosecurity-magazine.com/news/palo-alto-vpn-vulnerability-target/ ReliaQuest confirmed that the Qilin and Settra ransomware groups are actively exploiting a Palo Alto vulnerability patched in May Mon, 12 Oct 2026 09:15:00 GMT https://www.infosecurity-magazine.com/news/palo-alto-vpn-vulnerability-target/ https://www.infosecurity-magazine.com/news/karaoke-giant-data-breach-eight/ Daiichi Kosho says a supply chain breach has exposed personal data on over eight million karaoke customers Mon, 12 Oct 2026 08:35:00 GMT https://www.infosecurity-magazine.com/news/karaoke-giant-data-breach-eight/ https://www.infosecurity-magazine.com/news/wikimedia-confirms-platforms-rogue/ Wikimedia says OpenAI agents performed unauthorized actions on its platforms, including edits to wikis Fri, 09 Oct 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/wikimedia-confirms-platforms-rogue/ https://www.infosecurity-magazine.com/news/q3-new-record-ransomware/ Comparitech observed 2627 claimed ransomware attacks in Q3, with critical sectors like finance, technology, education and healthcare experiencing significant increases Fri, 09 Oct 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/q3-new-record-ransomware/ https://www.infosecurity-magazine.com/news/uk-allies-threat-china-integrity/ The UK, US and allies have issued an alert detailing malicious activity linked to China’s Integrity Technology Group Fri, 09 Oct 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/uk-allies-threat-china-integrity/ https://www.infosecurity-magazine.com/news/ai-training-critical-as-governance/ As AI adoption accelerates, ISACA is expanding its certification portfolio with a governance-focused credential designed to help professionals manage AI securely Fri, 09 Oct 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/ai-training-critical-as-governance/ https://www.infosecurity-magazine.com/news/ai-firms-pledge-data-protection/ Ten leading AI firms have committed to make data protection improvements following a call for evidence by the UK’s Information Commissioner's Office Fri, 09 Oct 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/ai-firms-pledge-data-protection/ https://www.infosecurity-magazine.com/news/attackers-hijack-cctlds-obtain/ Attackers compromised .gh, .sl and .as registries to obtain unauthorized HTTPS certificates Thu, 08 Oct 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/attackers-hijack-cctlds-obtain/ https://www.infosecurity-magazine.com/news/asos-data-breach-stolen-employee/ The ASOS hack comes from the compromise of agentic marketing platform Simon AI, said the attackers Thu, 08 Oct 2026 13:36:00 GMT https://www.infosecurity-magazine.com/news/asos-data-breach-stolen-employee/ https://www.infosecurity-magazine.com/news/russia-aligned-uac-0099-evolves/ Russia-aligned UAC-0099 has steadily upgraded its MATCHBOIL downloader since 2024 Thu, 08 Oct 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/russia-aligned-uac-0099-evolves/ https://www.infosecurity-magazine.com/news/chinese-hacker-ai-korean-banks/ CrowdStrike revealed that a Chinese-speaking hacker deployed agentic pentesting tool ARTEX and Claude to help breach data from South Korean financial firms Thu, 08 Oct 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/chinese-hacker-ai-korean-banks/ https://www.infosecurity-magazine.com/news/critical-vulnerability-atlassian/ A critical vulnerability affecting eight Atlassian products, including Jira and Confluence, is being exploited in the wild, said VulnCheck Thu, 08 Oct 2026 10:05:00 GMT https://www.infosecurity-magazine.com/news/critical-vulnerability-atlassian/ https://www.infosecurity-magazine.com/news/europol-us-gao-alarm-quantum/ Europol and US Government Accountability Office urge faster transition to post-quantum cryptography Thu, 08 Oct 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/europol-us-gao-alarm-quantum/ https://www.infosecurity-magazine.com/news/fbi-secret-service-fortibleed/ The FBI and Secret Service are warning Fortigate admins that their systems are still being targeted Thu, 08 Oct 2026 08:40:00 GMT https://www.infosecurity-magazine.com/news/fbi-secret-service-fortibleed/ https://www.infosecurity-magazine.com/news/ot-coalition-cisa-mandate-federal/ OTCC urged CISA to mandate baseline security requirements for federal operational technology Wed, 07 Oct 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/ot-coalition-cisa-mandate-federal/ https://www.infosecurity-magazine.com/news/attackers-hide-ai-prompt/ Barracuda finds phishing emails designed to manipulate both human users and AI assistants Wed, 07 Oct 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/attackers-hide-ai-prompt/ https://www.infosecurity-magazine.com/news/telegram-accoun-asos-tied-gaming/ A Group-IB researcher has found the Telegram account linked to the unauthorized ASOS customer notification previously engaged in gaming-item trading Wed, 07 Oct 2026 11:57:00 GMT https://www.infosecurity-magazine.com/news/telegram-accoun-asos-tied-gaming/ https://www.infosecurity-magazine.com/news/cybersecurity-pros-rely-passwords/ A Yubico survey identified a significant gap between awareness and adoption of secure methods of authentication in enterprises Wed, 07 Oct 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-pros-rely-passwords/ https://www.infosecurity-magazine.com/news/pwn2own-hackers-32-zeroday/ Ethical hackers have already found 32 zero days in various products at Pwn2Own Ireland Wed, 07 Oct 2026 09:25:00 GMT https://www.infosecurity-magazine.com/news/pwn2own-hackers-32-zeroday/ https://www.infosecurity-magazine.com/news/danish-cpr-breach-supply-chain-risk/ A breach of 8.8 million citizens on the Danish Central Register of Persons (CPR) occurred via third-party access Wed, 07 Oct 2026 08:20:00 GMT https://www.infosecurity-magazine.com/news/danish-cpr-breach-supply-chain-risk/ https://www.infosecurity-magazine.com/news/clickfix-vbscript-browser-cache/ ClickFix sites stage a VBScript payload in the browser cache to bypass the Run dialog's length limit Tue, 06 Oct 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/clickfix-vbscript-browser-cache/ https://www.infosecurity-magazine.com/news/nikkei-employee-cloud-account/ Nikkei says two employee cloud accounts were accessed, with one used to send 9,000 phishing emails Tue, 06 Oct 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/nikkei-employee-cloud-account/ https://www.infosecurity-magazine.com/news/red-hat-lightwell-remediates-400/ The IBM subsidiary has also announced its Lightwell Clearinghouse is now available to all customers Tue, 06 Oct 2026 13:01:00 GMT https://www.infosecurity-magazine.com/news/red-hat-lightwell-remediates-400/ https://www.infosecurity-magazine.com/news/medical-devices-pqc-transition/ Forescout found that just 6% of Internet of Medical Things (IoMT) and 16% of medical OT are capable of supporting post quantum cryptography Tue, 06 Oct 2026 12:20:00 GMT https://www.infosecurity-magazine.com/news/medical-devices-pqc-transition/ https://www.infosecurity-magazine.com/news/asos-customers-message-suspected/ ASOS customers have received a seemingly legitimate push notifications claiming the retailer’s IT systems have been breached through a Snowflake breach Tue, 06 Oct 2026 11:41:00 GMT https://www.infosecurity-magazine.com/news/asos-customers-message-suspected/ https://www.infosecurity-magazine.com/news/police-urge-passkey-surge/ Report Fraud says cybercrime revenue stemming from account takeover increased 417% annually Tue, 06 Oct 2026 09:15:00 GMT https://www.infosecurity-magazine.com/news/police-urge-passkey-surge/ https://www.infosecurity-magazine.com/news/affiliate-doublecrosses-raas/ An affiliate of The Gentlemen RaaS group ran a parallel leak site during extortion of two dozen victims Tue, 06 Oct 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/affiliate-doublecrosses-raas/ https://www.infosecurity-magazine.com/news/clingstun-backdoor-unpatched-iot/ ClingSTUN exploits known IoT flaws and abuses public STUN servers to keep proxy access to devices Mon, 05 Oct 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/clingstun-backdoor-unpatched-iot/ https://www.infosecurity-magazine.com/news/smtp-linux-backdoors-network-edge/ Rapid7 has uncovered new BPFDoor, BPF Rekoobe and AVERAT malware variants targeting telecom and network-edge appliances in South Korea and Taiwan Mon, 05 Oct 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/smtp-linux-backdoors-network-edge/ https://www.infosecurity-magazine.com/news/citrix-netscaler-zero-day/ The memory buffer vulnerability can result in denial of service to customers, with CISA warning it poses “significant risks” to the federal government Mon, 05 Oct 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/citrix-netscaler-zero-day/ https://www.infosecurity-magazine.com/news/google-suspends-opensource-bug/ Google has paused its Open Source Vulnerability Rewards Program due to a flood of AI submissions Mon, 05 Oct 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/google-suspends-opensource-bug/ https://www.infosecurity-magazine.com/news/uk-schools-recovering-faster/ Ofqual study finds growing number of UK schools are bouncing back “immediately” from cyber-attacks Mon, 05 Oct 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/uk-schools-recovering-faster/ https://www.infosecurity-magazine.com/news/frontline-education-breach-k12/ A breach at school software provider Frontline Education has exposed employee data Mon, 05 Oct 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/frontline-education-breach-k12/ https://www.infosecurity-magazine.com/news/microsoft-ai-attack-time-minutes/ Microsoft has warned that threat actors have gained the advantage over defenders by using AI to enhance the speed and scale of attacks Fri, 02 Oct 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/microsoft-ai-attack-time-minutes/ https://www.infosecurity-magazine.com/news/police-target-killsec-ransomware/ Investigators have disrupted the operations of ransomware group KillSec and arrested several key suspects Fri, 02 Oct 2026 09:20:00 GMT https://www.infosecurity-magazine.com/news/police-target-killsec-ransomware/ https://www.infosecurity-magazine.com/news/zerodays-dutch-institute/ The Dutch Institute for Vulnerability Disclosure reveals agentic AI-powered attack using Zammad zero-days Fri, 02 Oct 2026 08:25:00 GMT https://www.infosecurity-magazine.com/news/zerodays-dutch-institute/ https://www.infosecurity-magazine.com/news/critical-cisco-catalyst-sdwan/ Vulnerability in Cisco Catalyst SD-WAN Manager allows an unauthenticated, remote attacker to access systems with admin privileges Thu, 01 Oct 2026 14:17:00 GMT https://www.infosecurity-magazine.com/news/critical-cisco-catalyst-sdwan/ https://www.infosecurity-magazine.com/news/ta419-impersonates-ai-experts-us/ TA419 posed as AI policymakers and economists to phish US AI policy experts' Microsoft 365 accounts Thu, 01 Oct 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/ta419-impersonates-ai-experts-us/ https://www.infosecurity-magazine.com/news/cloudsyncd-macos-backdoor-fake/ CloudSyncD uses a fake Zoom installer to phish Mac passwords and launch a two-stage backdoor Thu, 01 Oct 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/cloudsyncd-macos-backdoor-fake/ https://www.infosecurity-magazine.com/news/mitigating-adversarial-ai-top/ PwC finds global security leaders are most concerned about attacks on AI systems Thu, 01 Oct 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/mitigating-adversarial-ai-top/ https://www.infosecurity-magazine.com/news/mi5-alerts-academics-chinese/ MI5 has issued a rare warning to UK academics contributing to the China General Technology Research Institute Thu, 01 Oct 2026 07:37:00 GMT https://www.infosecurity-magazine.com/news/mi5-alerts-academics-chinese/ https://www.infosecurity-magazine.com/news/ai-found-vulnerabilities-rce/ AI-discovered vulnerabilities are more likely to enable RCE, as disclosures and exploitation rise Wed, 30 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/ai-found-vulnerabilities-rce/ https://www.infosecurity-magazine.com/news/trump-ai-giants-super-intelligence/ Trump and six AI firms sign a voluntary accord on internal controls, audits and board oversight Wed, 30 Sep 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/trump-ai-giants-super-intelligence/ https://www.infosecurity-magazine.com/news/ai-boosts-soc-analyst-capacity/ Swimlane finds that AI is reducing repetitive work for SOC teams but some feel their careers may suffer Wed, 30 Sep 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/ai-boosts-soc-analyst-capacity/ https://www.infosecurity-magazine.com/news/chatgpt-feature-abuse-to-deliver/ Cybersecurity researchers at Huntress identify campaign to deliver potent trojan which targets users searching for ChatGPT via Google Wed, 30 Sep 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/chatgpt-feature-abuse-to-deliver/ https://www.infosecurity-magazine.com/news/apple-patches-coregraphics-zero/ Apple has patched CVE-2026-86950, a zero-day bug in the iOS CoreGraphics engine Wed, 30 Sep 2026 08:45:00 GMT https://www.infosecurity-magazine.com/news/apple-patches-coregraphics-zero/ https://www.infosecurity-magazine.com/news/rathat-c2-panel-malware-as-a/ RatHat's C2 panel now builds malware and ranks victims with AI across nearly 100 deployments Tue, 29 Sep 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/rathat-c2-panel-malware-as-a/ https://www.infosecurity-magazine.com/news/aws-agentcore-sdk-flaws-ai/ AWS AgentCore SDK flaws could let attackers run commands in AI sandboxes and reach AWS credentials Tue, 29 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/aws-agentcore-sdk-flaws-ai/ https://www.infosecurity-magazine.com/news/microsoft-needymantis-malware/ Microsoft Threat Intelligence warns that NeedyMantis threat actor from China has targeted organizations across a range of industries Tue, 29 Sep 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/microsoft-needymantis-malware/ https://www.infosecurity-magazine.com/news/japanese-railway-operators-cyber/ Tokyo Metro and Keio have revealed separate cyber-attacks Tue, 29 Sep 2026 09:45:00 GMT https://www.infosecurity-magazine.com/news/japanese-railway-operators-cyber/ https://www.infosecurity-magazine.com/news/kiteworks-customers-restart/ Kiteworks has lifted a temporary shutdown recommendation which was issued on the back of federal intelligence Tue, 29 Sep 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/kiteworks-customers-restart/ https://www.infosecurity-magazine.com/news/bitget-restarts-withdrawals-387-5m/ Bitget has restarted Bitcoin withdrawals after a $387.5m breach of its hot and warm wallets Mon, 28 Sep 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/bitget-restarts-withdrawals-387-5m/ https://www.infosecurity-magazine.com/news/nvidia-open-platform-secure/ NVIDIA has launched a platform pairing runtime controls with hardware monitoring for AI agents Mon, 28 Sep 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/nvidia-open-platform-secure/ https://www.infosecurity-magazine.com/news/deepfakes-costly-reality-for/ A quarter of victims of deepfake attacks have lost over $1m. CISOs worry that boardrooms don’t understand the threat Mon, 28 Sep 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/deepfakes-costly-reality-for/ https://www.infosecurity-magazine.com/news/mcp-creating-major-governance-gaps/ Ox Security found security shortcomings in analysis of over 15,000 MCP servers Mon, 28 Sep 2026 09:45:00 GMT https://www.infosecurity-magazine.com/news/mcp-creating-major-governance-gaps/ https://www.infosecurity-magazine.com/news/citrix-patches-critical-zero-days/ Citrix has confirmed exploitation of two critical zero-day RCE bugs Mon, 28 Sep 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/citrix-patches-critical-zero-days/ https://www.infosecurity-magazine.com/news/vulnerabilities-salesforce-ai/ The ‘SalesBleed’ set of weaknesses in Salesforce’s Agentforce agents exposed CRM data to attackers via prompt injection and DNS exfiltration Fri, 25 Sep 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/vulnerabilities-salesforce-ai/ https://www.infosecurity-magazine.com/news/cisa-election-security-midterms/ The CISA plan provides guidance and resources for election officials to secure systems such as voter registration databases and voting machines Fri, 25 Sep 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/cisa-election-security-midterms/ https://www.infosecurity-magazine.com/news/banking-trojan-remote-control/ The newly-discovered trojan abuses the Android Accessibility Service to gain control over victim devices and collect sensitive banking credentials Fri, 25 Sep 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/banking-trojan-remote-control/ https://www.infosecurity-magazine.com/news/aliexpress-phishing-flagged-early/ EfficientIP says it flagged AliExpress phishing domains before they were registered Fri, 25 Sep 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/aliexpress-phishing-flagged-early/ https://www.infosecurity-magazine.com/news/ransomware-gang-uses-backup/ Ransom notes by n0n ransomware claim to take double extortion to a new level of danger for victims Thu, 24 Sep 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-gang-uses-backup/ https://www.infosecurity-magazine.com/news/cisa-quality-era-global-cve-program/ CISA has set out a new framework to improve CVE data quality as vulnerability volumes rise Thu, 24 Sep 2026 12:50:00 GMT https://www.infosecurity-magazine.com/news/cisa-quality-era-global-cve-program/ https://www.infosecurity-magazine.com/news/uk-government-service-led-cyber/ Whitehall is shifting from mandatory cyber controls to service-led governance following a critical audit exposing failures of its 2022 cyber strategy Thu, 24 Sep 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/uk-government-service-led-cyber/ https://www.infosecurity-magazine.com/news/openai-hacks-australian-medicare/ Australian PM Anthony Albanese criticized OpenAI’s response to the incident, which occurred in June 2026 Thu, 24 Sep 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/openai-hacks-australian-medicare/ https://www.infosecurity-magazine.com/news/75-organizations-microsoft-365/ ShareGate study claims to reveal a governance ‘crisis’ as AI usage grows Thu, 24 Sep 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/75-organizations-microsoft-365/ https://www.infosecurity-magazine.com/news/data-top-bottleneck-barrier-threat/ SANS Institute report claims data rather than skills is now the main hurdle for threat hunters Thu, 24 Sep 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/data-top-bottleneck-barrier-threat/ https://www.infosecurity-magazine.com/news/hundreds-leaked-github-app-keys/ GitGuardian finds 474 leaked GitHub App keys still authenticating, including keys with admin access Wed, 23 Sep 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/hundreds-leaked-github-app-keys/ https://www.infosecurity-magazine.com/news/x47c-botnet-ai-api-draining-18/ Qrator found a Windows botnet advertised with AI API draining, credential theft and SOCKS5 proxying Wed, 23 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/x47c-botnet-ai-api-draining-18/ https://www.infosecurity-magazine.com/news/ransomware-attacks-reach-record/ A total of 1073 firms fell victim to ransomware attacks globally in August, with the industrial sector the most affected, according to new NCC data Wed, 23 Sep 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-attacks-reach-record/ https://www.infosecurity-magazine.com/news/shinyhunters-fbi-hack-peoplesoft/ Infamous threat group ShinyHunters claims to have personal information on thousands of FBI employees Wed, 23 Sep 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/shinyhunters-fbi-hack-peoplesoft/ https://www.infosecurity-magazine.com/news/eu-auditors-slam-blocs-cyberinfo/ The EU Court of Auditors has criticized EU shortcomings in responding to major cyber incidents Wed, 23 Sep 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/eu-auditors-slam-blocs-cyberinfo/ https://www.infosecurity-magazine.com/news/north-korean-waterplum-30000/ WaterPlum compromised 30,000 devices and took funds or credentials from 7000 crypto wallets Tue, 22 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/north-korean-waterplum-30000/ https://www.infosecurity-magazine.com/news/orgs-lack-ai-incident-response/ A new report by ISACA found that 71% of orgs have not run AI incident response exercises as teams face rising pressure Tue, 22 Sep 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/orgs-lack-ai-incident-response/ https://www.infosecurity-magazine.com/news/segmentation-failures-expanding/ Forescout warns that incomplete network segmentation is widening the potential blast radius of attacks Tue, 22 Sep 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/segmentation-failures-expanding/ https://www.infosecurity-magazine.com/news/ai-drives-surge-in-bot-and-api/ Akamai report warns of increase in bot traffic, API threats, chatbot leaks and other AI-related threats Tue, 22 Sep 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/ai-drives-surge-in-bot-and-api/ https://www.infosecurity-magazine.com/news/update-incident-response/ Gartner warns that CISOs must update incident response playbooks as AI-powered deepfakes make social engineering attacks more convincing and harder to detect Tue, 22 Sep 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/update-incident-response/ https://www.infosecurity-magazine.com/news/google-hit-with-403m-gdpr-fine/ The Irish DPC found that Google users were unaware that their location was being used to influence them with ads Mon, 21 Sep 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/google-hit-with-403m-gdpr-fine/ https://www.infosecurity-magazine.com/news/exvicy-clickfix-framework/ Sekoia said Exvicy, a new ClickFix MaaS framework, reused code from rival service ErrTraffic Mon, 21 Sep 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/exvicy-clickfix-framework/ https://www.infosecurity-magazine.com/news/attackers-abuse-npm-trusted/ CloudSEK linked GHAPPIER to a compromised npm package with valid trusted-publishing provenance Mon, 21 Sep 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/attackers-abuse-npm-trusted/ https://www.infosecurity-magazine.com/news/shinyhunters-claim-hack-of-clop/ ShinyHunters has claimed responsibility for hacking the Clop ransomware group, defacing its leak site and alleging theft of key operational data Mon, 21 Sep 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/shinyhunters-claim-hack-of-clop/ https://www.infosecurity-magazine.com/news/experts-gyazos-breach-490-million/ A breach at image-sharing service Gyazo on September 11 affected over 23 million customers Mon, 21 Sep 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/experts-gyazos-breach-490-million/ https://www.infosecurity-magazine.com/news/revolut-customers-targeted-wave/ Following a major data breach, Revolut customers are being sent convincing phishing messages Mon, 21 Sep 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/revolut-customers-targeted-wave/ https://www.infosecurity-magazine.com/news/settra-ransomware-retail/ Huntress researchers highlighted a new ransomware variant, named Settra, and the post-compromise techniques used in two recent attacks Fri, 18 Sep 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/settra-ransomware-retail/ https://www.infosecurity-magazine.com/news/cisa-upgrades-vulnerability/ The US cybersecurity agency is moving to a new vulnerability coordination platform called VINCE-NT Fri, 18 Sep 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/cisa-upgrades-vulnerability/ https://www.infosecurity-magazine.com/news/manufacturing-22-ransomware-victims/ Black Kite has found that manufacturing remained the most targeted sector for ransomware attacks, and saw a big jump in incidents in H1 2026 Fri, 18 Sep 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/manufacturing-22-ransomware-victims/ https://www.infosecurity-magazine.com/news/famoussparrow-sparrowocky-latin/ ESET said FamousSparrow has replaced SparrowDoor with SparroWocky Thu, 17 Sep 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/famoussparrow-sparrowocky-latin/ https://www.infosecurity-magazine.com/news/cisa-critical-infrastructure-cyber/ CISA released guidance on using cyber decoys to detect & disrupt malicious activity inside networks Thu, 17 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/cisa-critical-infrastructure-cyber/ https://www.infosecurity-magazine.com/news/rathat-android-malware-ai-steal/ Researchers at Zimperium have uncovered a new Android malware strain, dubbed RatHat, with spyware and backdoor capabilities Thu, 17 Sep 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/rathat-android-malware-ai-steal/ https://www.infosecurity-magazine.com/news/cyber-essentials-has-record-year/ New government figures reveal a 20% annual increase in certifications Thu, 17 Sep 2026 12:15:00 GMT https://www.infosecurity-magazine.com/news/cyber-essentials-has-record-year/ https://www.infosecurity-magazine.com/news/cisco-active-exploitation-critical/ Cisco urged ISE customers to apply a software update, as well as check for signs of exploitation Thu, 17 Sep 2026 11:15:00 GMT https://www.infosecurity-magazine.com/news/cisco-active-exploitation-critical/ https://www.infosecurity-magazine.com/news/ai-agent-carries-out-multistage/ Spanish data protection agency AEPD reveals the country’s first AI-powered data breach Thu, 17 Sep 2026 08:25:00 GMT https://www.infosecurity-magazine.com/news/ai-agent-carries-out-multistage/ https://www.infosecurity-magazine.com/news/woocommerce-wholesale-lead-capture/ Attackers are exploiting a critical flaw in a third-party WooCommerce plugin to upload PHP webshells Wed, 16 Sep 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/woocommerce-wholesale-lead-capture/ https://www.infosecurity-magazine.com/news/cisa-nist-cloud-identity-token/ CISA and NIST issued final guidance to help protect cloud identity tokens and assertions Wed, 16 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/cisa-nist-cloud-identity-token/ https://www.infosecurity-magazine.com/news/cyberattacks-cost-organizations/ Hiscox highlighted the huge financial and operational costs of cyber-attacks, with the average cost of an incident at $52,000 Wed, 16 Sep 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/cyberattacks-cost-organizations/ https://www.infosecurity-magazine.com/news/zeroday-tplink-cameras/ OPSWAT researchers find two zero-days in TP-Link cameras Wed, 16 Sep 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/zeroday-tplink-cameras/ https://www.infosecurity-magazine.com/news/cyber-vendors-mitre-uk-testing/ A group of cyber threat detection providers, including CrowdStrike, Palo Alto Networks and Sophos, have joined SE Labs’ PIVOT program Wed, 16 Sep 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/cyber-vendors-mitre-uk-testing/ https://www.infosecurity-magazine.com/news/ncsc-allies-warn-iranian-chosen/ The UK’s National Cyber Security Centre says Iranian Chosen Brick spyware is designed to snoop on dissidents Wed, 16 Sep 2026 08:25:00 GMT https://www.infosecurity-magazine.com/news/ncsc-allies-warn-iranian-chosen/ https://www.infosecurity-magazine.com/news/fraudulent-hires-credentials/ A new report highlights the vast growth in fraudulent candidates, presenting significant insider threat challenges to organizations Tue, 15 Sep 2026 15:15:00 GMT https://www.infosecurity-magazine.com/news/fraudulent-hires-credentials/ https://www.infosecurity-magazine.com/news/four-of-800-clients-hit-ransomware/ Fenix24 found only four of more than 800 clients came close to stated ransomware recovery targets of 24-48 hours Tue, 15 Sep 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/four-of-800-clients-hit-ransomware/ https://www.infosecurity-magazine.com/news/black-axe-members-extradited-us/ Alleged Black Axe leaders extradited to the US over romance scams, BEC and money laundering claims Tue, 15 Sep 2026 13:45:00 GMT https://www.infosecurity-magazine.com/news/black-axe-members-extradited-us/ https://www.infosecurity-magazine.com/news/ai-top-priority-new-spend-cyber/ IANS finds AI is dominating net-new budgets even as overall funding for the function is flat Tue, 15 Sep 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/ai-top-priority-new-spend-cyber/ https://www.infosecurity-magazine.com/news/microsoft-releases-emergency-patch/ Microsoft has been forced to issue an out-of-band fix for several issues stemming from this month’s Patch Tuesday Tue, 15 Sep 2026 08:40:00 GMT https://www.infosecurity-magazine.com/news/microsoft-releases-emergency-patch/ https://www.infosecurity-magazine.com/news/malicious-twitch-extension-oauth/ Socket has discovered a Twitch browser extension forwarding users' OAuth tokens to a Russian bot service Mon, 14 Sep 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/malicious-twitch-extension-oauth/ https://www.infosecurity-magazine.com/news/human-attacker-machine-speed/ A human attacker exploited a Marimo RCE and reached an SSH bastion in eight seconds Mon, 14 Sep 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/human-attacker-machine-speed/ https://www.infosecurity-magazine.com/news/defense-cyber-spending-attacks/ MarketsandMarkets has projected the cyber warfare market to double by 2031, amid growing demand for defensive and offensive cyber capabilities in the military Mon, 14 Sep 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/defense-cyber-spending-attacks/ https://www.infosecurity-magazine.com/news/revolut-data-breach-fake-government/ An unauthorized party used a legitimate government email domain to fraudulently request Revolut customer data Mon, 14 Sep 2026 11:20:00 GMT https://www.infosecurity-magazine.com/news/revolut-data-breach-fake-government/ https://www.infosecurity-magazine.com/news/hackers-exploit-maximum-severity/ CISA warns that threat actors are exploiting a vulnerability with a CVSS score of 10.0 Mon, 14 Sep 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/hackers-exploit-maximum-severity/ https://www.infosecurity-magazine.com/news/openai-agent-swarm-hacks-rubygems/ Researchers confirm that OpenAI agents uploaded hundreds of malicious packages to RubyGems Mon, 14 Sep 2026 08:50:00 GMT https://www.infosecurity-magazine.com/news/openai-agent-swarm-hacks-rubygems/ https://www.infosecurity-magazine.com/news/hackers-us-business-hours-m365/ KnowBe4 researchers observed a new phishing campaign leveraging Microsoft 365’s Direct Send to send malicious emails Fri, 11 Sep 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/hackers-us-business-hours-m365/ https://www.infosecurity-magazine.com/news/organizations-skip-permissions-ai/ A new Syskit study has shown that only 43% of organizations with AI agents deployed in Microsoft 365 environments completed a permission review before doing so Fri, 11 Sep 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/organizations-skip-permissions-ai/ https://www.infosecurity-magazine.com/news/cisa-updates-insider-threat-guide/ CISA has updated its insider threat guide with new advice on remote work, AI and risk detection Thu, 10 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/cisa-updates-insider-threat-guide/ https://www.infosecurity-magazine.com/news/mantaxotax-android-malware/ MantaxOtax Android malware combines ransomware with extensive spyware capabilities Thu, 10 Sep 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/mantaxotax-android-malware/ https://www.infosecurity-magazine.com/news/fbi-cyber-strategy-disrupting/ The new document appears to be part of a broader shift by the US government towards the proactive disruption of cyber threat actors Thu, 10 Sep 2026 12:15:00 GMT https://www.infosecurity-magazine.com/news/fbi-cyber-strategy-disrupting/ https://www.infosecurity-magazine.com/news/anthropic-another-cybersecurity/ Anthropic has found a fourth case of its model accessing third-party systems without authorization Thu, 10 Sep 2026 08:45:00 GMT https://www.infosecurity-magazine.com/news/anthropic-another-cybersecurity/ https://www.infosecurity-magazine.com/news/ofac-sanctions-chinese-scam/ The US Treasury has placed sanctions on notorious Chinese cybercrime marketplace Xinbi Guarantee Thu, 10 Sep 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/ofac-sanctions-chinese-scam/ https://www.infosecurity-magazine.com/news/wechat-zeroclick-worm-hijack/ The hacking tool, built using a combination of AI models, is effective against Android and iOS devices Wed, 09 Sep 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/wechat-zeroclick-worm-hijack/ https://www.infosecurity-magazine.com/news/gigabud-android-app-cloning-fraud/ Gigabud clones banking apps into a work profile to break the link between malware alerts and fraud Wed, 09 Sep 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/gigabud-android-app-cloning-fraud/ https://www.infosecurity-magazine.com/news/clickfix-browser-cryptocurrency/ ClickFix campaign uses browser-injected JavaScript and Google Sheets to steal cryptocurrency Wed, 09 Sep 2026 13:45:00 GMT https://www.infosecurity-magazine.com/news/clickfix-browser-cryptocurrency/ https://www.infosecurity-magazine.com/news/nhis-number-one-corporate-entry/ SpyCloud claims non-human identities are the most likely route into the enterprise Wed, 09 Sep 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/nhis-number-one-corporate-entry/ https://www.infosecurity-magazine.com/news/microsoft-patch-tuesday-record/ The update contained 119 critical flaws and two zero days, with security teams needing to prioritize updates Wed, 09 Sep 2026 09:40:00 GMT https://www.infosecurity-magazine.com/news/microsoft-patch-tuesday-record/ https://www.infosecurity-magazine.com/news/sap-patches-maximum-severity/ Onapsis urges SAP customers to patch “Overpass” vulnerability, which has a CVSS score of 10.0 Wed, 09 Sep 2026 08:15:00 GMT https://www.infosecurity-magazine.com/news/sap-patches-maximum-severity/ https://www.infosecurity-magazine.com/news/france-new-government-cyber/ After a major cyber-attack targeted France's national tax authority, the Prime Minister called for the establishment of a new dedicated cyber incident response capability Tue, 08 Sep 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/france-new-government-cyber/ https://www.infosecurity-magazine.com/news/grindr-settles-uk-data-privacy/ Grindr settled UK claims over alleged unlawful processing of sensitive user data Tue, 08 Sep 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/grindr-settles-uk-data-privacy/ https://www.infosecurity-magazine.com/news/ai-coding-tools-threat-actors/ Google warned that the rapid integration of AI-assisted coding tools has significantly expanded software supply chain risks Tue, 08 Sep 2026 12:02:00 GMT https://www.infosecurity-magazine.com/news/ai-coding-tools-threat-actors/ https://www.infosecurity-magazine.com/news/thost9-android-rat-packed-loader/ THost9 hides its payload and uses ADB to spread across exposed Android devices and containers Tue, 08 Sep 2026 11:15:00 GMT https://www.infosecurity-magazine.com/news/thost9-android-rat-packed-loader/ https://www.infosecurity-magazine.com/news/bigbear-2-phaas-5000-microsoft/ CloudSEK has uncovered BigBear 2.0, a new phishing-as-a-service operation targeting Microsoft 365 Tue, 08 Sep 2026 09:45:00 GMT https://www.infosecurity-magazine.com/news/bigbear-2-phaas-5000-microsoft/ https://www.infosecurity-magazine.com/news/trezor-supply-chain-breach-impacts/ Crypto wallet-maker Trezor says a data breach at supplier ShipMonk is far worse than originally thought Tue, 08 Sep 2026 09:08:00 GMT https://www.infosecurity-magazine.com/news/trezor-supply-chain-breach-impacts/ https://www.infosecurity-magazine.com/news/ncsc-warns-shadow-ai-security-risks/ NCSC warns unapproved AI tools can expose corporate data and create new security risks Mon, 07 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/ncsc-warns-shadow-ai-security-risks/ https://www.infosecurity-magazine.com/news/nable-hotfix-critical-rce/ The vulnerability, CVE-2026-86218, was allocated a maximum-severity rating by the software provider itself Mon, 07 Sep 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/nable-hotfix-critical-rce/ https://www.infosecurity-magazine.com/news/rhysida-berlin-data-extortion/ The ransomware group’s published dataset reportedly includes Berlin state employee data, as well as highly sensitive emergency plans Mon, 07 Sep 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/rhysida-berlin-data-extortion/ https://www.infosecurity-magazine.com/news/north-korea-lazarus-six-cyber/ Sekoia and Kudelski Security have observed that North Korea's Lazarus umbrella is split into six distinct clusters, focused on espionage, financial theft and sanctions evasion Mon, 07 Sep 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/north-korea-lazarus-six-cyber/ https://www.infosecurity-magazine.com/news/multiple-class-action-lawsuits/ Several victims of a recent breach of driver’s license information have sued the company they believe responsible Mon, 07 Sep 2026 09:10:00 GMT https://www.infosecurity-magazine.com/news/multiple-class-action-lawsuits/ https://www.infosecurity-magazine.com/news/crowdstrike-privilege-escalation/ A security researcher has posted a zero-day exploit in CrowdStrike which could allow hackers to escalate privileges Mon, 07 Sep 2026 08:28:00 GMT https://www.infosecurity-magazine.com/news/crowdstrike-privilege-escalation/ https://www.infosecurity-magazine.com/news/openai-pledges-ai-tools-essential/ OpenAI has committed to subsidizing access to Daybreak, helping defenders deploy its AI models in its existing cybersecurity infrastructure Fri, 04 Sep 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/openai-pledges-ai-tools-essential/ https://www.infosecurity-magazine.com/news/g7-urges-quantum-safe-cyber-rules/ The G7 has published a call to action, urging governments to launch national strategies dedicated to the post-quantum encryption transition Fri, 04 Sep 2026 09:25:00 GMT https://www.infosecurity-magazine.com/news/g7-urges-quantum-safe-cyber-rules/ https://www.infosecurity-magazine.com/news/pegasus-zero-click-exploit/ Pegasus infected a Serbian student activist's iPhone through an iMessage zero-click exploit Thu, 03 Sep 2026 15:25:00 GMT https://www.infosecurity-magazine.com/news/pegasus-zero-click-exploit/ https://www.infosecurity-magazine.com/news/outsider-phishing-kit-survives/ Outsider phishing kit generated 700 new pages after a Google-led disruption Thu, 03 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/outsider-phishing-kit-survives/ https://www.infosecurity-magazine.com/news/crest-first-cohort-ai-pentesting/ CREST’s new AI-enabled penetration testing accreditation welcomes its first 10 providers Thu, 03 Sep 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/crest-first-cohort-ai-pentesting/ https://www.infosecurity-magazine.com/news/us-canada-court-breach-thomson/ Thomson Reuters has disclosed a cyber incident affecting its C-Track court management software, potentially exposing court records in Canada and the US Thu, 03 Sep 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/us-canada-court-breach-thomson/ https://www.infosecurity-magazine.com/news/fbi-probes-breach-153-million/ The FBI is investigating how scans of over 153 million driver’s licenses are being sold on the dark web Thu, 03 Sep 2026 09:33:00 GMT https://www.infosecurity-magazine.com/news/fbi-probes-breach-153-million/ https://www.infosecurity-magazine.com/news/international-operation-disrupts/ US-led action sinkholes machines caught up in Sality botnet Thu, 03 Sep 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/international-operation-disrupts/ https://www.infosecurity-magazine.com/news/russian-man-extradited-malware/ Russian man extradited to US over malware campaign that targeted 80,000 freelance users Wed, 02 Sep 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/russian-man-extradited-malware/ https://www.infosecurity-magazine.com/news/gambling-goblin-brazilian/ Gambling Goblin compromised Brazilian government sites to drive gambling traffic through SEO fraud Wed, 02 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/gambling-goblin-brazilian/ https://www.infosecurity-magazine.com/news/nutex-patient-data-stolen/ The US healthcare provider confirmed that sensitive patient and employee data, alongside financial and business information, were exfiltrated by a third party Wed, 02 Sep 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/nutex-patient-data-stolen/ https://www.infosecurity-magazine.com/news/hackers-chain-sonicwall-zeroday/ SonicWall has urged customers to patch two new zero-day vulnerabilities being exploited in the wild Wed, 02 Sep 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/hackers-chain-sonicwall-zeroday/ https://www.infosecurity-magazine.com/news/fulcrumsec-manchester-airport/ Threat group FulcrumSec claims MAG breach and leaks 550GB of data online Wed, 02 Sep 2026 08:15:00 GMT https://www.infosecurity-magazine.com/news/fulcrumsec-manchester-airport/ https://www.infosecurity-magazine.com/news/attackers-steal-metr-api-key/ Attackers used a stolen METR API key for three weeks, consuming model credits worth $600,000 Tue, 01 Sep 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/attackers-steal-metr-api-key/ https://www.infosecurity-magazine.com/news/65-percent-enterprises-ai-agents/ EMA survey finds 65% of enterprises have seen AI agents act beyond intended scope Tue, 01 Sep 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/65-percent-enterprises-ai-agents/ https://www.infosecurity-magazine.com/news/white-house-texas-protect-water/ Project Watershed 250 will see water providers in Texas provided with federal and private sector cybersecurity resources amid rising nation-state threats Tue, 01 Sep 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/white-house-texas-protect-water/ https://www.infosecurity-magazine.com/news/financial-stability-board-alarm/ The Financial Stability Board has warned G20 banking leaders about the cyber risks of frontier AI Tue, 01 Sep 2026 09:20:00 GMT https://www.infosecurity-magazine.com/news/financial-stability-board-alarm/ https://www.infosecurity-magazine.com/news/healthcare-mckesson-investigates/ ShinyHunters claims to have stolen 284 million records from McKesson Tue, 01 Sep 2026 08:25:00 GMT https://www.infosecurity-magazine.com/news/healthcare-mckesson-investigates/ https://www.infosecurity-magazine.com/news/fake-voicemail-svg-files-bypass/ A large-scale phishing campaign used fake voicemail SVG attachments to bypass email defenses, targeting 5527 organizations with over 26,000 malicious messages Fri, 28 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/fake-voicemail-svg-files-bypass/ https://www.infosecurity-magazine.com/news/window-ai-attacks-narrowing-tech/ More than 100 companies, including OpenAI, Anthropic, Google and Microsoft, have urged collective action to unlock the power of AI to protect critical public services Fri, 28 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/window-ai-attacks-narrowing-tech/ https://www.infosecurity-magazine.com/news/abuse-cursor-agent-ransomware/ Aurora ransomware operators are abusing SpaceX’s Cursor Agent AI tool to conduct tasks such as reconnaissance and exploitation activities Fri, 28 Aug 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/abuse-cursor-agent-ransomware/ https://www.infosecurity-magazine.com/news/manchester-airports-data-breach/ Customer data linked to bookings and airport Wi-Fi registrations at Manchester, Stansted and East Midlands airports has been accessed by an unauthorized third party Thu, 27 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/manchester-airports-data-breach/ https://www.infosecurity-magazine.com/news/chinese-qtfy-us-infrastructure-fbi/ The FBI advisory set out QTFY’s distributed hacking ecosystem, allowing it to exploit vulnerabilities at scale and obfuscate its activities Thu, 27 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/chinese-qtfy-us-infrastructure-fbi/ https://www.infosecurity-magazine.com/news/cisa-kev-microsoft-citrix/ CISA added six new bugs to its Known Exploited Vulnerabilities catalog on August 26, showing signs of active exploitation in the wild Thu, 27 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/cisa-kev-microsoft-citrix/ https://www.infosecurity-magazine.com/news/boston-scientific-global/ MedTech giant Boston Scientific has revealed IT outages following a cyber incident Thu, 27 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/boston-scientific-global/ https://www.infosecurity-magazine.com/news/openai-hugging-face-warning-shot/ OpenAI reveals that unauthorized message boards were at the heart of the recent Hugging Face breach Thu, 27 Aug 2026 09:15:00 GMT https://www.infosecurity-magazine.com/news/openai-hugging-face-warning-shot/ https://www.infosecurity-magazine.com/news/tortoiseshell-new-backdoor-ssh/ Group-IB uncovered new Tortoiseshell infrastructure, including a backdoor and SSH tunneling tool Wed, 26 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/tortoiseshell-new-backdoor-ssh/ https://www.infosecurity-magazine.com/news/interpol-operation-jackal-iv/ Interpol operation leads to 58 arrests and identifies 263 suspects across 22 countries Wed, 26 Aug 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/interpol-operation-jackal-iv/ https://www.infosecurity-magazine.com/news/four-in-five-ai-tools-no-it/ Reco report reveals growing shadow AI problem and surge in vulnerability disclosures Wed, 26 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/four-in-five-ai-tools-no-it/ https://www.infosecurity-magazine.com/news/cyber-insurance-losses-increase/ Chubb reported that growing privacy litigation has contributed to surging cyber claim costs in the US Wed, 26 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/cyber-insurance-losses-increase/ https://www.infosecurity-magazine.com/news/linux-foundation-trace-standard-ai/ This new open standard offers hardware-attested runtime and compliance evidence for AI agents Wed, 26 Aug 2026 09:10:00 GMT https://www.infosecurity-magazine.com/news/linux-foundation-trace-standard-ai/ https://www.infosecurity-magazine.com/news/ddos-attack-hits-norwegian/ A coordinated DDoS campaign has caused disruption among Norwegian government services Wed, 26 Aug 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/ddos-attack-hits-norwegian/ https://www.infosecurity-magazine.com/news/zerotokens-phishing-real-time/ ZeroTokens gives phishing operators live control of victim sessions targeting 53 financial brands Tue, 25 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/zerotokens-phishing-real-time/ https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/ RecruitTrap campaigns use mobile-optimized phishing pages to target enterprise credentials Tue, 25 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/ https://www.infosecurity-magazine.com/news/australia-exploitation-teamcity/ Australian officials are urging TeamCity customers to patch an actively exploited critical flaw, which follows a similar warning from the US government Tue, 25 Aug 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/australia-exploitation-teamcity/ https://www.infosecurity-magazine.com/news/fake-minecraft-weedhack-malware/ A threat actor keeps spreading the WeedHack malware to Minecraft players despite its original infrastructure taken down in July Tue, 25 Aug 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/fake-minecraft-weedhack-malware/ https://www.infosecurity-magazine.com/news/reliaquest-not-compromised-by/ ReliaQuest has detailed a social engineering attack linked to ShinyHunters, denying reports that the threat actor successfully compromised its systems Tue, 25 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/reliaquest-not-compromised-by/ https://www.infosecurity-magazine.com/news/us-sanctions-mabna-institute/ The US has sanctioned individuals connected to hacking-for-hire group the Mabna Institute Tue, 25 Aug 2026 09:10:00 GMT https://www.infosecurity-magazine.com/news/us-sanctions-mabna-institute/ https://www.infosecurity-magazine.com/news/guidance-verify-quantum-safe/ TCG has released new guidance to help proving that trusted platform modules genuinely meet essential quantum-safe requirements Mon, 24 Aug 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/guidance-verify-quantum-safe/ https://www.infosecurity-magazine.com/news/nist-risks-multi-cloud/ NIST has set out 23 novel challenges that arise in multi-cloud environments and has encouraged the cyber community to find solutions Mon, 24 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/nist-risks-multi-cloud/ https://www.infosecurity-magazine.com/news/fake-codex-download-google-sites/ Fake Codex pages used Google Sites, sponsored search and ClickFix to target Mac users Mon, 24 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/fake-codex-download-google-sites/ https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/ Doubloon Dredger abused Notion and malicious PDFs to harvest Microsoft authentication tokens Mon, 24 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/ https://www.infosecurity-magazine.com/news/cni-iranian-attack-shuts-uk-power/ Experts argue Iranian cyber-attack on UK power plant lays bare frailty of critical national infrastructure Mon, 24 Aug 2026 09:01:00 GMT https://www.infosecurity-magazine.com/news/cni-iranian-attack-shuts-uk-power/ https://www.infosecurity-magazine.com/news/researchers-thousands-eaked-aws/ Truffle Security says it found over 9000 publicly accessible and active AWS key pairs Mon, 24 Aug 2026 08:05:00 GMT https://www.infosecurity-magazine.com/news/researchers-thousands-eaked-aws/ https://www.infosecurity-magazine.com/news/north-korean-rust-supply-chain/ Cybersecurity researchers have linked a malicious backdoor in compromised Rust packages to previous North Korean supply chain attacks Fri, 21 Aug 2026 12:40:00 GMT https://www.infosecurity-magazine.com/news/north-korean-rust-supply-chain/ https://www.infosecurity-magazine.com/news/agent-tesla-malware-evasion/ An Agent Tesla v4 malware campaign used novel emoji-based code obfuscation to evade detection, KnowBe4 has revealed Fri, 21 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/agent-tesla-malware-evasion/ https://www.infosecurity-magazine.com/news/cybersecurity-job-ads-ai-skills/ An analysis by the AI Workforce Consortium found that technical cybersecurity jobs are becoming more strategic due to the influence of AI Fri, 21 Aug 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-job-ads-ai-skills/ https://www.infosecurity-magazine.com/news/ncsc-stronger-controls-agentic-ai/ NCSC urged sandboxing, oversight and tight access controls for autonomous AI agents Thu, 20 Aug 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/ncsc-stronger-controls-agentic-ai/ https://www.infosecurity-magazine.com/news/us-defense-contractors-cmmc-scores/ Defense contractors in the US are doubting their own self-assessment scores under CMMC Phase I, even as those scores hit an all-time high Thu, 20 Aug 2026 12:40:00 GMT https://www.infosecurity-magazine.com/news/us-defense-contractors-cmmc-scores/ https://www.infosecurity-magazine.com/news/ics-ai-attacks-siemens/ A US government advisory warned that attackers are deploying AI-generated exploitation scripts against exposed Siemens S7 Series PLCs Thu, 20 Aug 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/ics-ai-attacks-siemens/