https://www.infosecurity-magazine.com/application-security/ Copyright © 2026 Reed Exhibitions Ltd. All Rights Reserved. https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/ RecruitTrap campaigns use mobile-optimized phishing pages to target enterprise credentials Tue, 25 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/ https://www.infosecurity-magazine.com/news/australia-exploitation-teamcity/ Australian officials are urging TeamCity customers to patch an actively exploited critical flaw, which follows a similar warning from the US government Tue, 25 Aug 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/australia-exploitation-teamcity/ https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/ Doubloon Dredger abused Notion and malicious PDFs to harvest Microsoft authentication tokens Mon, 24 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/ https://www.infosecurity-magazine.com/news/ncsc-stronger-controls-agentic-ai/ NCSC urged sandboxing, oversight and tight access controls for autonomous AI agents Thu, 20 Aug 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/ncsc-stronger-controls-agentic-ai/ https://www.infosecurity-magazine.com/news/updated-toxicpanda-140-banking/ Zimperium lifts the lid on the ToxicPanda 2.0 Android banking Trojan Thu, 20 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/updated-toxicpanda-140-banking/ https://www.infosecurity-magazine.com/news/linux-foundations-akrites-go-live/ The Linux Foundation's Akrites initiative will become operational in September, when it will begin accepting AI-powered vulnerability reports for open-source projects Wed, 19 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/linux-foundations-akrites-go-live/ https://www.infosecurity-magazine.com/opinions/restrictions-anthropic-orgs-ai/ The temporary Anthropic AI shutdown highlighted the risks of AI provider dependency and why governance and contingency planning are important for organizations Wed, 19 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/opinions/restrictions-anthropic-orgs-ai/ https://www.infosecurity-magazine.com/news/wiz-ai-agent-finds-snowflake/ The security flaw in Snowflake’s GitHub Actions workflow had been missed by a GitHub Advanced Security scan, said a Wiz researcher Tue, 18 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/wiz-ai-agent-finds-snowflake/ https://www.infosecurity-magazine.com/news/enterprise-apps-critical-high/ Enterprise software creation has accelerated as vulnerability levels rise, Sonatype finds Tue, 18 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/enterprise-apps-critical-high/ https://www.infosecurity-magazine.com/news/nasa-ground-control-software-flaw/ Critical AIT-GUI flaws expose spacecraft commands and scripts to unauthenticated attackers Tue, 18 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/nasa-ground-control-software-flaw/ https://www.infosecurity-magazine.com/news/threequarters-ransomware-attacks/ Black Kite finds mid-market is the sweet spot for ransomware as manufacturers are most likely to be hit Tue, 18 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/threequarters-ransomware-attacks/ https://www.infosecurity-magazine.com/news/unisoc-modem-flaw-rce-calls/ UNISOC modem flaw enabled kernel-level code execution through video calls Mon, 17 Aug 2026 15:45:00 GMT https://www.infosecurity-magazine.com/news/unisoc-modem-flaw-rce-calls/ https://www.infosecurity-magazine.com/news/wordpress-plugin-flaw-40000-sites/ Critical User Profile Builder flaw let unauthenticated attackers access administrator accounts Mon, 17 Aug 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/wordpress-plugin-flaw-40000-sites/ https://www.infosecurity-magazine.com/news/etsi-proposes-17-cybersecurity/ The European Telecommunications Standards Institute has launched an approval process for standards vendors will have to meet under the Cyber Resilience Act Mon, 17 Aug 2026 11:15:00 GMT https://www.infosecurity-magazine.com/news/etsi-proposes-17-cybersecurity/ https://www.infosecurity-magazine.com/opinions/privacy-ai-world-default-feature/ Protecting privacy in AI has to go beyond policies and be built into the system itself Fri, 14 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/opinions/privacy-ai-world-default-feature/ https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/ Attackers exploited a critical-severity vCenter flaw five days after Broadcom disclosed it Thu, 13 Aug 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/ https://www.infosecurity-magazine.com/news/ico-reprimands-acro-records-office/ The ICO has issued a formal reprimand to ACRO after patching and security monitoring failures led to a breach Thu, 13 Aug 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/ico-reprimands-acro-records-office/ https://www.infosecurity-magazine.com/news/windrelay-nfc-relay-spynote-rat/ New WindRelay NFC malware paired with SpyNote RAT let a fraudster clone a card mid-call Wed, 12 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/windrelay-nfc-relay-spynote-rat/ https://www.infosecurity-magazine.com/news/gunra-ransomware-fortinet-flaws/ Gunra actors are using stealth to exfiltrate vast volumes of data from Microsoft services, US and Korean agencies have warned Wed, 12 Aug 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/gunra-ransomware-fortinet-flaws/ https://www.infosecurity-magazine.com/news/nist-seeks-public-input-ai-nvd/ The US National Institute for Standards and Technology wants to modernize its National Vulnerability Database to embrace AI-powered vulnerability research Wed, 12 Aug 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/nist-seeks-public-input-ai-nvd/ https://www.infosecurity-magazine.com/news/microsoft-fixes-400-flaws-august/ Microsoft has issued another massive batch of security updates with 400 fixed in the August Patch Tuesday Wed, 12 Aug 2026 08:12:00 GMT https://www.infosecurity-magazine.com/news/microsoft-fixes-400-flaws-august/ https://www.infosecurity-magazine.com/news/cursor-security-bug-command/ Cursor fixed a pre-trust code execution path in three days then closed the report as informative Tue, 11 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/cursor-security-bug-command/ https://www.infosecurity-magazine.com/news/openai-daybreak-blue-red-gpt-cyber/ Daybreak Blue removes some OpenAI-made guardrails while Daybreak Red grants the use of cyber-focused frontier AI models Tue, 11 Aug 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/openai-daybreak-blue-red-gpt-cyber/ https://www.infosecurity-magazine.com/news/openai-pauses-development-astra/ OpenAI is tightening restrictions on testing of its upcoming Astra model due to security concerns Tue, 11 Aug 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/openai-pauses-development-astra/ https://www.infosecurity-magazine.com/news/rovoblast-atlassian-rovo-url/ Atlassian fixed a flaw letting one crafted link make its Rovo AI assistant exfiltrate company data Mon, 10 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/rovoblast-atlassian-rovo-url/ https://www.infosecurity-magazine.com/news/bdthemes-wordpress-poisoned-api/ Poisoned JSON feed let attackers backdoor WordPress sites without changing any plugin files Mon, 10 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/bdthemes-wordpress-poisoned-api/ https://www.infosecurity-magazine.com/news/ghostjacking-ai-gents-access/ Tenet reported that half of Fortune 500 companies are vulnerable to the Ghostjacking technique, which involves tricking AI agents with fake reports Mon, 10 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/ghostjacking-ai-gents-access/ https://www.infosecurity-magazine.com/opinions/vulnerability-management-together/ Creativity and collaboration are vital traits for cyber professionals involved in vulnerability management amid growing challenges from AI Fri, 07 Aug 2026 13:14:00 GMT https://www.infosecurity-magazine.com/opinions/vulnerability-management-together/ https://www.infosecurity-magazine.com/news/khunt-toolkit-oracle-database-sql/ Attackers used SQL injection to compile a post-exploitation toolkit inside an Oracle database Thu, 06 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/khunt-toolkit-oracle-database-sql/ https://www.infosecurity-magazine.com/news/paperclip-ai-vulnerabilities-rce/ 3 Paperclip flaws exposed data & allowed unauthenticated command execution in two deployment modes Wed, 05 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/paperclip-ai-vulnerabilities-rce/ https://www.infosecurity-magazine.com/news/prompt-injection-llm-risk/ Prompt injection remains the most dangerous security threat to LLMs, according to OWASP’s latest Top 10 LLM Applications list Wed, 05 Aug 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/prompt-injection-llm-risk/ https://www.infosecurity-magazine.com/news/chaindrop-worm-400-npm-two-billion/ A new npm worm has compromised packages with over two billion monthly installs Wed, 05 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/chaindrop-worm-400-npm-two-billion/ https://www.infosecurity-magazine.com/news/whatsapp-voting-scam-linked/ WhatsApp scam abused the Linked devices feature to hijack accounts without stealing any passwords Tue, 04 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/whatsapp-voting-scam-linked/ https://www.infosecurity-magazine.com/news/talos-attackers-split-tasks-evade/ Talos read attacker prompt logs and found guardrails fell to task splitting and ownership claims Tue, 04 Aug 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/talos-attackers-split-tasks-evade/ https://www.infosecurity-magazine.com/interviews/university-of-arts-london/ University of the Arts London's Keith Joy explains the unique cybersecurity challenges facing higher education and how institutions can secure users without restricting creativity Tue, 04 Aug 2026 09:06:00 GMT https://www.infosecurity-magazine.com/interviews/university-of-arts-london/ https://www.infosecurity-magazine.com/news/chinalinked-threat-actors/ Chinese actors exploited the critical React2Shell exploit inside a day, while 88% of exploited vulnerabilities in H1 2026 were compromised within 48 hours of disclosure Mon, 03 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/chinalinked-threat-actors/ https://www.infosecurity-magazine.com/news/captivecrunch-midnight-blizzard/ Russian actor Storm-2945 hijacked hotel captive portals to push fake updates and steal tokens Mon, 03 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/captivecrunch-midnight-blizzard/ https://www.infosecurity-magazine.com/news-features/how-cybersecurity-vendors-prepare/ Infosecurity has contacted over a dozen cybersecurity vendors to examine how they are integrating NIST-approved quantum-safe algorithms into their roadmaps Mon, 03 Aug 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news-features/how-cybersecurity-vendors-prepare/ https://www.infosecurity-magazine.com/opinions/brower-securitys-front-line-in-age/ Security teams face an uphill battle in understanding the tools already inside their environment, their capabilities, and their risks. Shadow AI adds to the challenge Mon, 03 Aug 2026 09:00:00 GMT https://www.infosecurity-magazine.com/opinions/brower-securitys-front-line-in-age/ https://www.infosecurity-magazine.com/news/coldcard-users-lose-89m-bitcoin/ A hacker has drained nearly $89m from Coldcard Bitcoin wallets after exploiting a legacy bug Mon, 03 Aug 2026 08:40:00 GMT https://www.infosecurity-magazine.com/news/coldcard-users-lose-89m-bitcoin/ https://www.infosecurity-magazine.com/opinions/ai-bug-bounty-researchers/ If everyone uses the same Frontier AI models to hunt for bugs, they all have the same blind spots. But humans still provide unique expertise and insight Fri, 31 Jul 2026 09:00:00 GMT https://www.infosecurity-magazine.com/opinions/ai-bug-bounty-researchers/ https://www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/ Cryptomining crew abandoned root to impersonate low-privileged Linux users and evade SOC alerts Thu, 30 Jul 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/ https://www.infosecurity-magazine.com/news/aitm-phishing-top-entry-point-law/ AiTM phishing is now the top entry point into law firms, with identity behind 56% of threats Thu, 30 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/aitm-phishing-top-entry-point-law/ https://www.infosecurity-magazine.com/news/ai-automation-fall-short-sysadmin/ Action1 report finds sysadmins overestimated their use of AI in predictions made two years ago Thu, 30 Jul 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/ai-automation-fall-short-sysadmin/ https://www.infosecurity-magazine.com/news/google-patches-370-vulnerabilities/ The new version of Chrome, 151, comes with 370 vulnerability patches, including for seven critical flaws Thu, 30 Jul 2026 09:15:00 GMT https://www.infosecurity-magazine.com/news/google-patches-370-vulnerabilities/ https://www.infosecurity-magazine.com/news/one-percent-ai-vulnerabilities/ For now, the use of AI benefits vulnerability research more than vulnerability exploitation, a VulnCheck researcher said Wed, 29 Jul 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/one-percent-ai-vulnerabilities/ https://www.infosecurity-magazine.com/opinions/agentic-ai-demands-new-approach-to/ Existing IAM is limited by scale and velocity - and agentic AI requires a level of authorization granularity that existing IAM can’t handle Wed, 29 Jul 2026 08:00:00 GMT https://www.infosecurity-magazine.com/opinions/agentic-ai-demands-new-approach-to/ https://www.infosecurity-magazine.com/news/hugging-face-diffusers-trust/ Three CVEs in Hugging Face diffusers let a malicious model repo run code on any machine that loads it Tue, 28 Jul 2026 15:15:00 GMT https://www.infosecurity-magazine.com/news/hugging-face-diffusers-trust/ https://www.infosecurity-magazine.com/news/ai-linux-kernel-zero-day-net-sched/ AI-assisted research uncovered Linux kernel use-after-free allowing root escalation Tue, 28 Jul 2026 14:45:00 GMT https://www.infosecurity-magazine.com/news/ai-linux-kernel-zero-day-net-sched/ https://www.infosecurity-magazine.com/news/nvidia-open-security-ai-alliance/ NVIDIA has launched a new Open Secure AI Alliance to build an “open defense stack for agents” Tue, 28 Jul 2026 09:40:00 GMT https://www.infosecurity-magazine.com/news/nvidia-open-security-ai-alliance/ https://www.infosecurity-magazine.com/news/crest-ai-pentesting-accreditation/ CREST’s new AI standards are optional add-on requirements for cybersecurity service providers wishing to demonstrate responsible AI usage Tue, 28 Jul 2026 08:57:00 GMT https://www.infosecurity-magazine.com/news/crest-ai-pentesting-accreditation/ https://www.infosecurity-magazine.com/news/russian-hackers-zero-click/ International agencies issue joint alert over state-backed campaign exploiting a critical vulnerability in the Zimbra Collaboration Suite Thu, 23 Jul 2026 15:50:00 GMT https://www.infosecurity-magazine.com/news/russian-hackers-zero-click/ https://www.infosecurity-magazine.com/news/ai-agents-attack-surface/ Sophos report warns that the rapid adoption of AI by businesses is leaving them vulnerable to a new source of cyber threats Thu, 23 Jul 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/ai-agents-attack-surface/ https://www.infosecurity-magazine.com/news/ubuntu-snap-confine-local-root-cve/ New Ubuntu snap-confine race condition lets local users escalate to root on default installs Wed, 22 Jul 2026 10:50:00 GMT https://www.infosecurity-magazine.com/news/ubuntu-snap-confine-local-root-cve/ https://www.infosecurity-magazine.com/news/google-codemender-available-ai/ CodeMender actively builds and runs exploits in customer-managed sandboxes to verify if vulnerabilities are truly exploitable Wed, 22 Jul 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/google-codemender-available-ai/ https://www.infosecurity-magazine.com/news/trim-jailbroken-claude-ai-pentest/ Russian-speaking actor Trim built a commercial offensive AI pentest tool on jailbroken Claude models Tue, 21 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/trim-jailbroken-claude-ai-pentest/ https://www.infosecurity-magazine.com/news/new-ransomware-weekly/ Analysis by Black Kite warns that ransomware ecosystem is becoming bigger and more fragmented Tue, 21 Jul 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/new-ransomware-weekly/ https://www.infosecurity-magazine.com/news/fbi-deepfake-videos-ic3/ FBI warned of deepfake videos of IC3 leadership directing users to spoofed complaint sites Tue, 21 Jul 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/fbi-deepfake-videos-ic3/ https://www.infosecurity-magazine.com/news/researchers-wordpress-exploit/ A researcher who discovered a critical vulnerability in WordPress has used OpenAI’s latest model to develop an exploit chain Mon, 20 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/researchers-wordpress-exploit/ https://www.infosecurity-magazine.com/news/hollowgraph-microsoft-calendars/ Researchers have linked HollowGraph malware to the Cavern framework after discovering its use of Microsoft 365 calendars and Microsoft Graph APIs as a stealthy C2 channel Mon, 20 Jul 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/hollowgraph-microsoft-calendars/ https://www.infosecurity-magazine.com/opinions/cybersecurity-economics-broken-ai/ Fri, 17 Jul 2026 08:00:00 GMT https://www.infosecurity-magazine.com/opinions/cybersecurity-economics-broken-ai/ https://www.infosecurity-magazine.com/news/chatgpt55-to-execute-full/ Cybersecurity researchers tested Open AI GPT 5.5’s offensive cyber capabilities – and the results showed how effective a frontier LLM can be for hackers Thu, 16 Jul 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/chatgpt55-to-execute-full/ https://www.infosecurity-magazine.com/news/uefi-shims-secure-boot-bypass/ Eleven forgotten Microsoft-signed UEFI shims can bypass Secure Boot on almost any machine Wed, 15 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/uefi-shims-secure-boot-bypass/ https://www.infosecurity-magazine.com/news/compromised-logins-ransomware-entry/ Research of incidents by Sophos finds that phishing, brute force attacks and other identity-based threats have surpassed software vulnerabilities as means of delivering ransomware Wed, 15 Jul 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/compromised-logins-ransomware-entry/ https://www.infosecurity-magazine.com/news/progress-restores-sharefile/ Progress has restored access to its ShareFile Storage Zones Controller after a four-day suspension triggered by a credible external security threat Wed, 15 Jul 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/progress-restores-sharefile/ https://www.infosecurity-magazine.com/news/microsoft-570-cves-patch-tuesday/ Microsoft released fixes for a record 570 CVEs in its July Patch Tuesday update, as experts warn AI is dramatically accelerating vulnerability discovery and increasing patch volumes Wed, 15 Jul 2026 09:20:00 GMT https://www.infosecurity-magazine.com/news/microsoft-570-cves-patch-tuesday/ https://www.infosecurity-magazine.com/opinions/engineering-for-resilience/ Bad actors explore our digital supply chains to find weak links. We must fix these weaknesses Wed, 15 Jul 2026 09:01:00 GMT https://www.infosecurity-magazine.com/opinions/engineering-for-resilience/ https://www.infosecurity-magazine.com/news/macos-malware-apple-crash-reporter/ Researchers at Jamf Threat Labs detail CrashStealer, which steals passwords, cryptocurrency wallets and more Tue, 14 Jul 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/macos-malware-apple-crash-reporter/ https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/ Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA Mon, 13 Jul 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/ https://www.infosecurity-magazine.com/news/chinese-indian-espionage-pakistani/ Chinese and Indian spies converged on the same Balochistan police force, SentinelLabs found Mon, 13 Jul 2026 14:45:00 GMT https://www.infosecurity-magazine.com/news/chinese-indian-espionage-pakistani/ https://www.infosecurity-magazine.com/news/novel-spoofing-technique-targets/ New research reveals cyber-attackers can spoof OAuth Client IDs in Microsoft Entra ID, creating a stealthy path into cloud environments Mon, 13 Jul 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/novel-spoofing-technique-targets/ https://www.infosecurity-magazine.com/news/progress-warns-security-threat/ Progress Software, the provider of the popular file-sharing and data storage solutions, has urged customers to shut down the server hosting their Storage Zone Controller Mon, 13 Jul 2026 12:05:00 GMT https://www.infosecurity-magazine.com/news/progress-warns-security-threat/ https://www.infosecurity-magazine.com/news/russian-state-hackers-vulnerable/ Cybersecurity agencies from 12 countries have warned that Russian state-backed hackers are actively targeting vulnerable routers using weak SNMP credentials Mon, 13 Jul 2026 10:40:00 GMT https://www.infosecurity-magazine.com/news/russian-state-hackers-vulnerable/ https://www.infosecurity-magazine.com/news/australia-warns-global-cms/ Australian Cyber Security Centre warns CMS users of mass scanning and exploitation campaign Mon, 13 Jul 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/australia-warns-global-cms/ https://www.infosecurity-magazine.com/news/microsoft-increase-number-security/ Microsoft has said the volume of Windows security updates is set to grow as it uses AI to find new bugs Fri, 10 Jul 2026 09:33:00 GMT https://www.infosecurity-magazine.com/news/microsoft-increase-number-security/ https://www.infosecurity-magazine.com/news/ghostapproval-flaw-ai-coding/ Wiz discovered GhostApproval, a symlink flaw in six major AI coding assistants that bypasses approval Thu, 09 Jul 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/ghostapproval-flaw-ai-coding/ https://www.infosecurity-magazine.com/news/cybercriminals-plant-ai-agents/ Cybersecurity researchers at ESET identify big rise in suspicious and malicious toolsets which put users at risk from cyber-attacks Thu, 09 Jul 2026 07:30:00 GMT https://www.infosecurity-magazine.com/news/cybercriminals-plant-ai-agents/ https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/ Zimperium found RedWing, an Android spyware sold as a service via Telegram to target banking apps Wed, 08 Jul 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/ https://www.infosecurity-magazine.com/news/threat-actor-agentic-ai-cloud/ Sygnia report details how agentic AI accelerated weeks-long attack to just 72 hours Wed, 08 Jul 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/threat-actor-agentic-ai-cloud/ https://www.infosecurity-magazine.com/news-features/faster-cyberattacks-reshape/ Hackers can get in and out of enterprise networks faster than ever. Here's why - and hat it means for your cybersecurity strategy Wed, 08 Jul 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news-features/faster-cyberattacks-reshape/ https://www.infosecurity-magazine.com/news/ncsc-national-cyber-sheild-ai/ The National Cyber Security Centre wants to work with AI partners to build a new “Cyber Shield” to defend the UK Wed, 08 Jul 2026 08:10:00 GMT https://www.infosecurity-magazine.com/news/ncsc-national-cyber-sheild-ai/ https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/ A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and Canada and harvest user credentials Tue, 07 Jul 2026 15:40:00 GMT https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/ https://www.infosecurity-magazine.com/news/exploit-maximum-severity-adobe/ Threat actors are exploiting an Adobe ColdFusion vulnerability which has a CVSS score of 10.0 Tue, 07 Jul 2026 08:20:00 GMT https://www.infosecurity-magazine.com/news/exploit-maximum-severity-adobe/ https://www.infosecurity-magazine.com/news/indirect-prompt-injection-web/ Zscaler found sites hiding prompt-injection text to manipulate AI agents into crypto payments Mon, 06 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/indirect-prompt-injection-web/ https://www.infosecurity-magazine.com/news/opera-gx-flaw-gx-mods-css/ Opera GX flaw let sites automatically install mods to steal data from other pages, now patched Mon, 06 Jul 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/opera-gx-flaw-gx-mods-css/ https://www.infosecurity-magazine.com/opinions/ai-powering-the-attack-defense/ Defenders cannot respond effectively if their operational model still depends entirely on human-scale review cycles and fragmented visibility Fri, 03 Jul 2026 08:00:00 GMT https://www.infosecurity-magazine.com/opinions/ai-powering-the-attack-defense/ https://www.infosecurity-magazine.com/news/researcher-exploitarium-exploits/ Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities first Thu, 02 Jul 2026 12:51:00 GMT https://www.infosecurity-magazine.com/news/researcher-exploitarium-exploits/ https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/ The NCSC has shared best practice advice from pen testers which could help improve system resilience Thu, 02 Jul 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/ https://www.infosecurity-magazine.com/news/ousaban-banking-trojan-spain/ FortiGuard says the Brazilian banking trojan Ousaban is targeting Spain and Portugal via phishing Wed, 01 Jul 2026 13:45:00 GMT https://www.infosecurity-magazine.com/news/ousaban-banking-trojan-spain/ https://www.infosecurity-magazine.com/news/nissan-oracle-peoplesoft-zero-day/ Nissan says employees' data was stolen via the Oracle PeopleSoft zero-day campaign Tue, 30 Jun 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/nissan-oracle-peoplesoft-zero-day/ https://www.infosecurity-magazine.com/news/simplehelp-rmm-vulnerability/ Attackers exploited a critical SimpleHelp RMM bug to deploy TaskWeaver and Djinn Stealer malware Tue, 30 Jun 2026 15:34:00 GMT https://www.infosecurity-magazine.com/news/simplehelp-rmm-vulnerability/ https://www.infosecurity-magazine.com/news/uk-healthcare-tenfold-increase/ SonicWall records 264,000 events in first five months of 2026 as UK hospitals come under siege Tue, 30 Jun 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/uk-healthcare-tenfold-increase/ https://www.infosecurity-magazine.com/news/openai-gpt-5-6-sol-limited-preview/ OpenAI is previewing its GPT-5.6 Sol model to a vetted few at the US government's request Mon, 29 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/openai-gpt-5-6-sol-limited-preview/ https://www.infosecurity-magazine.com/opinions/security-coverage-gap-math-problem/ The economics of offensive operations are changing, and defenders must react now. Fri, 26 Jun 2026 09:00:00 GMT https://www.infosecurity-magazine.com/opinions/security-coverage-gap-math-problem/ https://www.infosecurity-magazine.com/news/cisco-vulnerability-exploited/ A high-severity flaw in Cisco Catalyst SD-WAN Manager disclosed in early June was exploited as early as March Thu, 25 Jun 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/cisco-vulnerability-exploited/ https://www.infosecurity-magazine.com/news/trust-ai-vulnerability-scanning/ Cobalt study finds 20-percentage-point drop in number of organizations relying solely on AI automation for testing Thu, 25 Jun 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/trust-ai-vulnerability-scanning/ https://www.infosecurity-magazine.com/news/cisa-sase-tic-3-0-zero-trust/ New CISA guidance shows federal agencies how to use SASE to move from legacy TIC 2.0 to zero trust Thu, 25 Jun 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/cisa-sase-tic-3-0-zero-trust/ https://www.infosecurity-magazine.com/news/macos-xpc-flaw-disable-edr-mdm/ macos-xpc-flaw-disable-edr-mdm-standard-user-xm-cyber Thu, 25 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/macos-xpc-flaw-disable-edr-mdm/ https://www.infosecurity-magazine.com/news/bioshocking-ai-browser-prompt/ LayerX tricked AI browsers including ChatGPT Atlas and Comet into bypassing their guardrails Wed, 24 Jun 2026 16:05:00 GMT https://www.infosecurity-magazine.com/news/bioshocking-ai-browser-prompt/ https://www.infosecurity-magazine.com/news/mps-criticize-government-museum/ Public Accounts Committee (PAC) warns that museums and galleries aren’t getting enough government support on cyber Wed, 24 Jun 2026 08:40:00 GMT https://www.infosecurity-magazine.com/news/mps-criticize-government-museum/ https://www.infosecurity-magazine.com/interviews/interview-shopify-ciso-andrew/ Millions of online stores, from global brands to independent retailers, rely on Shopify’s platform to sell their products. This is how the company deploys zero trust, bug bounties, AI and more to keep itself and its customers safe from evolving hacker threats Wed, 24 Jun 2026 08:00:00 GMT https://www.infosecurity-magazine.com/interviews/interview-shopify-ciso-andrew/ https://www.infosecurity-magazine.com/news/lookalike-npm-package-postcss/ JFrog found an npm package impersonating postcss-selector-parser to drop a multi-stage Windows RAT Tue, 23 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/lookalike-npm-package-postcss/ https://www.infosecurity-magazine.com/news/openai-daybreak-gpt-5-5-cyber/ OpenAI expanded Daybreak with a full GPT-5.5-Cyber release to help defenders patch software flaws Tue, 23 Jun 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/openai-daybreak-gpt-5-5-cyber/ https://www.infosecurity-magazine.com/news/trump-eo-post-quantum-migration/ All US federal agencies will have to complete their post-quantum cryptography transition by 2031, according to a new Trump Executive Order Tue, 23 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/trump-eo-post-quantum-migration/ https://www.infosecurity-magazine.com/news/five-eyes-issues-urgent-call/ The Five Eyes Alliance has published a rare call to action for organizations facing AI threats Tue, 23 Jun 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/five-eyes-issues-urgent-call/ https://www.infosecurity-magazine.com/news/gentlekiller-gentlemen-ransomware/ ESET details GentleKiller, the EDR-killer framework the Gentlemen ransomware gang gives affiliates Mon, 22 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/gentlekiller-gentlemen-ransomware/ https://www.infosecurity-magazine.com/news/apple-bootrom-exploit-a12-a13/ Apple BootROM exploit exposes unpatchable USB flaw on A12 and A13 devices Mon, 22 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/apple-bootrom-exploit-a12-a13/ https://www.infosecurity-magazine.com/news/mastra-ai-supply-chain-attack/ North Korean threat actor Sapphire Sleet has been linked to a supply chain attack targeting Mastra, according to Microsoft security researchers Mon, 22 Jun 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/mastra-ai-supply-chain-attack/ https://www.infosecurity-magazine.com/news/klue-breach-compromise/ At least four cybersecurity firms confirmed they have been affected by a breach of business intelligence platform Klue via Salesforce integration Mon, 22 Jun 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/klue-breach-compromise/ https://www.infosecurity-magazine.com/news/aws-continuum-ai-vulnerability/ Working with frontier AI models, this new platform aims to help discovering, prioritizing, validating and remediating code vulnerabilities Fri, 19 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/aws-continuum-ai-vulnerability/ https://www.infosecurity-magazine.com/news/operation-escaneo-cloudsek-latam/ CloudSEK maps Operation Escaneo, a campaign hitting Latin American infrastructure via perimeter bugs Thu, 18 Jun 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/operation-escaneo-cloudsek-latam/ https://www.infosecurity-magazine.com/news/north-korea-it-worker-fraud-ai/ Nisos infiltrated a North Korean IT-worker fraud cell running on AI interviews and a US laptop farm Wed, 17 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/north-korea-it-worker-fraud-ai/ https://www.infosecurity-magazine.com/news/gitbait-github-pages-sheetbest/ GitBait phishing kit abuses GitHub Pages and the SheetBest API to steal Mexican banking credentials Wed, 17 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/gitbait-github-pages-sheetbest/ https://www.infosecurity-magazine.com/news/sensitive-ai-data-upload-doubles/ The rise of AI-assistants and applications in the enterprise has seen a 93% increase in employees attempting to upload sensitive data, bringing security challenges Wed, 17 Jun 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/sensitive-ai-data-upload-doubles/ https://www.infosecurity-magazine.com/opinions/frontier-ai-defenders-not-ready/ The challenge for enterprises is not simply the volume of new vulnerabilities, but the operational burden of responding to them quickly enough Wed, 17 Jun 2026 09:00:00 GMT https://www.infosecurity-magazine.com/opinions/frontier-ai-defenders-not-ready/ https://www.infosecurity-magazine.com/news/rokarolla-android-banking-trojan/ Rokarolla Android trojan steals banking logins and spies on victims while blocking fraud alerts Tue, 16 Jun 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/rokarolla-android-banking-trojan/ https://www.infosecurity-magazine.com/news/chainguard-bny-open-source-athena/ Athena is a new an industry coalition to fix the vulnerabilities frontier AI models find before attackers can exploit them Tue, 16 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/chainguard-bny-open-source-athena/ https://www.infosecurity-magazine.com/news/wordpress-plugin-supply-chain/ Tampered OptinMonster and sister plugins plant hidden backdoors on 1.2 million WordPress sites Mon, 15 Jun 2026 17:00:00 GMT https://www.infosecurity-magazine.com/news/wordpress-plugin-supply-chain/ https://www.infosecurity-magazine.com/news/anubis-ransomware-adriatic-port/ How the Anubis ransomware group stole and leaked an Italian Adriatic port authority's data Mon, 15 Jun 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/anubis-ransomware-adriatic-port/ https://www.infosecurity-magazine.com/news/uk-government-400-vulnerabilities/ Government departments find hundreds of vulnerabilities after testing frontier models Mon, 15 Jun 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/uk-government-400-vulnerabilities/ https://www.infosecurity-magazine.com/news/agentjacking-attacks-hijack-ai/ Tenet Security researchers reveal how new “agentjacking” attacks could trick coding agents into executing arbitrary code Thu, 11 Jun 2026 09:15:00 GMT https://www.infosecurity-magazine.com/news/agentjacking-attacks-hijack-ai/ https://www.infosecurity-magazine.com/news/cybersecurity-fails-to-detect/ Menlo Security research warns that as enterprise applications become increasingly browser based, traditional cybersecurity tools leave them vulnerable to cyber threats Wed, 10 Jun 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-fails-to-detect/ https://www.infosecurity-magazine.com/interviews/konvu-winning-infosecurity-europes/ The co-founder of Konvu, Lucas Masson, shares what winning the Infosecurity Europe Cyber Startup competition means for the AI-native vulnerability triage platform – and what is next Wed, 10 Jun 2026 15:10:00 GMT https://www.infosecurity-magazine.com/interviews/konvu-winning-infosecurity-europes/ https://www.infosecurity-magazine.com/opinions/shadow-ai-is-exposing-governance/ As organizations rapidly implement AI governance policies in response to rising shadow AI usage, many are repeating the same operational governance mistakes that have historically weakened cybersecurity compliance programs Wed, 10 Jun 2026 09:01:00 GMT https://www.infosecurity-magazine.com/opinions/shadow-ai-is-exposing-governance/ https://www.infosecurity-magazine.com/news/microsoft-fixes-200-cves-in-june/ Microsoft has patched 200 vulnerabilities including three zero-days Wed, 10 Jun 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-fixes-200-cves-in-june/ https://www.infosecurity-magazine.com/news/firms-deploy-vulnerable-code/ Checkmarx report warns that business pressure is among the reason security leaders let security compliance slip Tue, 09 Jun 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/firms-deploy-vulnerable-code/ https://www.infosecurity-magazine.com/news/ai-coding-adoption-governance-lags/ Most dev teams use AI coding assistants but only 30% have full governance in place Tue, 09 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/ai-coding-adoption-governance-lags/ https://www.infosecurity-magazine.com/news/phpbb-authentication-bypass/ Critical phpBB authentication bypass lets attackers hijack any account with one request Tue, 09 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/phpbb-authentication-bypass/ https://www.infosecurity-magazine.com/news/google-patch-chrome-vulnerability/ The flaw, CVE-2026-11645, can allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page Tue, 09 Jun 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/google-patch-chrome-vulnerability/ https://www.infosecurity-magazine.com/news/check-point-critical-auth-bypass/ Check Point says a critical vulnerability in its Remote Access VPN and Mobile Access solutions has been exploited by Qilin Tue, 09 Jun 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/check-point-critical-auth-bypass/ https://www.infosecurity-magazine.com/news/whatsapp-nso-group-spearphishing/ Meta’s WhatsApp demands contempt ruling after users report NSO Group-linked phishing Tue, 09 Jun 2026 08:15:00 GMT https://www.infosecurity-magazine.com/news/whatsapp-nso-group-spearphishing/ https://www.infosecurity-magazine.com/news/chatgpt-lockdown-mode-active/ OpenAI brings Lockdown Mode and Active Sessions to ChatGPT to curb prompt injection data theft Mon, 08 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/chatgpt-lockdown-mode-active/ https://www.infosecurity-magazine.com/news/infosecurity-europe-dsit-cyber/ The Department of Science, Innovation and Technology details how a combination of hands-on human advice and technology systems keeps government agencies safe Mon, 08 Jun 2026 08:15:00 GMT https://www.infosecurity-magazine.com/news/infosecurity-europe-dsit-cyber/ https://www.infosecurity-magazine.com/news/owasp-agentic-ai-security-maturity/ The OWASP agentic AI security framework helps organizations assess governance maturity vs adoption and adjust governance as needed Fri, 05 Jun 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/owasp-agentic-ai-security-maturity/ https://www.infosecurity-magazine.com/news/everest-forms-pro-rce-actively/ Critical Everest Forms Pro RCE flaw exploited to create rogue WordPress admin accounts Thu, 04 Jun 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/everest-forms-pro-rce-actively/ https://www.infosecurity-magazine.com/news/attackers-ai-adoption-malware/ Microsoft Detection and Response Team (DART) details how it has uncovered malicious AI applications as cyber criminals manipulate organizations adopting AI tools Thu, 04 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/attackers-ai-adoption-malware/ https://www.infosecurity-magazine.com/news/konvu-wins-cyber-startup-award/ Inaugural Infosecurity Europe Cyber Startup Award Winner Impresses Panel with Ability Help Prioritize Vulnerabilities in AI era Wed, 03 Jun 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/konvu-wins-cyber-startup-award/ https://www.infosecurity-magazine.com/news/trump-eo-voluntary-frontier-ai/ Trump's executive order invites voluntary pre-release review of frontier AI models Wed, 03 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/trump-eo-voluntary-frontier-ai/ https://www.infosecurity-magazine.com/news/anthropic-glasswing-expansion/ Anthropic widens Project Glasswing access to 150 more firms as patching becomes the bottleneck Wed, 03 Jun 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/anthropic-glasswing-expansion/ https://www.infosecurity-magazine.com/news/patch-responsibility-ai-infosec/ The emergence of AI models capable to autonomously find and fix vulnerabilities at scale is having a significant impact on patching management, experts say Wed, 03 Jun 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/patch-responsibility-ai-infosec/ https://www.infosecurity-magazine.com/news/ai-edr-evasion-tooling/ A threat actor used AI coding tools to build and test EDR evasion malware, Sophos finds Tue, 02 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/ai-edr-evasion-tooling/ https://www.infosecurity-magazine.com/news/red-hat-npm-scope-backdoored/ Attackers backdoored 32 packages in Red Hat's official npm scope to steal cloud and CI secrets Tue, 02 Jun 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/red-hat-npm-scope-backdoored/ https://www.infosecurity-magazine.com/news/flowise-mcp-rce-poc/ Obsidian publishes PoC for a 1-click Flowise RCE that can fully compromise self-hosted servers Mon, 01 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/flowise-mcp-rce-poc/ https://www.infosecurity-magazine.com/news/gamaredon-worm-ntfs-data-streams/ FSB-linked Gamaredon concealed a fileless worm in NTFS data streams to spy on Ukraine targets Mon, 01 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/gamaredon-worm-ntfs-data-streams/ https://www.infosecurity-magazine.com/news/palo-alto-highseverity-bug/ A vulnerability in Palo Alto Networks’ PAN-OS software is being exploited in attacks Mon, 01 Jun 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/palo-alto-highseverity-bug/ https://www.infosecurity-magazine.com/news/cycos-expands-uk-smes-ciisec/ From a research-driven pilot, the Cybersecurity Communities of Support (CyCOS) is about to be handed over to CIISec Fri, 29 May 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/cycos-expands-uk-smes-ciisec/ https://www.infosecurity-magazine.com/opinions/beginning-of-the-end-human-pen/ There’s nothing inherently wrong with human pen testers, but there are many drawbacks. AI pen testing could change everything. Fri, 29 May 2026 10:00:00 GMT https://www.infosecurity-magazine.com/opinions/beginning-of-the-end-human-pen/ https://www.infosecurity-magazine.com/news/ai-npm-malware-leaks-github-token/ Sloppy AI-generated npm infostealer leaked its own GitHub token, exposing the operator Fri, 29 May 2026 08:10:00 GMT https://www.infosecurity-magazine.com/news/ai-npm-malware-leaks-github-token/ https://www.infosecurity-magazine.com/news/attackers-beyond-typosquatting/ Most malicious open source packages now mimic real code rather than rely on typosquatting Thu, 28 May 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/attackers-beyond-typosquatting/ https://www.infosecurity-magazine.com/news/microsoft-uncoordinated-zeroday/ Microsoft warned the disclosure of several unpatched vulnerabilities without notice has put “customers at unnecessary risk” Thu, 28 May 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-uncoordinated-zeroday/ https://www.infosecurity-magazine.com/news/jinx-0164-crypto-developers-macos/ New actor Jinx-0164 hit crypto developers with fake recruiter lures and macOS malware Thu, 28 May 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/jinx-0164-crypto-developers-macos/ https://www.infosecurity-magazine.com/news/gchq-keast-butler-cyber-action-ai/ GCHQ director urges urgent business cyber action as AI and quantum reshape the threat Thu, 28 May 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/gchq-keast-butler-cyber-action-ai/ https://www.infosecurity-magazine.com/news/ghost-stadium-fifa-world-cup-fraud/ Group-IB uncovered Ghost Stadium phishing and 4300 fake FIFA World Cup domains targeting fans Wed, 27 May 2026 11:28:00 GMT https://www.infosecurity-magazine.com/news/ghost-stadium-fifa-world-cup-fraud/ https://www.infosecurity-magazine.com/news/uk-firms-cyber-spending-ai-risks/ UK firms plan higher cyber spending as AI adoption raises security concerns Wed, 27 May 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/uk-firms-cyber-spending-ai-risks/ https://www.infosecurity-magazine.com/news/btmob-android-rat-maas-builder/ BTMOB Android RAT sold as a service with a no-code builder for fast, regional phishing lures Tue, 26 May 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/btmob-android-rat-maas-builder/ https://www.infosecurity-magazine.com/news/apple-blocked-2bn-app-store-fraud/ Total figure for fraudulent transactions Apple has blocked since 2020 now stands at over $11bn Fri, 22 May 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/apple-blocked-2bn-app-store-fraud/ https://www.infosecurity-magazine.com/news/threequarters-knowingly-ship/ AI risks threaten to permeate supply chains through unvetted code and unaudited suppliers Thu, 21 May 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/threequarters-knowingly-ship/ https://www.infosecurity-magazine.com/news/linux-kernel-ptrace-flaw-ssh-keys/ Qualys finds nine-year-old Linux ptrace flaw exposing SSH keys and password hashes locally Thu, 21 May 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/linux-kernel-ptrace-flaw-ssh-keys/ https://www.infosecurity-magazine.com/news/grafana-labs-code-breach-tanstack/ Grafana Labs has confirmed a recent data breach was caused by the TanStack supply chain attack Thu, 21 May 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/grafana-labs-code-breach-tanstack/ https://www.infosecurity-magazine.com/news/android-carrier-billing-fraud-four/ Premium Deception campaign uses 250 Android apps to silently sign victims up to paid services Wed, 20 May 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/android-carrier-billing-fraud-four/ https://www.infosecurity-magazine.com/news/antv-npm-mini-shai-hulud-largest/ Mini Shai-Hulud worm hits Alibaba AntV ecosystem in largest npm supply chain wave to date Wed, 20 May 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/antv-npm-mini-shai-hulud-largest/ https://www.infosecurity-magazine.com/news/researchers-cypherloc-scareware/ Barracuda reveals new CypherLoc scareware has featured in nearly three million attacks Wed, 20 May 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/researchers-cypherloc-scareware/ https://www.infosecurity-magazine.com/news/verizon-dbir-exploits-top-access/ Verizon DBIR finds 31% of data breaches began with software flaws last year Wed, 20 May 2026 08:40:00 GMT https://www.infosecurity-magazine.com/news/verizon-dbir-exploits-top-access/ https://www.infosecurity-magazine.com/news/ai-raises-vulnerability-awareness/ AI-powered vulnerability scanning leaves no excuse for unpatched bugs as the EU Cyber Resilience Act pushes firms toward secure-by-design software Tue, 19 May 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/ai-raises-vulnerability-awareness/ https://www.infosecurity-magazine.com/news/agentic-ai-accelerates-software/ Digital.ai data reveals 87% of apps were attacked over the past year Tue, 19 May 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/agentic-ai-accelerates-software/ https://www.infosecurity-magazine.com/news/security-researchers-47-zerodays/ The research community was awarded $1.3m as it found dozens of novel vulnerabilities at Pwn2Own Berlin Mon, 18 May 2026 09:45:00 GMT https://www.infosecurity-magazine.com/news/security-researchers-47-zerodays/ https://www.infosecurity-magazine.com/news/bank-england-fca-treasury-alarm/ The UK’s financial authorities have set expectations for the sector on cybersecurity and operational resilience Mon, 18 May 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/bank-england-fca-treasury-alarm/ https://www.infosecurity-magazine.com/news/microsoft-zeroday-exchange-servers/ The zero-day vulnerability affects on-premises installations for all versions of Exchange Server 2016, 2019 and Subscription Edition Fri, 15 May 2026 12:35:00 GMT https://www.infosecurity-magazine.com/news/microsoft-zeroday-exchange-servers/ https://www.infosecurity-magazine.com/news/google-launches-android-spyware/ Google’s Android Advanced Protection Mode is getting a new feature allowing trusted security experts to investigate potential spyware infections Thu, 14 May 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/google-launches-android-spyware/ https://www.infosecurity-magazine.com/news/fragnesia-linux-kernel-lpe-root/ New Fragnesia kernel flaw lets unprivileged local users escalate to root on Linux systems Thu, 14 May 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/fragnesia-linux-kernel-lpe-root/ https://www.infosecurity-magazine.com/news/avada-builder-flaws-one-million/ Avada Builder flaws allowed file read and SQL injection on one million WordPress sites Wed, 13 May 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/avada-builder-flaws-one-million/ https://www.infosecurity-magazine.com/news/new-sboms-for-ai-guidance-2026/ The G7 Cybersecurity Working Group releases new SBOM for AI guidance, outlining seven key data clusters to boost transparency and security across AI supply chains Wed, 13 May 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/new-sboms-for-ai-guidance-2026/ https://www.infosecurity-magazine.com/news/microsoft-17-critical-flaws-may/ Microsoft has patched 120 vulnerabilities in this month’s security update round Wed, 13 May 2026 08:15:00 GMT https://www.infosecurity-magazine.com/news/microsoft-17-critical-flaws-may/ https://www.infosecurity-magazine.com/news/openai-daybreak-secure-by-design/ With Daybreak, OpenAI wants its frontier AI models to be used to deploy secure by design software from the ground up Tue, 12 May 2026 15:15:00 GMT https://www.infosecurity-magazine.com/news/openai-daybreak-secure-by-design/ https://www.infosecurity-magazine.com/news/mini-shai-hulud-tanstack-npm/ Mini Shai-Hulud compromises TanStack npm packages and spreads across PyPI Tue, 12 May 2026 14:45:00 GMT https://www.infosecurity-magazine.com/news/mini-shai-hulud-tanstack-npm/ https://www.infosecurity-magazine.com/news/apple-google-rcs-end-to-end/ Apple begins rolling out end-to-end encrypted RCS messaging between iPhone and Android in iOS 26.5 Tue, 12 May 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/apple-google-rcs-end-to-end/ https://www.infosecurity-magazine.com/news/south-staffordshire-water-fined-1m/ The ICO has fined South Staffordshire Water nearly £1m for a series of data protection failings Tue, 12 May 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/south-staffordshire-water-fined-1m/ https://www.infosecurity-magazine.com/news/trickmo-c-ton-network-android/ ThreatFabric finds new TrickMo Android banking trojan variant routing C2 through The Open Network Mon, 11 May 2026 15:15:00 GMT https://www.infosecurity-magazine.com/news/trickmo-c-ton-network-android/ https://www.infosecurity-magazine.com/news/dirty-frag-linux-kernel/ Two new high-severity vulnerabilities, dubbed ’Dirty Frag’ when chained, have been found in the Linux kernel, affecting most Linux distributions Mon, 11 May 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/dirty-frag-linux-kernel/ https://www.infosecurity-magazine.com/news/fake-claude-code-installer/ Ontinue uncovers fake Claude Code installer pushing PowerShell stealer abusing Chrome's IElevator2 Mon, 11 May 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/fake-claude-code-installer/ https://www.infosecurity-magazine.com/news/pcpjack-campaign-boots-teampcp-off/ SentinelOne believes the PCPJack campaign may be the brainchild of a former TeamPCP member Fri, 08 May 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/pcpjack-campaign-boots-teampcp-off/ https://www.infosecurity-magazine.com/opinions/crowdsourced-public-sector-cyber/ With rising cyber risk, public sector organizations are embracing crowdsourced security and CTEM to strengthen defenses beyond periodic testing Fri, 08 May 2026 08:30:00 GMT https://www.infosecurity-magazine.com/opinions/crowdsourced-public-sector-cyber/ https://www.infosecurity-magazine.com/news/cline-kanban-websocket-hijack-ai/ Oasis Security finds critical Cline kanban WebSocket flaw exposing AI coding agents to hijack Thu, 07 May 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/cline-kanban-websocket-hijack-ai/ https://www.infosecurity-magazine.com/news/fake-claude-site-beagle-backdoor/ Sophos finds fake Claude site spreading DonutLoader and a new Beagle backdoor via DLL sideloading Thu, 07 May 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/fake-claude-site-beagle-backdoor/ https://www.infosecurity-magazine.com/news/daemon-tools-confirms-software/ A China-linked threat actor backdoored a version of Daemon Tools to infect thousands Thu, 07 May 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/daemon-tools-confirms-software/ https://www.infosecurity-magazine.com/news/cloudz-rat-pheno-phone-link-otp/ Cisco Talos uncovers CloudZ RAT and Pheno plugin abusing Microsoft Phone Link to intercept SMS OTPs Wed, 06 May 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cloudz-rat-pheno-phone-link-otp/ https://www.infosecurity-magazine.com/news/cisa-ci-fortify-isolation-recovery/ CISA’s CI Fortify initiative aim for critical infrastructure operators to build isolation & recovery Wed, 06 May 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/cisa-ci-fortify-isolation-recovery/ https://www.infosecurity-magazine.com/blogs/why-software-faces-ai-driven/ Project Glasswing scans open-source code for vulnerabilities. But open source was already the most scrutinized software on earth. The real exposure is everywhere else Wed, 06 May 2026 08:30:00 GMT https://www.infosecurity-magazine.com/blogs/why-software-faces-ai-driven/ https://www.infosecurity-magazine.com/news/scarcruft-birdcall-android-yanbian/ ESET warns that North Korean hackers compromised a Yanbian gaming site in a supply‑chain attack, trojanizing Windows and Android software to spy on users Tue, 05 May 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/scarcruft-birdcall-android-yanbian/ https://www.infosecurity-magazine.com/news/ncsc-warns-aifuelled-vulnerability/ The UK's National Cyber Security Centre is urging organizations to prepare for glut of new software updates Tue, 05 May 2026 09:40:00 GMT https://www.infosecurity-magazine.com/news/ncsc-warns-aifuelled-vulnerability/ https://www.infosecurity-magazine.com/news/trellix-reveals-unauthorized/ Security vendor Trellix has suffered a breach involving unauthorized access Tue, 05 May 2026 08:55:00 GMT https://www.infosecurity-magazine.com/news/trellix-reveals-unauthorized/ https://www.infosecurity-magazine.com/news/anthropic-claude-security-for-ai/ Claude Security enters public beta, giving enterprises AI driven code scanning with no API integration or custom agents required Fri, 01 May 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/anthropic-claude-security-for-ai/ https://www.infosecurity-magazine.com/news/cursor-extension-flaw-exposes-api/ Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX Wed, 29 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cursor-extension-flaw-exposes-api/ https://www.infosecurity-magazine.com/news/ai-npm-dependency-targets-crypto/ Researchers uncover a malicious npm dependency linked to an AI‑assisted code commit that steals sensitive data and exposes crypto wallets Wed, 29 Apr 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/ai-npm-dependency-targets-crypto/ https://www.infosecurity-magazine.com/news/29-billion-compromised-credentials/ KELA claims infostealers remained the primary access vector for attacks in 2025 Wed, 29 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/29-billion-compromised-credentials/ https://www.infosecurity-magazine.com/news/critical-flaw-vect-ransomware-data/ The Vect 2.0 ransomware wipes large files instead of merely encrypting them, making recovery impossible – even for the attackers Wed, 29 Apr 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/critical-flaw-vect-ransomware-data/ https://www.infosecurity-magazine.com/news/quarter-healthcare-medical-device/ RunSafe report reveals most attacks on medical devices disrupt patient care Wed, 29 Apr 2026 10:05:00 GMT https://www.infosecurity-magazine.com/news/quarter-healthcare-medical-device/ https://www.infosecurity-magazine.com/news/medtronic-data-breach-shinyhunters/ Medtronic confirms IT breach as ShinyHunters claims millions of records accesseda Tue, 28 Apr 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/medtronic-data-breach-shinyhunters/ https://www.infosecurity-magazine.com/news/browser-extensions-sell-user-data/ Dozens of browser extensions openly sell user data via privacy policy disclosures Mon, 27 Apr 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/browser-extensions-sell-user-data/ https://www.infosecurity-magazine.com/news/npm-supply-chain-worm-canister/ Malicious npm packages spread via worm-like propagation and steal developer credentials Fri, 24 Apr 2026 08:10:00 GMT https://www.infosecurity-magazine.com/news/npm-supply-chain-worm-canister/ https://www.infosecurity-magazine.com/news/apple-ios-notification-bug-deleted/ Apple patches iOS flaw that retained deleted notifications, exposing message data Thu, 23 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/apple-ios-notification-bug-deleted/ https://www.infosecurity-magazine.com/news/macos-lotl-techniques-enterprise/ macOS LOTL techniques bypass detection using native tools and metadata abuse Wed, 22 Apr 2026 16:30:00 GMT https://www.infosecurity-magazine.com/news/macos-lotl-techniques-enterprise/ https://www.infosecurity-magazine.com/news/ncsc-silentglass-a-plugin-stop/ The UK’s cybersecurity agency said the devices will be available for purchase by organizations around the world Wed, 22 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/ncsc-silentglass-a-plugin-stop/ https://www.infosecurity-magazine.com/news/silent-subject-phishing-campaigns/ Null subject phishing campaigns bypass filters and target VIPs with QR code and RMM abuse Wed, 22 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/silent-subject-phishing-campaigns/ https://www.infosecurity-magazine.com/news/trojanized-android-handle-nfc/ NGate malware abuses HandyPay app to steal NFC card data and PINs in Brazil Tue, 21 Apr 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/trojanized-android-handle-nfc/ https://www.infosecurity-magazine.com/news/unchecked-ai-agents-cause/ Data exposure, operational disruption and financial losses among issues faced by businesses struggling with the rapid rise of AI agents, warns Cloud Security Alliance report Tue, 21 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/unchecked-ai-agents-cause/ https://www.infosecurity-magazine.com/news/zionsiphon-malware-water/ ZionSiphon malware targets OT water systems with sabotage and ICS scanning capabilities Mon, 20 Apr 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/zionsiphon-malware-water/ https://www.infosecurity-magazine.com/news/ai-models-rapid-gains/ AI models are making rapid gains in vulnerability research and exploit development, raising new cybersecurity risks, a Forescout study finds Fri, 17 Apr 2026 13:20:00 GMT https://www.infosecurity-magazine.com/news/ai-models-rapid-gains/ https://www.infosecurity-magazine.com/interviews/first-ceo-cve-collaboration-ai/ FIRST CEO Chris Gibson urged global CVE collaboration and integrating AI companies to combat automated cyber threats Fri, 17 Apr 2026 09:35:00 GMT https://www.infosecurity-magazine.com/interviews/first-ceo-cve-collaboration-ai/ https://www.infosecurity-magazine.com/news/apk-malformation-android-malware/ APK malformation tactic now appears in over 3000 Android malware samples evading static analysis Thu, 16 Apr 2026 15:45:00 GMT https://www.infosecurity-magazine.com/news/apk-malformation-android-malware/ https://www.infosecurity-magazine.com/news/nvd-enrichment-premarch-2026/ NIST’s National Vulnerability Database will now prioritize enriching new and exploited flaws to address the record growth of reported CVEs Thu, 16 Apr 2026 12:43:00 GMT https://www.infosecurity-magazine.com/news/nvd-enrichment-premarch-2026/ https://www.infosecurity-magazine.com/news/systemic-flaw-mcp-expose-150/ Ox Security claims as many as 200,000 servers are exposed by newly discovered MCP vulnerability Thu, 16 Apr 2026 09:40:00 GMT https://www.infosecurity-magazine.com/news/systemic-flaw-mcp-expose-150/ https://www.infosecurity-magazine.com/news/openai-unveils-gpt-54-cyber-defense/ OpenAI’s new frontier model focused on cybersecurity comes following Anthropic’s launch of Claude Mythos Preview and Project Glasswing Wed, 15 Apr 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/openai-unveils-gpt-54-cyber-defense/ https://www.infosecurity-magazine.com/news/nginx-ui-mcp-flaw-actively/ Critical nginx-ui MCP authentication bypass CVE-2026-33032 actively exploited with CVSS 9.8 Wed, 15 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/nginx-ui-mcp-flaw-actively/ https://www.infosecurity-magazine.com/news/ai-companies-to-play-bigger-role/ At VulnCon, Lindsey Cerkovnik, head of vulnerability management at CISA, said AI companies should play a bigger role in vulnerability disclosures in the future Wed, 15 Apr 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/ai-companies-to-play-bigger-role/ https://www.infosecurity-magazine.com/news/microsoft-two-zerodays-april-patch/ Microsoft has patched two zero-day flaws and over 160 others Wed, 15 Apr 2026 09:10:00 GMT https://www.infosecurity-magazine.com/news/microsoft-two-zerodays-april-patch/ https://www.infosecurity-magazine.com/news/chrome-extensions-expose-user-data/ 108 malicious Chrome extensions steal sessions, Google data, inject ads via single C2 infrastructure Tue, 14 Apr 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/chrome-extensions-expose-user-data/ https://www.infosecurity-magazine.com/news/ai-security-institute-best/ The AISI has issued its judgement on Anthropic’s Mythos Preview model Tue, 14 Apr 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/ai-security-institute-best/ https://www.infosecurity-magazine.com/news/mailbox-rule-abuse-stealthy-post/ Attackers are abusing Microsoft 365 mailbox rules to hide activity, exfiltrate data and retain access after account compromise, researchers warn Mon, 13 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/mailbox-rule-abuse-stealthy-post/ https://www.infosecurity-magazine.com/news/mirax-trojan-devices-proxy-nodes/ Security researchers warn of Mirax, an emerging Android banking trojan using MaaS, remote access and residential proxies to target European users Mon, 13 Apr 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/mirax-trojan-devices-proxy-nodes/ https://www.infosecurity-magazine.com/news/bitcoin-depot-dollar36m-crypto/ Bitcoin Depot has disclosed a cyber-attack that led to the theft of more than 50 Bitcoin, worth $3.66m, after hackers accessed its internal systems Thu, 09 Apr 2026 14:01:00 GMT https://www.infosecurity-magazine.com/news/bitcoin-depot-dollar36m-crypto/ https://www.infosecurity-magazine.com/news/atomic-stealer-macos-clickfix/ macOS 26.4 update introduced security warnings into Terminal to prevent ClickFix attacks, so attackers have shifted to Script Editor instead Thu, 09 Apr 2026 11:20:00 GMT https://www.infosecurity-magazine.com/news/atomic-stealer-macos-clickfix/ https://www.infosecurity-magazine.com/blogs/microsoft-365-tenant-security/ Microsoft 365 tenants rarely fail from a single issue − it’s chains of identity gaps, configuration drift and clumsy recovery. This article shows how to harden identity, stabilize configuration, add configuration level backup and prepare for AI driven exposure, then explains how CoreView turns those resilience practices into a single, operational model Thu, 09 Apr 2026 08:15:00 GMT https://www.infosecurity-magazine.com/blogs/microsoft-365-tenant-security/ https://www.infosecurity-magazine.com/news/google-api-keys-access-gemini/ Google API key flaw exposes mobile apps to Gemini AI access, private files and billing risks Wed, 08 Apr 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/google-api-keys-access-gemini/ https://www.infosecurity-magazine.com/news/flaw-ninja-forms-wordpress/ Ninja Forms File Upload RCE via unauthenticated arbitrary file upload; update to 3.3.27 immediately Wed, 08 Apr 2026 15:10:00 GMT https://www.infosecurity-magazine.com/news/flaw-ninja-forms-wordpress/ https://www.infosecurity-magazine.com/news/anthropic-launch-project-glasswing/ Anthropic launches Project Glasswing, using its Claude Mythos Preview AI to autonomously identify and fix undiscovered vulnerabilities in critical software Wed, 08 Apr 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/anthropic-launch-project-glasswing/ https://www.infosecurity-magazine.com/news/claude-apache-activemq-bug-hidden/ Anthropic’s Claude AI has helped researchers find a vulnerability in Apache ActiveMQ Classic Wed, 08 Apr 2026 09:15:00 GMT https://www.infosecurity-magazine.com/news/claude-apache-activemq-bug-hidden/ https://www.infosecurity-magazine.com/news/gpu-based-rowhammer-attack/ GPUBreach uses GPU Rowhammer on GDDR6 to flip bits, corrupt page tables and escalate to system root Tue, 07 Apr 2026 15:05:00 GMT https://www.infosecurity-magazine.com/news/gpu-based-rowhammer-attack/ https://www.infosecurity-magazine.com/news/grafanaghost-silent-data/ GrafanaGhost chains AI prompt injection and URL flaws to exfiltrate sensitive Grafana data Tue, 07 Apr 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/grafanaghost-silent-data/ https://www.infosecurity-magazine.com/news/fortinet-emergency-patch-ems-bug/ Fortinet has updated its FortiClient EMS product after zero-day attacks surfaced Tue, 07 Apr 2026 09:26:00 GMT https://www.infosecurity-magazine.com/news/fortinet-emergency-patch-ems-bug/ https://www.infosecurity-magazine.com/news-features/how-safeguard-vibe-coding-security/ Infosecurity outlines key recommendations for CISOs and security teams to implement safeguards for AI-assisted coding Mon, 06 Apr 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news-features/how-safeguard-vibe-coding-security/ https://www.infosecurity-magazine.com/news/ncsc-alert-hackers-whatsapp-signal/ The UK’s cybersecurity agency offered advice to “high-risk’ individuals” on how to protect against social engineering and cyber-attacks Thu, 02 Apr 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/ncsc-alert-hackers-whatsapp-signal/ https://www.infosecurity-magazine.com/news/apple-ios-18-updates-darksword/ iOS/iPadOS 18.7.7 updates expanded to protect older devices from DarkSword web exploit kit Thu, 02 Apr 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/apple-ios-18-updates-darksword/ https://www.infosecurity-magazine.com/news/google-android-dev-verification/ Android requires dev identity verification for sideloaded apps; phased global rollout from September Wed, 01 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/google-android-dev-verification/ https://www.infosecurity-magazine.com/news/man-charged-uranium-crypto-hack/ Maryland man accused of $53m Uranium Finance hack, exploited smart contract flaws, laundered funds Tue, 31 Mar 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/man-charged-uranium-crypto-hack/ https://www.infosecurity-magazine.com/news/chatgpt-security-issue-steal-data/ OpenAI has patched vulnerability, which Check Point said was because of a DNS loophole Tue, 31 Mar 2026 13:01:00 GMT https://www.infosecurity-magazine.com/news/chatgpt-security-issue-steal-data/ https://www.infosecurity-magazine.com/news/ncsc-urges-immediate-patching-f5/ The National Cyber Security Centre wants UK firms to patch CVE-2025-53521 Tue, 31 Mar 2026 08:45:00 GMT https://www.infosecurity-magazine.com/news/ncsc-urges-immediate-patching-f5/ https://www.infosecurity-magazine.com/news/tax-season-new-phishing-tactics/ Tax-season phishing floods deliver RMM malware, credential theft, BEC and tax-form scams Mon, 30 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/tax-season-new-phishing-tactics/ https://www.infosecurity-magazine.com/news/lloyds-glitch-exposed-500000/ Lloyds app glitch exposed up to 447,936 customers’ transactions and personal data during update Mon, 30 Mar 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/lloyds-glitch-exposed-500000/ https://www.infosecurity-magazine.com/news/teampcp-targets-telnyx-pypi-package/ Socket and Endor Labs discovered a new TeamPCP campaign leading to the delivery of credential-stealing malware Fri, 27 Mar 2026 15:06:00 GMT https://www.infosecurity-magazine.com/news/teampcp-targets-telnyx-pypi-package/ https://www.infosecurity-magazine.com/news/ai-generated-code-vulnerabilities/ Security researchers from Georgia Tech have observed a surge in reported CVEs for which the flaw was introduced by AI-generated code Thu, 26 Mar 2026 16:40:00 GMT https://www.infosecurity-magazine.com/news/ai-generated-code-vulnerabilities/ https://www.infosecurity-magazine.com/news/critical-oracle-weblogic-rce/ Attackers rapidly exploited a critical Oracle WebLogic RCE flaw the same day exploit code was released, according to a CloudSEK honeypot study Thu, 26 Mar 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/critical-oracle-weblogic-rce/ https://www.infosecurity-magazine.com/news/openai-bug-bounty-ai-abuse-safety/ OpenAI’s Safety Bug Bounty program seeks to address AI safety vulnerabilities beyond traditional security flaws Thu, 26 Mar 2026 12:20:00 GMT https://www.infosecurity-magazine.com/news/openai-bug-bounty-ai-abuse-safety/ https://www.infosecurity-magazine.com/news/cloud-phones-financial-fraud/ Cloud Android phones fuel financial fraud, evading detection and enabling dropper accounts Wed, 25 Mar 2026 16:05:00 GMT https://www.infosecurity-magazine.com/news/cloud-phones-financial-fraud/ https://www.infosecurity-magazine.com/news/teampcp-litellm-pypi-supply-chain/ Python package LiteLLM compromised with credential-stealing malware linked to TeamPCP threat group Wed, 25 Mar 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/teampcp-litellm-pypi-supply-chain/ https://www.infosecurity-magazine.com/news/rsac-uk-ncsc-urges-vibe-coding/ The head of the UK’s NCSC is calling the cybersecurity industry to “seize the disruptive vibe coding opportunity” to make software more secure Tue, 24 Mar 2026 21:00:00 GMT https://www.infosecurity-magazine.com/news/rsac-uk-ncsc-urges-vibe-coding/ https://www.infosecurity-magazine.com/news/silver-fox-cyber-dual-espionage/ Silver Fox pivots from ValleyRAT tax lures to WhatsApp‑style stealers, blending espionage & phishing Tue, 24 Mar 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/silver-fox-cyber-dual-espionage/ https://www.infosecurity-magazine.com/news/citrix-patch-netscaler/ A critical vulnerability in Citrix’s NetScaler products allows unauthenticated remote attackers to leak information from the appliance's memory Tue, 24 Mar 2026 15:15:00 GMT https://www.infosecurity-magazine.com/news/citrix-patch-netscaler/ https://www.infosecurity-magazine.com/news/npm-ghost-campaign-fake-install/ Ghost npm campaign fakes install logs to steal sudo passwords and drop RATs that loot crypto and data Tue, 24 Mar 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/npm-ghost-campaign-fake-install/ https://www.infosecurity-magazine.com/news/trivy-supply-chain-attack-expands/ New Trivy Docker images 0.69.5 and 0.69.6 compromised with TeamPCP infostealer, impacting CI/CD scans Mon, 23 Mar 2026 15:05:00 GMT https://www.infosecurity-magazine.com/news/trivy-supply-chain-attack-expands/