<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <link>https://www.infosecurity-magazine.com/cybercrime/</link>
    <copyright>Copyright © 2026 Reed Exhibitions Ltd. All Rights Reserved.</copyright>
    <item>
      <title>ZeroTokens Phishing Platform Steers Attacks in Real Time</title>
      <link>https://www.infosecurity-magazine.com/news/zerotokens-phishing-real-time/</link>
      <description>ZeroTokens gives phishing operators live control of victim sessions targeting 53 financial brands</description>
      <pubDate>Tue, 25 Aug 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/zerotokens-phishing-real-time/</guid>
    </item>
    <item>
      <title>Fake Recruiter Scams Target Corporate Credentials on Mobile</title>
      <link>https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/</link>
      <description>RecruitTrap campaigns use mobile-optimized phishing pages to target enterprise credentials</description>
      <pubDate>Tue, 25 Aug 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/</guid>
    </item>
    <item>
      <title>Fake Minecraft Clients Deliver WeedHack Malware Despite Infrastructure Takedown</title>
      <link>https://www.infosecurity-magazine.com/news/fake-minecraft-weedhack-malware/</link>
      <description>A threat actor keeps spreading the WeedHack malware to Minecraft players despite its original infrastructure taken down in July</description>
      <pubDate>Tue, 25 Aug 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fake-minecraft-weedhack-malware/</guid>
    </item>
    <item>
      <title>ReliaQuest Rejects Compromise Claims After ShinyHunters Incident</title>
      <link>https://www.infosecurity-magazine.com/news/reliaquest-not-compromised-by/</link>
      <description>ReliaQuest has detailed a social engineering attack linked to ShinyHunters, denying reports that the threat actor successfully compromised its systems</description>
      <pubDate>Tue, 25 Aug 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/reliaquest-not-compromised-by/</guid>
    </item>
    <item>
      <title>US Sanctions Mabna Institute Hackers for Iranian Cyber-Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/us-sanctions-mabna-institute/</link>
      <description>The US has sanctioned individuals connected to hacking-for-hire group the Mabna Institute </description>
      <pubDate>Tue, 25 Aug 2026 09:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-sanctions-mabna-institute/</guid>
    </item>
    <item>
      <title>Fake Codex Download Uses Google Sites to Deliver macOS Malware</title>
      <link>https://www.infosecurity-magazine.com/news/fake-codex-download-google-sites/</link>
      <description>Fake Codex pages used Google Sites, sponsored search and ClickFix to target Mac users</description>
      <pubDate>Mon, 24 Aug 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fake-codex-download-google-sites/</guid>
    </item>
    <item>
      <title>Doubloon Dredger Abuses Notion to Harvest Authentication Tokens</title>
      <link>https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/</link>
      <description>Doubloon Dredger abused Notion and malicious PDFs to harvest Microsoft authentication tokens</description>
      <pubDate>Mon, 24 Aug 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/</guid>
    </item>
    <item>
      <title>Wake-Up Call for CNI After Iranian Attack Shuts Down UK Power Plant</title>
      <link>https://www.infosecurity-magazine.com/news/cni-iranian-attack-shuts-uk-power/</link>
      <description>Experts argue Iranian cyber-attack on UK power plant lays bare frailty of critical national infrastructure</description>
      <pubDate>Mon, 24 Aug 2026 09:01:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cni-iranian-attack-shuts-uk-power/</guid>
    </item>
    <item>
      <title>North Korean Hackers Tied to Rust Supply Chain Attack</title>
      <link>https://www.infosecurity-magazine.com/news/north-korean-rust-supply-chain/</link>
      <description>Cybersecurity researchers have linked a malicious backdoor in compromised Rust packages to previous North Korean supply chain attacks</description>
      <pubDate>Fri, 21 Aug 2026 12:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/north-korean-rust-supply-chain/</guid>
    </item>
    <item>
      <title>Updated ToxicPanda Variant Targets 140+ Banking and Crypto Apps</title>
      <link>https://www.infosecurity-magazine.com/news/updated-toxicpanda-140-banking/</link>
      <description>Zimperium lifts the lid on the ToxicPanda 2.0 Android banking Trojan</description>
      <pubDate>Thu, 20 Aug 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/updated-toxicpanda-140-banking/</guid>
    </item>
    <item>
      <title>Def Con Attendees Targeted by Persistent Phishing Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/def-con-attendees-persistent/</link>
      <description>Huntress researcher explains how they were targeted by an elaborate and persistent phishing scam following Def Con</description>
      <pubDate>Thu, 20 Aug 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/def-con-attendees-persistent/</guid>
    </item>
    <item>
      <title>MaaS Campaign Combines ClickFix, ErrTraffic and Cruciferra</title>
      <link>https://www.infosecurity-magazine.com/news/maas-clickfix-errtraffic-cruciferra/</link>
      <description>eSentire uncovered a malware campaign combining ClickFix lures with ErrTraffic and Cruciferra</description>
      <pubDate>Wed, 19 Aug 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/maas-clickfix-errtraffic-cruciferra/</guid>
    </item>
    <item>
      <title>Grandoreiro Resurfaces in Mexico With New DLL Sideloading Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/grandoreiro-mexico-dll-sideloading/</link>
      <description>Grandoreiro is active after its 2024 disruption, with Mexico now accounting for 40% of detections</description>
      <pubDate>Wed, 19 Aug 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/grandoreiro-mexico-dll-sideloading/</guid>
    </item>
    <item>
      <title>UK Fraud Cases Hit Record High in 2026</title>
      <link>https://www.infosecurity-magazine.com/news/uk-fraud-cases-hit-record-high/</link>
      <description>Cifas data finds account takeover and identity fraud are driving a surge in fraud cases</description>
      <pubDate>Wed, 19 Aug 2026 08:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-fraud-cases-hit-record-high/</guid>
    </item>
    <item>
      <title>Enterprise Applications Carry 4.31x More Critical and High Vulnerabilities</title>
      <link>https://www.infosecurity-magazine.com/news/enterprise-apps-critical-high/</link>
      <description>Enterprise software creation has accelerated as vulnerability levels rise, Sonatype finds</description>
      <pubDate>Tue, 18 Aug 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/enterprise-apps-critical-high/</guid>
    </item>
    <item>
      <title>Three-quarters of Ransomware Attacks Target Mid-Market Firms </title>
      <link>https://www.infosecurity-magazine.com/news/threequarters-ransomware-attacks/</link>
      <description>Black Kite finds mid-market is the sweet spot for ransomware as manufacturers are most likely to be hit</description>
      <pubDate>Tue, 18 Aug 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/threequarters-ransomware-attacks/</guid>
    </item>
    <item>
      <title>UNISOC Modem Flaw Enables Remote Code Execution via Video Calls</title>
      <link>https://www.infosecurity-magazine.com/news/unisoc-modem-flaw-rce-calls/</link>
      <description>UNISOC modem flaw enabled kernel-level code execution through video calls</description>
      <pubDate>Mon, 17 Aug 2026 15:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/unisoc-modem-flaw-rce-calls/</guid>
    </item>
    <item>
      <title>SafePal Data Breach Hits Tens of Thousands of Customers</title>
      <link>https://www.infosecurity-magazine.com/news/safepal-data-breach-tens-thousands/</link>
      <description>Nearly 40,000 customers of hardware wallet provider SafePal have been impacted by a data breach</description>
      <pubDate>Mon, 17 Aug 2026 09:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/safepal-data-breach-tens-thousands/</guid>
    </item>
    <item>
      <title>Infostealers Harvest 1.7 Billion Credentials in Six Months</title>
      <link>https://www.infosecurity-magazine.com/news/infostealers-17-billion/</link>
      <description>Flashpoint data reveals infostealers were responsible for taking 1.7 billion credentials in the first half of 2026</description>
      <pubDate>Mon, 17 Aug 2026 07:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/infostealers-17-billion/</guid>
    </item>
    <item>
      <title>Researchers Confirm ExfilSquad’s Access to Sensitive Data Across 13 Organizations</title>
      <link>https://www.infosecurity-magazine.com/news/exfilsquads-13-organizations/</link>
      <description>Researchers have verified that ExfilSquad possesses sensitive data stolen from at least 13 victims after the extortion group published leaked datasets via torrents </description>
      <pubDate>Fri, 14 Aug 2026 14:49:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/exfilsquads-13-organizations/</guid>
    </item>
    <item>
      <title>New Mirai-Based Linux Botnet ‘Evooo1Bot’ Turns Victims Into Proxies</title>
      <link>https://www.infosecurity-magazine.com/news/new-linux-botnet-evooo1bot-victims/</link>
      <description>Evooo1Bot is a newly observed botnet based on the Mirai framework but equipped with advanced features, turning edge devices into persistent proxies</description>
      <pubDate>Fri, 14 Aug 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/new-linux-botnet-evooo1bot-victims/</guid>
    </item>
    <item>
      <title>Researchers Link 'Jewelbug' Chinese APT to Hack-for-Hire Operations</title>
      <link>https://www.infosecurity-magazine.com/news/researchers-link-chinese-apt-hack/</link>
      <description>Threat intelligence researchers from Broadcom revealed that a known Chinese APT group may be linked to a lucrative crypto fraud operation</description>
      <pubDate>Fri, 14 Aug 2026 07:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/researchers-link-chinese-apt-hack/</guid>
    </item>
    <item>
      <title>vCenter Flaw Exploited Just Five Days After Disclosure</title>
      <link>https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/</link>
      <description>Attackers exploited a critical-severity vCenter flaw five days after Broadcom disclosed it</description>
      <pubDate>Thu, 13 Aug 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/</guid>
    </item>
    <item>
      <title>Trump Authorizes Private Sector Participation in Offensive Cyber Operations</title>
      <link>https://www.infosecurity-magazine.com/news/trump-private-offensive-cyber/</link>
      <description>The White House has authorized government-directed offensive cyber operations against transnational groups, prompting warnings over escalation and attribution risks</description>
      <pubDate>Thu, 13 Aug 2026 12:35:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trump-private-offensive-cyber/</guid>
    </item>
    <item>
      <title>Akira Affiliate Crashes Ransomware After Attempting EDR Evasion</title>
      <link>https://www.infosecurity-magazine.com/news/akira-affiliate-crashes-ransomware/</link>
      <description>Huntress documents how a ransomware affiliate sabotaged its own attack with an anti-EDR effort</description>
      <pubDate>Thu, 13 Aug 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/akira-affiliate-crashes-ransomware/</guid>
    </item>
    <item>
      <title>ICO Reprimands Criminal Records Office After 2023 Breach</title>
      <link>https://www.infosecurity-magazine.com/news/ico-reprimands-acro-records-office/</link>
      <description>The ICO has issued a formal reprimand to ACRO after patching and security monitoring failures led to a breach</description>
      <pubDate>Thu, 13 Aug 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ico-reprimands-acro-records-office/</guid>
    </item>
    <item>
      <title>WindRelay Malware Pairs With SpyNote RAT in Live-Call Scam</title>
      <link>https://www.infosecurity-magazine.com/news/windrelay-nfc-relay-spynote-rat/</link>
      <description>New WindRelay NFC malware paired with SpyNote RAT let a fraudster clone a card mid-call</description>
      <pubDate>Wed, 12 Aug 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/windrelay-nfc-relay-spynote-rat/</guid>
    </item>
    <item>
      <title>Lazarus Used Post-Quantum Key Exchange to Deliver Zero-Day</title>
      <link>https://www.infosecurity-magazine.com/news/lazarus-post-quantum-key-dream-job/</link>
      <description>Lazarus malware used post-quantum key exchange to protect delivery of a Windows zero-day exploit</description>
      <pubDate>Wed, 12 Aug 2026 13:35:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/lazarus-post-quantum-key-dream-job/</guid>
    </item>
    <item>
      <title>The Middle East Conflict is Driving Cyber Spillover Beyond the Region</title>
      <link>https://www.infosecurity-magazine.com/opinions/middle-east-cyber-spillover/</link>
      <description>Western organizations face increased risk from cyber-attack disruption amid ongoing Middle East tensions</description>
      <pubDate>Wed, 12 Aug 2026 11:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/middle-east-cyber-spillover/</guid>
    </item>
    <item>
      <title>Russian-Linked Hackers Accessed Polish Power Plant OT Network Through Private APN, Says CERT.PL</title>
      <link>https://www.infosecurity-magazine.com/news/attack-polish-power-plant-2025-led/</link>
      <description>The Polish CERT has released details of another 2025 attack on a combined heat and power plant in the country </description>
      <pubDate>Wed, 12 Aug 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/attack-polish-power-plant-2025-led/</guid>
    </item>
    <item>
      <title>Six npm Packages Read C2 Addresses From Ethereum Wallet</title>
      <link>https://www.infosecurity-magazine.com/news/npm-packages-ethereum-wallet-c2/</link>
      <description>Six npm packages queried an Ethereum wallet to locate C2 infrastructure</description>
      <pubDate>Tue, 11 Aug 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/npm-packages-ethereum-wallet-c2/</guid>
    </item>
    <item>
      <title>Logistics Giant Ceva Suffers Data Breach Impacting European Clients</title>
      <link>https://www.infosecurity-magazine.com/news/logistics-ceva-data-breach/</link>
      <description>Supply chain attack and data breach at Ceva Logistics appears to have a large blast radius</description>
      <pubDate>Tue, 11 Aug 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/logistics-ceva-data-breach/</guid>
    </item>
    <item>
      <title>US Sanctions Iranian $6bn Crypto “Exchange” Shelbit</title>
      <link>https://www.infosecurity-magazine.com/news/us-sanctions-iranian-6bn-crypto/</link>
      <description>TRM Labs explains that sanctioned Iranian firm Shelbit was a fake crypto exchange</description>
      <pubDate>Mon, 10 Aug 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-sanctions-iranian-6bn-crypto/</guid>
    </item>
    <item>
      <title>Google Links Redact Extortion Group to BlackFile Rebrand</title>
      <link>https://www.infosecurity-magazine.com/news/redact-extortion-group-blackfile/</link>
      <description>BlackFile has rebranded as Redact after an alleged affiliate hijack, with Google linking the group to ongoing vishing and extortion campaigns</description>
      <pubDate>Fri, 07 Aug 2026 09:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/redact-extortion-group-blackfile/</guid>
    </item>
    <item>
      <title>Ransomware Surges in July After Q2 Lull</title>
      <link>https://www.infosecurity-magazine.com/news/ransomware-surges-july-q2-lull/</link>
      <description>Finance, technology and healthcare sectors were particularly heavily targeted in July, according to Comparitech</description>
      <pubDate>Fri, 07 Aug 2026 08:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ransomware-surges-july-q2-lull/</guid>
    </item>
    <item>
      <title>Toolkit Hidden Inside Oracle Database Evades Endpoint Tools</title>
      <link>https://www.infosecurity-magazine.com/news/khunt-toolkit-oracle-database-sql/</link>
      <description>Attackers used SQL injection to compile a post-exploitation toolkit inside an Oracle database</description>
      <pubDate>Thu, 06 Aug 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/khunt-toolkit-oracle-database-sql/</guid>
    </item>
    <item>
      <title>TeamPCP Traced Back to 2020 Cryptojacking Operation</title>
      <link>https://www.infosecurity-magazine.com/news/teampcp-shadowray-ta-natalstatus/</link>
      <description>Oligo Security has linked TeamPCP to ShadowRay 2.0 and to cryptojacking infrastructure dating back to 2020</description>
      <pubDate>Thu, 06 Aug 2026 14:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/teampcp-shadowray-ta-natalstatus/</guid>
    </item>
    <item>
      <title>Canadian Hacker Pleads Guilty Over Snowflake Extortion Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/canadian-hacker-guilty-snowflake/</link>
      <description>A Canadian hacker has admitted involvement in the widespread compromise of 165 Snowflake customer accounts used to steal data and extort victims</description>
      <pubDate>Thu, 06 Aug 2026 10:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/canadian-hacker-guilty-snowflake/</guid>
    </item>
    <item>
      <title>Fake Open VSX Extensions Harvest Private Repo and CI Data</title>
      <link>https://www.infosecurity-magazine.com/news/open-vsx-evil-twin-extensions-git/</link>
      <description>77 counterfeit Open VSX extensions beaconed to one domain, 19 harvesting git and CI identity</description>
      <pubDate>Wed, 05 Aug 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/open-vsx-evil-twin-extensions-git/</guid>
    </item>
    <item>
      <title>Fake Bank of America Phishing Scam Installs Remote Access Malware</title>
      <link>https://www.infosecurity-magazine.com/news/fake-bank-of-america-phishing-scam/</link>
      <description>Cybercriminals are using a fake Bank of America phishing campaign to trick users into downloading a malicious script that installs ScreenConnect, enabling remote access and persistence on compromised systems</description>
      <pubDate>Wed, 05 Aug 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fake-bank-of-america-phishing-scam/</guid>
    </item>
    <item>
      <title>WhatsApp Scam Hijacks Accounts via Linked Devices Feature</title>
      <link>https://www.infosecurity-magazine.com/news/whatsapp-voting-scam-linked/</link>
      <description>WhatsApp scam abused the Linked devices feature to hijack accounts without stealing any passwords</description>
      <pubDate>Tue, 04 Aug 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/whatsapp-voting-scam-linked/</guid>
    </item>
    <item>
      <title>Cybercriminals Bypass AI Safety Controls by Splitting Malicious Tasks Across Multiple Sessions</title>
      <link>https://www.infosecurity-magazine.com/news/talos-attackers-split-tasks-evade/</link>
      <description>Talos read attacker prompt logs and found guardrails fell to task splitting and ownership claims</description>
      <pubDate>Tue, 04 Aug 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/talos-attackers-split-tasks-evade/</guid>
    </item>
    <item>
      <title>Cloud and SaaS Environments Now Top Targets for Attackers</title>
      <link>https://www.infosecurity-magazine.com/news/cloud-saas-targets-attackers/</link>
      <description>Cloud and SaaS are now the preferred operating environments for threat actors, amid a continued shift to identity attacks </description>
      <pubDate>Tue, 04 Aug 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cloud-saas-targets-attackers/</guid>
    </item>
    <item>
      <title>AI Accounts for Over Half of Cybercrime in Africa, Says Interpol</title>
      <link>https://www.infosecurity-magazine.com/news/ai-accounts-over-half-cybercrime/</link>
      <description>Interpol claims AI is driving a surge in cybercrime in Africa, with related losses doubling</description>
      <pubDate>Tue, 04 Aug 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-accounts-over-half-cybercrime/</guid>
    </item>
    <item>
      <title>UK’s Police National Legal Database Reveals Data Breach</title>
      <link>https://www.infosecurity-magazine.com/news/uks-police-national-legal-database/</link>
      <description>The UK’s Police National Legal Database and Ask the Police service have been breached</description>
      <pubDate>Tue, 04 Aug 2026 08:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uks-police-national-legal-database/</guid>
    </item>
    <item>
      <title>China-Linked Threat Actors Weaponize New Vulnerabilities in Under a Day</title>
      <link>https://www.infosecurity-magazine.com/news/chinalinked-threat-actors/</link>
      <description>Chinese actors exploited the critical React2Shell exploit inside a day, while 88% of exploited vulnerabilities in H1 2026 were compromised within 48 hours of disclosure</description>
      <pubDate>Mon, 03 Aug 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chinalinked-threat-actors/</guid>
    </item>
    <item>
      <title>Midnight Blizzard Targets Travelers via Captive Portals</title>
      <link>https://www.infosecurity-magazine.com/news/captivecrunch-midnight-blizzard/</link>
      <description>Russian actor Storm-2945 hijacked hotel captive portals to push fake updates and steal tokens</description>
      <pubDate>Mon, 03 Aug 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/captivecrunch-midnight-blizzard/</guid>
    </item>
    <item>
      <title>HollowFrame Loader Uses Fake Python DLL to Evade Defender</title>
      <link>https://www.infosecurity-magazine.com/news/hollowframe-fake-python-dll/</link>
      <description>New HollowFrame loader hid Go code in a fake Python DLL after pre-staging Defender exclusions</description>
      <pubDate>Mon, 03 Aug 2026 11:26:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hollowframe-fake-python-dll/</guid>
    </item>
    <item>
      <title>Korea’s Largest Telco KT Fined $38m After Femtocell Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/koreas-largest-telco-kt-fine-39m/</link>
      <description>Korean telco KT has been fined $39m for a year-long breach linked to femtocell compromise</description>
      <pubDate>Mon, 03 Aug 2026 09:36:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/koreas-largest-telco-kt-fine-39m/</guid>
    </item>
    <item>
      <title>Chinese Hacker Uses DeepSeek AI to Orchestrate Vulnerability Exploits</title>
      <link>https://www.infosecurity-magazine.com/news/chinese-hacker-deepseek-ai/</link>
      <description>A Chinese-speaking threat actor has been using DeepSeek’s AI models to orchestrate cyber-attacks targeting Asian organizations</description>
      <pubDate>Fri, 31 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chinese-hacker-deepseek-ai/</guid>
    </item>
    <item>
      <title>AWS Blames North Korean Group for Axios and Other npm Supply Chain Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/aws-north-korea-axios-npm-supply/</link>
      <description>AWS has linked North Korea to the axios campaign to other attacks on npm libraries</description>
      <pubDate>Fri, 31 Jul 2026 09:50:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/aws-north-korea-axios-npm-supply/</guid>
    </item>
    <item>
      <title>Cryptominer Abuses Linux PAM to Hide From SOC Analysts</title>
      <link>https://www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/</link>
      <description>Cryptomining crew abandoned root to impersonate low-privileged Linux users and evade SOC alerts</description>
      <pubDate>Thu, 30 Jul 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/</guid>
    </item>
    <item>
      <title>AiTM Phishing Becomes Top Initial Access Threat to Law Firms</title>
      <link>https://www.infosecurity-magazine.com/news/aitm-phishing-top-entry-point-law/</link>
      <description>AiTM phishing is now the top entry point into law firms, with identity behind 56% of threats</description>
      <pubDate>Thu, 30 Jul 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/aitm-phishing-top-entry-point-law/</guid>
    </item>
    <item>
      <title>Teams-Themed Phishing Campaign Abused Legitimate Microsoft Login Pages</title>
      <link>https://www.infosecurity-magazine.com/news/teams-phishing-abused-legit/</link>
      <description>Check Point researchers detail phishing attack as an example of attackers dropping fake Microsoft login pages in favor of abusing Microsoft’s legitimate authentication infrastructure</description>
      <pubDate>Thu, 30 Jul 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/teams-phishing-abused-legit/</guid>
    </item>
    <item>
      <title>LogoKit Phishing Kit Screenshots Victim Sites in Real Time</title>
      <link>https://www.infosecurity-magazine.com/news/logokit-phishing-real-time/</link>
      <description>LogoKit now builds per-victim phishing pages using live screenshots of the target's real website</description>
      <pubDate>Wed, 29 Jul 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/logokit-phishing-real-time/</guid>
    </item>
    <item>
      <title>Russian-Alligned TA488 Returns With Persistent Outlook Web Access Attack</title>
      <link>https://www.infosecurity-magazine.com/news/ta488-outlook-half-click-owareaper/</link>
      <description>TA488 returned with OWA half-click exploit deploying OWAReaper implant that survived re-imaging</description>
      <pubDate>Wed, 29 Jul 2026 15:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ta488-outlook-half-click-owareaper/</guid>
    </item>
    <item>
      <title>Researchers Warn of AI-Enhanced Phone Fraud Ecosystem</title>
      <link>https://www.infosecurity-magazine.com/news/researchers-aienhanced-phone-fraud/</link>
      <description>AI is dramatically reducing the barriers to entry for scam phone farm operators, Human Security warns</description>
      <pubDate>Wed, 29 Jul 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/researchers-aienhanced-phone-fraud/</guid>
    </item>
    <item>
      <title>Phishing Dominates as Initial Entry Method for Cyber-Attacks, as Hackers Hone Evasion Techniques</title>
      <link>https://www.infosecurity-magazine.com/news/phishing-dominates-initial-entry/</link>
      <description>Analysis of real-life incident response cases by Cisco Talos warns that phishing remains a powerful method of initial compromise</description>
      <pubDate>Tue, 28 Jul 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/phishing-dominates-initial-entry/</guid>
    </item>
    <item>
      <title>Microsoft Launches Flurry of AI Security Initiatives to Combat AI-Enabled Threats</title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-ai-security-initiatives/</link>
      <description>Microsoft has launched a new agentic security system for cyber defenders as well as its first cyber-focused AI model</description>
      <pubDate>Tue, 28 Jul 2026 12:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-ai-security-initiatives/</guid>
    </item>
    <item>
      <title>Coca-Cola Reveals Subsidiary Fairlife Suffered Data Breach</title>
      <link>https://www.infosecurity-magazine.com/news/coca-cola-subsidiary-fairlife-data/</link>
      <description>Coca Cola claims data was stolen from its Fairlife business after a recent ransomware attack</description>
      <pubDate>Tue, 28 Jul 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/coca-cola-subsidiary-fairlife-data/</guid>
    </item>
    <item>
      <title>NVIDIA’s Open Secure AI Alliance Is Missing Some Big Names</title>
      <link>https://www.infosecurity-magazine.com/news/nvidia-open-security-ai-alliance/</link>
      <description>NVIDIA has launched a new Open Secure AI Alliance to build an “open defense stack for agents”</description>
      <pubDate>Tue, 28 Jul 2026 09:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nvidia-open-security-ai-alliance/</guid>
    </item>
    <item>
      <title>SourTrade Malvertising Campaign Secretly Builds Malware in the Browser</title>
      <link>https://www.infosecurity-magazine.com/news/malvertising-builds-malware-in/</link>
      <description>Impersonating well-known cryptocurrency and trading sites, SourTrade has developed a novel technique to drop infostealers to victims</description>
      <pubDate>Mon, 27 Jul 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/malvertising-builds-malware-in/</guid>
    </item>
    <item>
      <title>Ransomware Groups Increasingly Deploy EDR Kill Techniques</title>
      <link>https://www.infosecurity-magazine.com/news/ransomware-q2-2026-edr-kill/</link>
      <description>Halcyon’s latest quarterly ransomware report showed that while ransomware attacks are declining, obfuscation techniques are getting harder to fight against</description>
      <pubDate>Mon, 27 Jul 2026 10:01:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ransomware-q2-2026-edr-kill/</guid>
    </item>
    <item>
      <title>Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials From Visitors</title>
      <link>https://www.infosecurity-magazine.com/news/hotel-wifi-dns-poisoning/</link>
      <description>Researchers at ReliaQuest warned of widespread DNS poisoning attacks targeting the hospitality sector as part of a cyber espionage campaign</description>
      <pubDate>Fri, 24 Jul 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hotel-wifi-dns-poisoning/</guid>
    </item>
    <item>
      <title>ChatGPT Among Top 10 Most Impersonated Brands in Phishing Attacks, Says Check Point</title>
      <link>https://www.infosecurity-magazine.com/news/chatgpt-most-impersonated-brands/</link>
      <description>OpenAI’s chatbot tool ChatGPT ranked among the top 10 most impersonated brands in phishing attacks for the first time</description>
      <pubDate>Fri, 24 Jul 2026 11:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chatgpt-most-impersonated-brands/</guid>
    </item>
    <item>
      <title>Ransomware Attacks Targeting Universities on the Rise </title>
      <link>https://www.infosecurity-magazine.com/news/university-ransomware-attacks-rise/</link>
      <description>Comparitech’s analysis of incidents in the first half of 2026 finds that the emergence of The Gentlemen ransomware has resulted in surge in attacks against higher education</description>
      <pubDate>Fri, 24 Jul 2026 09:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/university-ransomware-attacks-rise/</guid>
    </item>
    <item>
      <title>Russian Hackers Exploit New ‘Zero-Click’  Attack Against Western Organizations</title>
      <link>https://www.infosecurity-magazine.com/news/russian-hackers-zero-click/</link>
      <description>International agencies issue joint alert over state-backed campaign exploiting a critical vulnerability in the Zimbra Collaboration Suite</description>
      <pubDate>Thu, 23 Jul 2026 15:50:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/russian-hackers-zero-click/</guid>
    </item>
    <item>
      <title>Iranian Hackers Target Siemens and Schneider Industrial Systems, CISA Warns</title>
      <link>https://www.infosecurity-magazine.com/news/iran-hackers-siemen-schneider-ics/</link>
      <description>US government agencies have warned that Iranian cyber actors are targeting US-based Siemens and Schneider industrial equipment</description>
      <pubDate>Thu, 23 Jul 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/iran-hackers-siemen-schneider-ics/</guid>
    </item>
    <item>
      <title>TrickBot Ditches HTTP for DNS Tunneling in Latest Variant</title>
      <link>https://www.infosecurity-magazine.com/news/trickbot-dns-tunneling-c2/</link>
      <description>New TrickBot variant hides C2 communication inside DNS queries, replacing decade-old HTTP pattern</description>
      <pubDate>Wed, 22 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trickbot-dns-tunneling-c2/</guid>
    </item>
    <item>
      <title>Russian Hacker Turns Jailbroken Claude Into Pentest Platform</title>
      <link>https://www.infosecurity-magazine.com/news/trim-jailbroken-claude-ai-pentest/</link>
      <description>Russian-speaking actor Trim built a commercial offensive AI pentest tool on jailbroken Claude models</description>
      <pubDate>Tue, 21 Jul 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trim-jailbroken-claude-ai-pentest/</guid>
    </item>
    <item>
      <title>A New Ransomware Threat Actor Emerges Every Week, Warns Report</title>
      <link>https://www.infosecurity-magazine.com/news/new-ransomware-weekly/</link>
      <description>Analysis by Black Kite warns that ransomware ecosystem is becoming bigger and more fragmented</description>
      <pubDate>Tue, 21 Jul 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/new-ransomware-weekly/</guid>
    </item>
    <item>
      <title>FBI Warns of Deepfake Videos Impersonating IC3 Leadership</title>
      <link>https://www.infosecurity-magazine.com/news/fbi-deepfake-videos-ic3/</link>
      <description>FBI warned of deepfake videos of IC3 leadership directing users to spoofed complaint sites</description>
      <pubDate>Tue, 21 Jul 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fbi-deepfake-videos-ic3/</guid>
    </item>
    <item>
      <title>Researchers Uncover North Korean 'ClickFake' Campaign Targeting Web3 Pros</title>
      <link>https://www.infosecurity-magazine.com/news/north-korean-clickfake-campaign/</link>
      <description>In a new campaign, North Korean hacking group Famous Chollima targeted crypto professionals through ClickFix lures to deliver Windows and macOS trojans</description>
      <pubDate>Tue, 21 Jul 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/north-korean-clickfake-campaign/</guid>
    </item>
    <item>
      <title>Cruciferra Crypter Uses Process Ghosting to Evade Detection</title>
      <link>https://www.infosecurity-magazine.com/news/cruciferra-crypter-process-ghosting/</link>
      <description>Cruciferra crypter used process ghosting and 90 custom ciphers to hide payloads for multiple actors</description>
      <pubDate>Mon, 20 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cruciferra-crypter-process-ghosting/</guid>
    </item>
    <item>
      <title>JadePuffer Returns With Ransomware Designed to Wipe AI Models</title>
      <link>https://www.infosecurity-magazine.com/news/jadepuffer-ai-model-ransomware/</link>
      <description>JadePuffer follow-up campaign deployed ENCFORGE locker built to destroy AI model artifacts</description>
      <pubDate>Mon, 20 Jul 2026 14:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/jadepuffer-ai-model-ransomware/</guid>
    </item>
    <item>
      <title>New HollowGraph Malware Hijacks Microsoft 365 Calendars for Covert C2 Communications</title>
      <link>https://www.infosecurity-magazine.com/news/hollowgraph-microsoft-calendars/</link>
      <description>Researchers have linked HollowGraph malware to the Cavern framework after discovering its use of Microsoft 365 calendars and Microsoft Graph APIs as a stealthy C2 channel</description>
      <pubDate>Mon, 20 Jul 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hollowgraph-microsoft-calendars/</guid>
    </item>
    <item>
      <title>Police Chiefs Cite TfL Hack in Push for Cybercrime Risk Orders </title>
      <link>https://www.infosecurity-magazine.com/news/police-chiefs-tfl-cybercrime-risk/</link>
      <description>Two chiefs of UK policing agencies said the Transport for London prosecution demonstrates the need for Cybercrime Risk Orders</description>
      <pubDate>Mon, 20 Jul 2026 09:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/police-chiefs-tfl-cybercrime-risk/</guid>
    </item>
    <item>
      <title>Government Agencies Falling Victim to Ransomware Daily, Warns Study</title>
      <link>https://www.infosecurity-magazine.com/news/government-ransomware-daily/</link>
      <description>Government organizations are targeted by attackers who know agencies cannot afford disruption to public services</description>
      <pubDate>Fri, 17 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/government-ransomware-daily/</guid>
    </item>
    <item>
      <title>The Gentlemen Overtakes Qilin as Most Prolific Ransomware Threat</title>
      <link>https://www.infosecurity-magazine.com/news/the-gentlemen-most-prolific/</link>
      <description>Analysis of ransomware incidents by ReliaQuest indicates a shift in the ransomware landscape</description>
      <pubDate>Fri, 17 Jul 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/the-gentlemen-most-prolific/</guid>
    </item>
    <item>
      <title>Cybersecurity’s Economics Are Broken. Automation Alone Won’t Fix It</title>
      <link>https://www.infosecurity-magazine.com/opinions/cybersecurity-economics-broken-ai/</link>
      <description />
      <pubDate>Fri, 17 Jul 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/cybersecurity-economics-broken-ai/</guid>
    </item>
    <item>
      <title>Phishing Campaign Hides Lua Loader as TrueType Font File</title>
      <link>https://www.infosecurity-magazine.com/news/phishing-lua-loader-truetype-font/</link>
      <description>Global phishing campaign disguised a Lua loader as a font file to deploy RATs and infostealers</description>
      <pubDate>Thu, 16 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/phishing-lua-loader-truetype-font/</guid>
    </item>
    <item>
      <title>Modular macOS Stealer Uses Kill Loops to Force Password Entry</title>
      <link>https://www.infosecurity-magazine.com/news/clicklock-macos-stealer-clickfix/</link>
      <description>New ClickLock macOS stealer locked victims out of their own system until they surrendered a password</description>
      <pubDate>Thu, 16 Jul 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/clicklock-macos-stealer-clickfix/</guid>
    </item>
    <item>
      <title>"Selfish Bravado"  Behind TfL Cyber-Attack, Judge Says as Pair Jailed</title>
      <link>https://www.infosecurity-magazine.com/news/selfish-bravado-behind-tfl/</link>
      <description>The perpetrators of the 2024 TfL cyber-attack have been jailed for five and a half years each after pleading guilty to Computer Misuse Act offences</description>
      <pubDate>Thu, 16 Jul 2026 11:51:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/selfish-bravado-behind-tfl/</guid>
    </item>
    <item>
      <title>Phishing Campaign Abuses eCards to Deploy RMM Tools</title>
      <link>https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/</link>
      <description>Six-month phishing campaign used seasonal eCard lures to plant legitimate RMM tools on victims</description>
      <pubDate>Wed, 15 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/</guid>
    </item>
    <item>
      <title>Eleven Vulnerable UEFI Shims Enable Secure Boot Bypass</title>
      <link>https://www.infosecurity-magazine.com/news/uefi-shims-secure-boot-bypass/</link>
      <description>Eleven forgotten Microsoft-signed UEFI shims can bypass Secure Boot on almost any machine</description>
      <pubDate>Wed, 15 Jul 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uefi-shims-secure-boot-bypass/</guid>
    </item>
    <item>
      <title>Compromised Logins Surge as the Most Common Entry Point for Ransomware Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/compromised-logins-ransomware-entry/</link>
      <description>Research of incidents by Sophos finds that phishing, brute force attacks and other identity-based threats have surpassed software vulnerabilities as means of delivering ransomware</description>
      <pubDate>Wed, 15 Jul 2026 12:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/compromised-logins-ransomware-entry/</guid>
    </item>
    <item>
      <title>Engineering The Internet For Resilience </title>
      <link>https://www.infosecurity-magazine.com/opinions/engineering-for-resilience/</link>
      <description>Bad actors explore our digital supply chains to find weak links. We must fix these weaknesses</description>
      <pubDate>Wed, 15 Jul 2026 09:01:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/engineering-for-resilience/</guid>
    </item>
    <item>
      <title>Lidl Notifies Customers of Third-Party Data Breach</title>
      <link>https://www.infosecurity-magazine.com/news/lidl-notifies-customers-of/</link>
      <description>Supermarket giant Lidl has revealed details of a supplier breach impacting customer data</description>
      <pubDate>Tue, 14 Jul 2026 09:43:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/lidl-notifies-customers-of/</guid>
    </item>
    <item>
      <title>Five Charged in “Russian Coms” Fraud Platform Case</title>
      <link>https://www.infosecurity-magazine.com/news/five-charged-in-russian-coms-fraud/</link>
      <description>Five UK residents have been charged in relation to supplying Russian Coms fraud devices and apps</description>
      <pubDate>Tue, 14 Jul 2026 08:21:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/five-charged-in-russian-coms-fraud/</guid>
    </item>
    <item>
      <title>Open Directory Exposes Three Evilginx Phishing Operators</title>
      <link>https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/</link>
      <description>Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA</description>
      <pubDate>Mon, 13 Jul 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/</guid>
    </item>
    <item>
      <title>Pakistani Police Systems Hit by Chinese and Indian Espionage</title>
      <link>https://www.infosecurity-magazine.com/news/chinese-indian-espionage-pakistani/</link>
      <description>Chinese and Indian spies converged on the same Balochistan police force, SentinelLabs found</description>
      <pubDate>Mon, 13 Jul 2026 14:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chinese-indian-espionage-pakistani/</guid>
    </item>
    <item>
      <title>Russian State Hackers Target Vulnerable Routers Worldwide, Joint Advisory Warns</title>
      <link>https://www.infosecurity-magazine.com/news/russian-state-hackers-vulnerable/</link>
      <description>Cybersecurity agencies from 12 countries have warned that Russian state-backed hackers are actively targeting vulnerable routers using weak SNMP credentials</description>
      <pubDate>Mon, 13 Jul 2026 10:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/russian-state-hackers-vulnerable/</guid>
    </item>
    <item>
      <title>Hacker Extradited from Ukraine Pleads Guilty to Ryuk Ransomware Charges</title>
      <link>https://www.infosecurity-magazine.com/news/hacker-extradited-ukraine-guilty/</link>
      <description>An Armenian man has pleaded guilty to his role in the infamous Ryuk ransomware operation</description>
      <pubDate>Mon, 13 Jul 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hacker-extradited-ukraine-guilty/</guid>
    </item>
    <item>
      <title>Australian Cyber Agency Warns of Global CMS Exploitation Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/australia-warns-global-cms/</link>
      <description>Australian Cyber Security Centre warns CMS users of mass scanning and exploitation campaign</description>
      <pubDate>Mon, 13 Jul 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/australia-warns-global-cms/</guid>
    </item>
    <item>
      <title>Microsoft Warns New 'GigaWiper' Malware Combines Espionage and Destructive Capabilities</title>
      <link>https://www.infosecurity-magazine.com/news/new-gigawiper-espionage-destructive/</link>
      <description>A new multi-purpose backdoor allows cyber threat actors to conduct both quiet espionage activity and destructive wiping operations</description>
      <pubDate>Fri, 10 Jul 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/new-gigawiper-espionage-destructive/</guid>
    </item>
    <item>
      <title>New Ransomware Exploits Malicious Driver to Remove Cybersecurity Protections</title>
      <link>https://www.infosecurity-magazine.com/news/ransomware-removes-cybersecurity/</link>
      <description>GodDamn ransomware uses remote desktop application to secretly move around networks and drop the malicious PoisonX kernel driver</description>
      <pubDate>Fri, 10 Jul 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ransomware-removes-cybersecurity/</guid>
    </item>
    <item>
      <title>Vibe-Coded Malware Caught in Active Directory Attack</title>
      <link>https://www.infosecurity-magazine.com/news/vibe-coded-malware-ai-powershell/</link>
      <description>Huntress found a threat actor using vibe-coded PowerShell to map an Active Directory network</description>
      <pubDate>Thu, 09 Jul 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/vibe-coded-malware-ai-powershell/</guid>
    </item>
    <item>
      <title>Chinese-Funded Interpol Cybercrime Crackdown Leads to 5,800 Arrests</title>
      <link>https://www.infosecurity-magazine.com/news/china-interpol-cybercrime-crackdown/</link>
      <description>Operation First Light 2026, coordinated by Interpol and funded by the Chinese government, has led to 5,811 arrests</description>
      <pubDate>Thu, 09 Jul 2026 11:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/china-interpol-cybercrime-crackdown/</guid>
    </item>
    <item>
      <title>Cybercriminals Plant Malicious AI Agents in Open Source Tool Repositories</title>
      <link>https://www.infosecurity-magazine.com/news/cybercriminals-plant-ai-agents/</link>
      <description>Cybersecurity researchers at ESET identify big rise in suspicious and malicious toolsets which put users at risk from cyber-attacks</description>
      <pubDate>Thu, 09 Jul 2026 07:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybercriminals-plant-ai-agents/</guid>
    </item>
    <item>
      <title>RedWing Android Spyware Sold as a Service on Telegram</title>
      <link>https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/</link>
      <description>Zimperium found RedWing, an Android spyware sold as a service via Telegram to target banking apps</description>
      <pubDate>Wed, 08 Jul 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/</guid>
    </item>
    <item>
      <title>China-Linked APT Expands Proxy Network With New Malware</title>
      <link>https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/</link>
      <description>Cisco Talos said China-linked APT UAT-7810 is growing its proxy relay network with new malware</description>
      <pubDate>Wed, 08 Jul 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/</guid>
    </item>
    <item>
      <title>Threat Actors Uses Agentic AI to Rapidly Compromise Cloud Target</title>
      <link>https://www.infosecurity-magazine.com/news/threat-actor-agentic-ai-cloud/</link>
      <description>Sygnia report details how agentic AI accelerated weeks-long attack to just 72 hours</description>
      <pubDate>Wed, 08 Jul 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/threat-actor-agentic-ai-cloud/</guid>
    </item>
    <item>
      <title>New Malicious Campaign Delivers Vidar Infostealer and Monero Crypto Miner</title>
      <link>https://www.infosecurity-magazine.com/news/new-campaign-vidar-stealer-monero/</link>
      <description>Cyber threat actors are infecting victims with the Vidar stealer and the XMRig cryptocurrency miner in a new malicious campaign</description>
      <pubDate>Wed, 08 Jul 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/new-campaign-vidar-stealer-monero/</guid>
    </item>
    <item>
      <title>How Faster Cyber-Attacks Are Reshaping Enterprise Cybersecurity Strategies</title>
      <link>https://www.infosecurity-magazine.com/news-features/faster-cyberattacks-reshape/</link>
      <description>Hackers can get in and out of enterprise networks faster than ever. Here's why - and hat it means for your cybersecurity strategy</description>
      <pubDate>Wed, 08 Jul 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news-features/faster-cyberattacks-reshape/</guid>
    </item>
    <item>
      <title>What Performing in Opera Taught Me About Succeeding in Cybersecurity</title>
      <link>https://www.infosecurity-magazine.com/opinions/what-opera-taught-me-about/</link>
      <description>My focus on growth in opera, with countless hours devoted to vocal training, collaboration and live performances, has directly fed into my development as a cybersecurity practitioner. The connection is quite natural.</description>
      <pubDate>Wed, 08 Jul 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/what-opera-taught-me-about/</guid>
    </item>
    <item>
      <title>NCSC Touts National Scale, AI-Powered “Cyber Shield” for Defense</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-national-cyber-sheild-ai/</link>
      <description>The National Cyber Security Centre wants to work with AI partners to build a new “Cyber Shield” to defend the UK</description>
      <pubDate>Wed, 08 Jul 2026 08:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-national-cyber-sheild-ai/</guid>
    </item>
    <item>
      <title>Suspected Chinese Threat Group Targets Universities via Vulnerable Roundcube Servers</title>
      <link>https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/</link>
      <description>A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and Canada and harvest user credentials</description>
      <pubDate>Tue, 07 Jul 2026 15:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/</guid>
    </item>
    <item>
      <title>Scattered Spider’s Structure More Like a Cybercrime Collective Than a Unified Gang</title>
      <link>https://www.infosecurity-magazine.com/news/scattered-spider-as-cybercrime/</link>
      <description>Group-IB analysis argued Scattered Spider is a decentralized collective of independent clusters</description>
      <pubDate>Tue, 07 Jul 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/scattered-spider-as-cybercrime/</guid>
    </item>
    <item>
      <title>Phishing Attacks Targeted Facebook Users With Fake Verification Offer</title>
      <link>https://www.infosecurity-magazine.com/news/phishing-facebook-fake-verification/</link>
      <description>Attacks also used a compromised chatbot in campaign to steal sensitive information from Business Users</description>
      <pubDate>Tue, 07 Jul 2026 07:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/phishing-facebook-fake-verification/</guid>
    </item>
    <item>
      <title>New Iran-Nexus Hacking Group Targets Israel Government and IT Sectors</title>
      <link>https://www.infosecurity-magazine.com/news/new-iran-hacking-group-targets/</link>
      <description>Check Point researchers have identified a new cyber adversary targeting Israeli government and IT businesses, tracked as ‘Cavern Manticore’</description>
      <pubDate>Mon, 06 Jul 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/new-iran-hacking-group-targets/</guid>
    </item>
    <item>
      <title>Indirect Prompt Injection in Web Content Targets AI Agents</title>
      <link>https://www.infosecurity-magazine.com/news/indirect-prompt-injection-web/</link>
      <description>Zscaler found sites hiding prompt-injection text to manipulate AI agents into crypto payments</description>
      <pubDate>Mon, 06 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/indirect-prompt-injection-web/</guid>
    </item>
    <item>
      <title>NCA Issues Warning to Parents As Shared Child Photos Exploited by AI Tools</title>
      <link>https://www.infosecurity-magazine.com/news/nca-warn-parents-volume/</link>
      <description>IWF and NCA warn that growing numbers of images and videos are being manipulated into sexual abuse material</description>
      <pubDate>Mon, 06 Jul 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nca-warn-parents-volume/</guid>
    </item>
    <item>
      <title>Researchers Claim First Fully Agentic Ransomware: JadePuffer</title>
      <link>https://www.infosecurity-magazine.com/news/researchers-first-agentic/</link>
      <description>Researchers have revealed JadePuffer, the first agentic AI-powered ransomware campaign, highlighting how autonomous agents can automate cyber-attacks</description>
      <pubDate>Mon, 06 Jul 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/researchers-first-agentic/</guid>
    </item>
    <item>
      <title>Qilin Dominates Ransomware Market Amid Growing Cybercrime Consolidation</title>
      <link>https://www.infosecurity-magazine.com/news/qilin-dominates-ransomware-market/</link>
      <description>The ransomware landscape is reconsolidating around major players, with Qilin emerging as the leading RaaS operation, researchers say</description>
      <pubDate>Fri, 03 Jul 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/qilin-dominates-ransomware-market/</guid>
    </item>
    <item>
      <title>Warning Over “Industrialized” Cyber-Attacks After Ransomware Gang Partners With TeamPCP </title>
      <link>https://www.infosecurity-magazine.com/news/industrialized-cyberattacks/</link>
      <description>Researchers warn that collaboration could lead to “unprecedented” ransomware attacks, as FBI also issues warning</description>
      <pubDate>Fri, 03 Jul 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/industrialized-cyberattacks/</guid>
    </item>
    <item>
      <title>FBI, Google Take Down NetNut Proxy Network Used by Cyber Threat Actors</title>
      <link>https://www.infosecurity-magazine.com/news/fbi-google-take-down-netnut-proxy/</link>
      <description>The NetNut proxy network and the ‘Popa’ botnet are known to have infected devices with variants of Mirai DDoS botnets</description>
      <pubDate>Fri, 03 Jul 2026 09:35:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fbi-google-take-down-netnut-proxy/</guid>
    </item>
    <item>
      <title>Cybercriminals Pose as Interpol in Phishing Emails to Infect Victims With Ransomware</title>
      <link>https://www.infosecurity-magazine.com/news/cybercriminals-pose-interpol/</link>
      <description>Bitdefender researchers warned of curious ransomware campaign which has targeted businesses around the world</description>
      <pubDate>Thu, 02 Jul 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybercriminals-pose-interpol/</guid>
    </item>
    <item>
      <title>NCSC Shares Tips on How to Make a Pen Tester’s Job Harder</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/</link>
      <description>The NCSC has shared best practice advice from pen testers which could help improve system resilience</description>
      <pubDate>Thu, 02 Jul 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/</guid>
    </item>
    <item>
      <title>Alleged Scattered Spider Member Extradited to US</title>
      <link>https://www.infosecurity-magazine.com/news/scattered-spider-member-extradited/</link>
      <description>A teenager accused of hacking as part of Scattered Spider has been arrested </description>
      <pubDate>Thu, 02 Jul 2026 08:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/scattered-spider-member-extradited/</guid>
    </item>
    <item>
      <title>Fileless Malware Abuses Google Blogspot to Deploy Infostealer in Memory</title>
      <link>https://www.infosecurity-magazine.com/news/veil-drop-blogspot-purelog-stealer/</link>
      <description>Securonix said the Veil#Drop campaign abuses Google Blogspot to deliver PureLog Stealer in memory</description>
      <pubDate>Wed, 01 Jul 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/veil-drop-blogspot-purelog-stealer/</guid>
    </item>
    <item>
      <title>Brazilian Banking Trojan Ousaban Targets Spain and Portugal</title>
      <link>https://www.infosecurity-magazine.com/news/ousaban-banking-trojan-spain/</link>
      <description>FortiGuard says the Brazilian banking trojan Ousaban is targeting Spain and Portugal via phishing</description>
      <pubDate>Wed, 01 Jul 2026 13:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ousaban-banking-trojan-spain/</guid>
    </item>
    <item>
      <title>Microsoft Accelerates Quantum-Safe Push with New Timeline</title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-accelerates-quantumsafe/</link>
      <description>Microsoft has brought forward its timelines for transitioning to post-quantum cryptography (PQC) </description>
      <pubDate>Wed, 01 Jul 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-accelerates-quantumsafe/</guid>
    </item>
    <item>
      <title>Insurance Giant Aflac Discloses Data Breach Impacting Millions</title>
      <link>https://www.infosecurity-magazine.com/news/insurance-giant-aflac-data-breach/</link>
      <description>Aflac Japan has notified regulators that policy details and personal and banking information have been compromised</description>
      <pubDate>Wed, 01 Jul 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/insurance-giant-aflac-data-breach/</guid>
    </item>
    <item>
      <title>The New Hacktivists: How Global Conflict Turned a Nuisance Into a Security Threat</title>
      <link>https://www.infosecurity-magazine.com/opinions/hacktivist-nuisance-into-a/</link>
      <description>Hacktivism is everywhere, encompassing hundreds of groups across the globe. Here's how to counter them</description>
      <pubDate>Wed, 01 Jul 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/hacktivist-nuisance-into-a/</guid>
    </item>
    <item>
      <title>Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day</title>
      <link>https://www.infosecurity-magazine.com/news/nissan-oracle-peoplesoft-zero-day/</link>
      <description>Nissan says employees' data was stolen via the Oracle PeopleSoft zero-day campaign</description>
      <pubDate>Tue, 30 Jun 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nissan-oracle-peoplesoft-zero-day/</guid>
    </item>
    <item>
      <title>Critical SimpleHelp Vulnerability Exploited For Malware Delivery</title>
      <link>https://www.infosecurity-magazine.com/news/simplehelp-rmm-vulnerability/</link>
      <description>Attackers exploited a critical SimpleHelp RMM bug to deploy TaskWeaver and Djinn Stealer malware</description>
      <pubDate>Tue, 30 Jun 2026 15:34:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/simplehelp-rmm-vulnerability/</guid>
    </item>
    <item>
      <title>The Readiness Gap: What Wimbledon Reveals About Modern Cyber Defense</title>
      <link>https://www.infosecurity-magazine.com/opinions/what-wimbledon-reveals-about-cyber/</link>
      <description>Many organizations believe they are protected from cyber-attacks. But infrastructure never stands still</description>
      <pubDate>Tue, 30 Jun 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/what-wimbledon-reveals-about-cyber/</guid>
    </item>
    <item>
      <title>
ClickFix Now Cybercriminals' Favorite Malware Delivery Technique
</title>
      <link>https://www.infosecurity-magazine.com/news/clickfix-cybercriminals-favorite/</link>
      <description>ReliaQuest report warns of a surge in ClickFix social engineering attacks against Windows and macOS users</description>
      <pubDate>Tue, 30 Jun 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/clickfix-cybercriminals-favorite/</guid>
    </item>
    <item>
      <title>Hackers Leverage Blockchain to Hit Japan's Hotels Through Booking.com Phishing</title>
      <link>https://www.infosecurity-magazine.com/news/hackers-blockchain-japan-hotels/</link>
      <description>A wave of phishing emails sent to Booking.com partner accommodations in Japan in May led to blockchain-hosted malware</description>
      <pubDate>Tue, 30 Jun 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hackers-blockchain-japan-hotels/</guid>
    </item>
    <item>
      <title>UK Healthcare Sector Records Tenfold Increase in Cyber-Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/uk-healthcare-tenfold-increase/</link>
      <description>SonicWall records 264,000 events in first five months of 2026 as UK hospitals come under siege </description>
      <pubDate>Tue, 30 Jun 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-healthcare-tenfold-increase/</guid>
    </item>
    <item>
      <title>Over 300 UK Firms Hit by Ransomware in a Year</title>
      <link>https://www.infosecurity-magazine.com/news/over-300-uk-firms-hit-ransomware/</link>
      <description>Report Fraud data reveals that more than half of 323 UK ransomware victims last year were SMEs</description>
      <pubDate>Tue, 30 Jun 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/over-300-uk-firms-hit-ransomware/</guid>
    </item>
    <item>
      <title>Telegram-Based Millenium RAT Campaign Infects 60,000 Devices</title>
      <link>https://www.infosecurity-magazine.com/news/millenium-rat-telegram-60000/</link>
      <description>Group-IB says Millenium RAT, now rewritten in C++, has hit 62,289 devices in 160+ countries</description>
      <pubDate>Mon, 29 Jun 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/millenium-rat-telegram-60000/</guid>
    </item>
    <item>
      <title>US Federal Insurance Regulator Confirms Data Breach Via Oracle Flaw</title>
      <link>https://www.infosecurity-magazine.com/news/us-insurance-regulator-confirms/</link>
      <description>An attacker has exploited a zero day in Oracle Peoplesoft to gain access to the IT systems of the NAIC, the standard-setting association for the US federal insurance system</description>
      <pubDate>Mon, 29 Jun 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-insurance-regulator-confirms/</guid>
    </item>
    <item>
      <title>Russian Hackers Accused of Destructive Cyber-Attack on Jaguar Land Rover</title>
      <link>https://www.infosecurity-magazine.com/news/russian-hackers-destructive-jaguar/</link>
      <description>Experts warn the Jaguar Land Rover breach bears hallmarks of Kremlin-backed hackers, citing novel ransomware, strategic timing and efforts to obscure attribution</description>
      <pubDate>Mon, 29 Jun 2026 09:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/russian-hackers-destructive-jaguar/</guid>
    </item>
    <item>
      <title>FBI Sounds Alarm Over Russian Intelligence Signal Phishing</title>
      <link>https://www.infosecurity-magazine.com/news/fbi-alarm-russian-intelligence/</link>
      <description>The FBI claims Russian spies are targeting Signal backup keys</description>
      <pubDate>Mon, 29 Jun 2026 08:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fbi-alarm-russian-intelligence/</guid>
    </item>
    <item>
      <title>China-Linked Hackers Strike Asian Critical Infrastructure with TinyRCT Backdoor</title>
      <link>https://www.infosecurity-magazine.com/news/china-hackers-asian-cni-backdoor/</link>
      <description>A China-linked threat group has been targeting critical infrastructure in Southeast Asia with a new custom backdoor called TinyRCT</description>
      <pubDate>Fri, 26 Jun 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/china-hackers-asian-cni-backdoor/</guid>
    </item>
    <item>
      <title>CMC Releases Analysis and Guidance for Education Sector After Canvas Data Breach</title>
      <link>https://www.infosecurity-magazine.com/news/cmc-analysis-education-canvas-data/</link>
      <description>The UK Cyber Monitoring Centre reviews the Canvas breach affecting 160 UK universities, highlighting data theft risks and financial impacts of cyber incidents</description>
      <pubDate>Fri, 26 Jun 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cmc-analysis-education-canvas-data/</guid>
    </item>
    <item>
      <title>Twenty Million US IP Connections Used by Proxy Services</title>
      <link>https://www.infosecurity-magazine.com/news/twenty-million-us-ip-connections/</link>
      <description>Digital Citizens Alliance report claims that millions of Americans may have unwittingly had IP connections used by cybercriminals</description>
      <pubDate>Thu, 25 Jun 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/twenty-million-us-ip-connections/</guid>
    </item>
    <item>
      <title>Major Increase in Ransomware Attacks Targeting Europe, Warns New Report</title>
      <link>https://www.infosecurity-magazine.com/news/increase-ransomware-europe/</link>
      <description>Analysis of ransomware incidents by researchers at Black Kite found that attacks have risen by over 50% in the last year, with supply chain attacks increasing</description>
      <pubDate>Thu, 25 Jun 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/increase-ransomware-europe/</guid>
    </item>
    <item>
      <title>Europol-Led Operation Endgame Takes Down StealC and Amadey Infostealers</title>
      <link>https://www.infosecurity-magazine.com/news/operation-endgame-stealc-amadey/</link>
      <description>Operation Endgame seized around 50 domains and nearly 200 active IP-based servers associated with the infostealers</description>
      <pubDate>Wed, 24 Jun 2026 15:25:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/operation-endgame-stealc-amadey/</guid>
    </item>
    <item>
      <title>macOS Backdoor Uses Prompt Injection to Evade AI Triage</title>
      <link>https://www.infosecurity-magazine.com/news/macos-gaslight-rust-backdoor/</link>
      <description>SentinelLabs found a North Korea-linked macOS backdoor using prompt injection on AI triage tools</description>
      <pubDate>Wed, 24 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/macos-gaslight-rust-backdoor/</guid>
    </item>
    <item>
      <title>Iran-Linked MuddyWater Poses as Ransomware Gang to Mask Cyber Espionage</title>
      <link>https://www.infosecurity-magazine.com/news/iranlinked-muddywater-poses-as/</link>
      <description>An NCC Group report warns state-backed hackers are attempting to hide activity by posing as ransomware groups and deploying commercially available malware</description>
      <pubDate>Wed, 24 Jun 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/iranlinked-muddywater-poses-as/</guid>
    </item>
    <item>
      <title>AI Is Making Attacks Cheaper, Faster and More Covert, Says ReliaQuest</title>
      <link>https://www.infosecurity-magazine.com/news/ai-attacks-cheaper-faster-covert/</link>
      <description>New ReliaQuest study reveals the six ways AI is practically being used in attacks today</description>
      <pubDate>Wed, 24 Jun 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-attacks-cheaper-faster-covert/</guid>
    </item>
    <item>
      <title>UK Museums Face Cybersecurity Risks, MPs Warn</title>
      <link>https://www.infosecurity-magazine.com/news/mps-criticize-government-museum/</link>
      <description>Public Accounts Committee (PAC) warns that museums and galleries aren’t getting enough government support on cyber</description>
      <pubDate>Wed, 24 Jun 2026 08:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/mps-criticize-government-museum/</guid>
    </item>
    <item>
      <title>Lookalike npm Package Hides a Multi-Stage Windows RAT</title>
      <link>https://www.infosecurity-magazine.com/news/lookalike-npm-package-postcss/</link>
      <description>JFrog found an npm package impersonating postcss-selector-parser to drop a multi-stage Windows RAT</description>
      <pubDate>Tue, 23 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/lookalike-npm-package-postcss/</guid>
    </item>
    <item>
      <title>OpenAI Expands Daybreak to Help Defenders Patch Flaws</title>
      <link>https://www.infosecurity-magazine.com/news/openai-daybreak-gpt-5-5-cyber/</link>
      <description>OpenAI expanded Daybreak with a full GPT-5.5-Cyber release to help defenders patch software flaws</description>
      <pubDate>Tue, 23 Jun 2026 14:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/openai-daybreak-gpt-5-5-cyber/</guid>
    </item>
    <item>
      <title>GTA 6 Scams Emerge as Pre-Orders Open</title>
      <link>https://www.infosecurity-magazine.com/news/gta-6-scams-emerge-as-preorders/</link>
      <description>Cybercriminals launch fake GTA 6 pre-order sites offering early access for crypto payments</description>
      <pubDate>Tue, 23 Jun 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gta-6-scams-emerge-as-preorders/</guid>
    </item>
    <item>
      <title>Scattered Spider Teens Convicted of TfL Cyber-Attack</title>
      <link>https://www.infosecurity-magazine.com/news/scattered-spider-teens-convicted/</link>
      <description>Two young British men have pleaded guilty to hacking Transport for London as part of a Scattered Spider plot</description>
      <pubDate>Tue, 23 Jun 2026 09:29:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/scattered-spider-teens-convicted/</guid>
    </item>
    <item>
      <title>Five Eyes Group Issues Urgent Call to Tackle Frontier AI Threats</title>
      <link>https://www.infosecurity-magazine.com/news/five-eyes-issues-urgent-call/</link>
      <description>The Five Eyes Alliance has published a rare call to action for organizations facing AI threats</description>
      <pubDate>Tue, 23 Jun 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/five-eyes-issues-urgent-call/</guid>
    </item>
    <item>
      <title>GentleKiller Framework Disables Victims' Security Software</title>
      <link>https://www.infosecurity-magazine.com/news/gentlekiller-gentlemen-ransomware/</link>
      <description>ESET details GentleKiller, the EDR-killer framework the Gentlemen ransomware gang gives affiliates</description>
      <pubDate>Mon, 22 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gentlekiller-gentlemen-ransomware/</guid>
    </item>
    <item>
      <title>Microsoft Attributes Mastra AI Supply Chain Attack to North Korea</title>
      <link>https://www.infosecurity-magazine.com/news/mastra-ai-supply-chain-attack/</link>
      <description>North Korean threat actor Sapphire Sleet has been linked to a supply chain attack targeting Mastra, according to Microsoft security researchers</description>
      <pubDate>Mon, 22 Jun 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/mastra-ai-supply-chain-attack/</guid>
    </item>
    <item>
      <title>NCSC Urges Fortinet Customers to Tackle FortiBleed Fallout</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-fortinet-customers-tackle/</link>
      <description>The NCSC has released guidance for Fortinet customers impacted by the FortiBleed threat campaign</description>
      <pubDate>Mon, 22 Jun 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-fortinet-customers-tackle/</guid>
    </item>
    <item>
      <title>Operation Endgame Disrupts Malware Network Linked to Major Ransomware Gang</title>
      <link>https://www.infosecurity-magazine.com/news/operation-endgame-socgholish-evil/</link>
      <description>SocGholish malware has been removed from 15,000 sites associated with Evil Corp hackers</description>
      <pubDate>Fri, 19 Jun 2026 10:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/operation-endgame-socgholish-evil/</guid>
    </item>
    <item>
      <title>Confidence Lacks in Threat Detection Across Non-Email Channels like Slack and Teams </title>
      <link>https://www.infosecurity-magazine.com/news/threat-detection-across-nonemail/</link>
      <description>Half of cybersecurity leaders lack confidence in detecting threats on Slack, Teams and other non-email platforms, despite growing attacker focus</description>
      <pubDate>Fri, 19 Jun 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/threat-detection-across-nonemail/</guid>
    </item>
    <item>
      <title>The Human Cost of Ransomware: Why CISOs Must Think Beyond Technology</title>
      <link>https://www.infosecurity-magazine.com/opinions/human-cost-of-ransomware/</link>
      <description>Organizations must prepare their people for what happens if faced with a ransomware attack, not just their systems</description>
      <pubDate>Fri, 19 Jun 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/human-cost-of-ransomware/</guid>
    </item>
    <item>
      <title>Fake GitHub Stars and AI Videos Mask a Crypto Clipper</title>
      <link>https://www.infosecurity-magazine.com/news/crypto-clipboard-hijacker-fake/</link>
      <description>A Rust crypto clipper hides behind fake GitHub stars and AI-narrated YouTube videos</description>
      <pubDate>Thu, 18 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/crypto-clipboard-hijacker-fake/</guid>
    </item>
    <item>
      <title>ICO Cautions Healthcare Worker After Princess of Wales Incident </title>
      <link>https://www.infosecurity-magazine.com/news/ico-cautions-healthcare-worker/</link>
      <description>Hospital insider escapes criminal prosecution after attempting to sell royal’s medical records</description>
      <pubDate>Thu, 18 Jun 2026 14:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ico-cautions-healthcare-worker/</guid>
    </item>
    <item>
      <title>Cybercriminals Are Worried About AI Taking Their Jobs Too</title>
      <link>https://www.infosecurity-magazine.com/news/cybercriminals-worried-ai-take/</link>
      <description>Analysis of chatter on underground forums by Sophos finds that hackers fear AI could take work away from them</description>
      <pubDate>Thu, 18 Jun 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybercriminals-worried-ai-take/</guid>
    </item>
    <item>
      <title>LATAM Infrastructure Hit by Fortinet and Ivanti Exploits</title>
      <link>https://www.infosecurity-magazine.com/news/operation-escaneo-cloudsek-latam/</link>
      <description>CloudSEK maps Operation Escaneo, a campaign hitting Latin American infrastructure via perimeter bugs</description>
      <pubDate>Thu, 18 Jun 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/operation-escaneo-cloudsek-latam/</guid>
    </item>
    <item>
      <title>Hostile States Behind 75% of Cyber-Attacks on UK Critical Infrastructure, NCSC Warns</title>
      <link>https://www.infosecurity-magazine.com/news/hostile-states-cni-75-percent-ncsc/</link>
      <description>Richard Horne, the NCSC CEO, said three-quarters of cyber-attacks targeting UK critical infrastructure came from nation-state actors</description>
      <pubDate>Thu, 18 Jun 2026 09:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hostile-states-cni-75-percent-ncsc/</guid>
    </item>
    <item>
      <title>Cybercrime Surges in APAC as Digitalization Takes Hold</title>
      <link>https://www.infosecurity-magazine.com/news/cybercrime-surges-apac-digitization/</link>
      <description>Interpol claims cybercrime accounts for third of crime in over half of Asia and South Pacific countries</description>
      <pubDate>Thu, 18 Jun 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybercrime-surges-apac-digitization/</guid>
    </item>
    <item>
      <title>North Korean Hiring Fraud Runs on AI and US Laptop Farms</title>
      <link>https://www.infosecurity-magazine.com/news/north-korea-it-worker-fraud-ai/</link>
      <description>Nisos infiltrated a North Korean IT-worker fraud cell running on AI interviews and a US laptop farm</description>
      <pubDate>Wed, 17 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/north-korea-it-worker-fraud-ai/</guid>
    </item>
    <item>
      <title>Serverless Phishing Kit on GitHub Targets Mexican Banks</title>
      <link>https://www.infosecurity-magazine.com/news/gitbait-github-pages-sheetbest/</link>
      <description>GitBait phishing kit abuses GitHub Pages and the SheetBest API to steal Mexican banking credentials</description>
      <pubDate>Wed, 17 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gitbait-github-pages-sheetbest/</guid>
    </item>
    <item>
      <title>Fifteen JetBrains Marketplace Plugins Found Stealing API Keys</title>
      <link>https://www.infosecurity-magazine.com/news/fifteen-jetbrains-marketplace/</link>
      <description>Aikido Security has discovered at least 15 IDE plugins on the JetBrains Marketplace</description>
      <pubDate>Wed, 17 Jun 2026 09:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fifteen-jetbrains-marketplace/</guid>
    </item>
    <item>
      <title>Staffing Is Top SOC Challenge Even as AI Proliferates, Says SANS</title>
      <link>https://www.infosecurity-magazine.com/news/staffing-top-soc-challenge-ai/</link>
      <description>SANS Institute study finds few SOCs have built AI into defined workflows, despite widespread adoption</description>
      <pubDate>Wed, 17 Jun 2026 08:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/staffing-top-soc-challenge-ai/</guid>
    </item>
    <item>
      <title>SprySOCKS Backdoor Expands From Linux to Windows</title>
      <link>https://www.infosecurity-magazine.com/news/sprysocks-backdoor-windows/</link>
      <description>China-linked SprySOCKS backdoor gains stealthy Windows variants and 30-plus C2 commands</description>
      <pubDate>Tue, 16 Jun 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/sprysocks-backdoor-windows/</guid>
    </item>
    <item>
      <title>Rokarolla Trojan Combines Banking Fraud With Device Surveillance</title>
      <link>https://www.infosecurity-magazine.com/news/rokarolla-android-banking-trojan/</link>
      <description>Rokarolla Android trojan steals banking logins and spies on victims while blocking fraud alerts</description>
      <pubDate>Tue, 16 Jun 2026 13:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/rokarolla-android-banking-trojan/</guid>
    </item>
    <item>
      <title>DragonForce Ransomware Exploited Microsoft Teams to Hide in Attack Against Major Company</title>
      <link>https://www.infosecurity-magazine.com/news/dragonforce-ransomware-hidden/</link>
      <description>Command and control traffic exploited a Teams visitor token to make malicious activity look legitimate to defenders</description>
      <pubDate>Tue, 16 Jun 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/dragonforce-ransomware-hidden/</guid>
    </item>
    <item>
      <title>FBI Warns Courier Cash Pickups Are Driving Crypto Scams</title>
      <link>https://www.infosecurity-magazine.com/news/fbi-warns-courier-cash-pickups/</link>
      <description>The FBI claims couriers are being used to circumvent bank transfers in crypto investment schemes</description>
      <pubDate>Tue, 16 Jun 2026 08:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fbi-warns-courier-cash-pickups/</guid>
    </item>
    <item>
      <title>Attackers Hijack Popular WordPress Plugins to Deploy Backdoors</title>
      <link>https://www.infosecurity-magazine.com/news/wordpress-plugin-supply-chain/</link>
      <description>Tampered OptinMonster and sister plugins plant hidden backdoors on 1.2 million WordPress sites</description>
      <pubDate>Mon, 15 Jun 2026 17:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/wordpress-plugin-supply-chain/</guid>
    </item>
    <item>
      <title>Adriatic Port Cyber-Attack by Anubis Sparks Warning Over Maritime Security Risks</title>
      <link>https://www.infosecurity-magazine.com/news/anubis-ransomware-adriatic-port/</link>
      <description>How the Anubis ransomware group stole and leaked an Italian Adriatic port authority's data</description>
      <pubDate>Mon, 15 Jun 2026 16:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/anubis-ransomware-adriatic-port/</guid>
    </item>
    <item>
      <title>Maine Takes Breach Reporting Portal Offline After Fake Entries</title>
      <link>https://www.infosecurity-magazine.com/news/maine-breach-reporting-portal/</link>
      <description>The Office of the Maine Attorney General has suspended its breach reporting portal</description>
      <pubDate>Mon, 15 Jun 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/maine-breach-reporting-portal/</guid>
    </item>
    <item>
      <title>Ransomware Payment Crypto Laundering Platform Taken Out by FBI and Europol</title>
      <link>https://www.infosecurity-magazine.com/news/ransomware-crypto-laundering/</link>
      <description>Domain of dark web money laundering platform AudiA6 seized and suspects arrested in joint operation by the FBI, Europol and others</description>
      <pubDate>Fri, 12 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ransomware-crypto-laundering/</guid>
    </item>
    <item>
      <title>Over 80% of Sports Organizations Targeted by Hackers in the Last Year </title>
      <link>https://www.infosecurity-magazine.com/news/sports-organizations-targeted-by/</link>
      <description>As the FIFA World Cup 2026 kicks off, a new Darktrace report warns that sports teams and bodies are a major target for cyber criminals</description>
      <pubDate>Fri, 12 Jun 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/sports-organizations-targeted-by/</guid>
    </item>
    <item>
      <title>What The FIFA World Cup 2026  Means For Fraud</title>
      <link>https://www.infosecurity-magazine.com/opinions/what-the-fifa-world-cup-2026-means/</link>
      <description>The 2026 FIFA World Cup in North America will be the biggest yet, with more host countries, participants and matches than ever before. Thomas Peacock, director of global fraud intelligence at BioCatch, analyses banking data from previous football tournaments to examine how major sporting events reshape digital activity and fraud risk.</description>
      <pubDate>Fri, 12 Jun 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/what-the-fifa-world-cup-2026-means/</guid>
    </item>
    <item>
      <title>CISA Orders Agencies to Patch by Risk, Not Severity</title>
      <link>https://www.infosecurity-magazine.com/news/cisa-orders-agencies-to-patch-by/</link>
      <description>New CISA directive tells federal agencies to patch by real-world risk, not CVSS severity scores</description>
      <pubDate>Thu, 11 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisa-orders-agencies-to-patch-by/</guid>
    </item>
    <item>
      <title>Cybercriminals Use Fake AI Guides and Dev Tools to Spread AsyncRAT Malware</title>
      <link>https://www.infosecurity-magazine.com/news/fake-ai-guides-dev-tools-spread/</link>
      <description>Fake AI guides hide a multi-stage chain that drops AsyncRAT, with signs of AI-assisted coding</description>
      <pubDate>Thu, 11 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fake-ai-guides-dev-tools-spread/</guid>
    </item>
    <item>
      <title>Interpol Dismantles SniperDz Phishing-as-a-Service Platform</title>
      <link>https://www.infosecurity-magazine.com/news/interpol-dismantles-sniperdz/</link>
      <description>New revelations by Group-IB expose the full scale of the decade-old SniperDz phishing operation</description>
      <pubDate>Thu, 11 Jun 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/interpol-dismantles-sniperdz/</guid>
    </item>
    <item>
      <title>Extortion-Only Attacks Increase, With Data Theft Dominating Ransomware Claims</title>
      <link>https://www.infosecurity-magazine.com/news/extortion-only-attacks-surge/</link>
      <description>Extortion-only attacks are increasing as data theft drives most ransomware claims, with many organizations unable to stop stolen data from being exposed</description>
      <pubDate>Thu, 11 Jun 2026 10:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/extortion-only-attacks-surge/</guid>
    </item>
    <item>
      <title>Fake Software Tutorials on TikTok Spread Vidar Stealer</title>
      <link>https://www.infosecurity-magazine.com/news/fake-software-videos-tiktok-vidar/</link>
      <description>Threat actors push fake free-software tutorials on TikTok and Instagram to spread Vidar stealer</description>
      <pubDate>Wed, 10 Jun 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fake-software-videos-tiktok-vidar/</guid>
    </item>
    <item>
      <title>New SilabRAT Trojan Hijacks Sessions to Steal Crypto</title>
      <link>https://www.infosecurity-magazine.com/news/silabrat-trojan-session-hijacking/</link>
      <description>MaaS trojan SilabRAT uses HVNC and browser cloning to hijack sessions and steal crypto</description>
      <pubDate>Wed, 10 Jun 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/silabrat-trojan-session-hijacking/</guid>
    </item>
    <item>
      <title>Over a Quarter of Identity Crime Victims Hit by Multiple Incidents, ITRC Data Shows</title>
      <link>https://www.infosecurity-magazine.com/news/quarter-identity-crime-victims/</link>
      <description>Nearly 26% of identity crime victims faced multiple incidents in the past year, as ITRC warns of a growing "multi-layered crisis"</description>
      <pubDate>Wed, 10 Jun 2026 10:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/quarter-identity-crime-victims/</guid>
    </item>
    <item>
      <title>Check Point Warns Critical Auth Bypass Bug Exploited in the Wild</title>
      <link>https://www.infosecurity-magazine.com/news/check-point-critical-auth-bypass/</link>
      <description>Check Point says a critical vulnerability in its Remote Access VPN and Mobile Access solutions has been exploited by Qilin</description>
      <pubDate>Tue, 09 Jun 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/check-point-critical-auth-bypass/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Why JLR’s CISO Enforced In-Person Password Resets Following Cyber-Attack</title>
      <link>https://www.infosecurity-magazine.com/news/jlr-cyberattack-ciso-inperson/</link>
      <description>Speaking at Infosecurity Europe, Ashish Shrestha, former CISO at Jaguar Land Rover revealed why he wanted over 30,000 employees to change their passwords in the immediate aftermath of the incident </description>
      <pubDate>Tue, 09 Jun 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/jlr-cyberattack-ciso-inperson/</guid>
    </item>
    <item>
      <title>WhatsApp Discovers NSO Group-Linked Spearphishing Attempts</title>
      <link>https://www.infosecurity-magazine.com/news/whatsapp-nso-group-spearphishing/</link>
      <description>Meta’s WhatsApp demands contempt ruling after users report NSO Group-linked phishing</description>
      <pubDate>Tue, 09 Jun 2026 08:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/whatsapp-nso-group-spearphishing/</guid>
    </item>
    <item>
      <title>North Korean Hackers Use Fake Coding Tasks to Steal Crypto</title>
      <link>https://www.infosecurity-magazine.com/news/north-korean-hackers-developers/</link>
      <description>North Korean actor UNK_DeadDrop targeted developers with fake coding tasks to steal crypto</description>
      <pubDate>Mon, 08 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/north-korean-hackers-developers/</guid>
    </item>
    <item>
      <title>Meta AI Bug Exposes Over 20,000 Instagram Accounts</title>
      <link>https://www.infosecurity-magazine.com/news/over-20000-instagram-accounts/</link>
      <description>Meta confirms an AI tool vulnerability led to unauthorized access to Instagram accounts after a failure in email verification during password reset</description>
      <pubDate>Mon, 08 Jun 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/over-20000-instagram-accounts/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: AI Coding Tools Need Built-In Security for Agentic Development Era</title>
      <link>https://www.infosecurity-magazine.com/news/ai-coding-tools-security-agentic/</link>
      <description>Ox Security field CTO, Boaz Barzel, makes the case for vibe security to tackle AI agent coding risks</description>
      <pubDate>Fri, 05 Jun 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-coding-tools-security-agentic/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Reactive Security Is Failing Healthcare Organizations, Experts Warn</title>
      <link>https://www.infosecurity-magazine.com/news/reactive-security-failing/</link>
      <description>A perfect storm of legacy devices, hyper connectivity and human fatigue is bad news for the healthcare sector, warns Cyber Salus</description>
      <pubDate>Fri, 05 Jun 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/reactive-security-failing/</guid>
    </item>
    <item>
      <title>Everest Forms Pro Vulnerability Allows Remote Code Execution on WordPress Sites</title>
      <link>https://www.infosecurity-magazine.com/news/everest-forms-pro-rce-actively/</link>
      <description>Critical Everest Forms Pro RCE flaw exploited to create rogue WordPress admin accounts</description>
      <pubDate>Thu, 04 Jun 2026 16:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/everest-forms-pro-rce-actively/</guid>
    </item>
    <item>
      <title>Chinese-Speaking Actor TA4922 Widens Its Global Reach</title>
      <link>https://www.infosecurity-magazine.com/news/ta4922-global-expansion/</link>
      <description>Newly named Chinese-speaking actor TA4922 expands from East Asia into Europe and Africa</description>
      <pubDate>Thu, 04 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ta4922-global-expansion/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: AI Adoption Creates New Opportunities for Attackers to Distribute Malware, Microsoft Warns </title>
      <link>https://www.infosecurity-magazine.com/news/attackers-ai-adoption-malware/</link>
      <description>Microsoft Detection and Response Team (DART) details how it has uncovered malicious AI applications as cyber criminals manipulate organizations adopting AI tools</description>
      <pubDate>Thu, 04 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/attackers-ai-adoption-malware/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: How Proton Fights Against Cybercriminals Using Its Services</title>
      <link>https://www.infosecurity-magazine.com/news/how-proton-fights-against/</link>
      <description>Proton uses machine learning models to detect abuse of its services – especially email addresses used by cybercriminals</description>
      <pubDate>Thu, 04 Jun 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/how-proton-fights-against/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: How Businesses Can Prepare for a Cybersecurity Crisis with Effective Plans</title>
      <link>https://www.infosecurity-magazine.com/news/infosecurity-europe-cybersecurity/</link>
      <description>Cybersecurity and business leaders with experience of dealing with major incidents from within the NCSC and at JLR detail what you need to prioritize if your organization is hit by a cyber-attack</description>
      <pubDate>Thu, 04 Jun 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/infosecurity-europe-cybersecurity/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Ukraine’s Experience Highlights the Need for Preparation and Resilience in Cybersecurity</title>
      <link>https://www.infosecurity-magazine.com/news/resilience-perseverance-ukraine/</link>
      <description>Former Ukrainian foreign minister, Dmytro Kuleba, urges Infosecurity Europe attendees to fight the good fight</description>
      <pubDate>Thu, 04 Jun 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/resilience-perseverance-ukraine/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Execs Must Treat Cyber Threats as Statecraft, ISACA Expert Say</title>
      <link>https://www.infosecurity-magazine.com/news/execs-cisos-must-treat-cyber/</link>
      <description>Private firms are being targeted by nation-state groups for reasons beyond finance, argued ISACA’s Bharat Thakrar</description>
      <pubDate>Wed, 03 Jun 2026 08:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/execs-cisos-must-treat-cyber/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: AI-Powered Cybercrime Tools Surge on Dark Web</title>
      <link>https://www.infosecurity-magazine.com/news/cybercrime-ai-tools-surge-3800/</link>
      <description>Halcyon’s Cynthia Kaiser lifts the lid on the dark web market for AI cybercrime tools</description>
      <pubDate>Wed, 03 Jun 2026 07:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybercrime-ai-tools-surge-3800/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: NCSC Urges Immediate Action to Boost Resilience as Uncertainty Persists</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-resilience-certainty-is-never/</link>
      <description>NCSC director of operations, Paul Chichester, says it’s time to future-proof cybersecurity today</description>
      <pubDate>Tue, 02 Jun 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-resilience-certainty-is-never/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Cybersecurity Teams Which Don’t Leverage AI are "Doomed to Fail"</title>
      <link>https://www.infosecurity-magazine.com/news/cybersecurity-teams-doomed-to-fail/</link>
      <description>Humans still need to be part of cyber defense, but refusing to deploy AI is no longer optional against AI-enhanced cyber threats, warns Dataminr’s Joe Slowik</description>
      <pubDate>Tue, 02 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybersecurity-teams-doomed-to-fail/</guid>
    </item>
    <item>
      <title>Threat Actor Uses AI to Build EDR Evasion Tools</title>
      <link>https://www.infosecurity-magazine.com/news/ai-edr-evasion-tooling/</link>
      <description>A threat actor used AI coding tools to build and test EDR evasion malware, Sophos finds</description>
      <pubDate>Tue, 02 Jun 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-edr-evasion-tooling/</guid>
    </item>
    <item>
      <title>Attackers Hijack Red Hat npm Scope to Steal Cloud Secrets</title>
      <link>https://www.infosecurity-magazine.com/news/red-hat-npm-scope-backdoored/</link>
      <description>Attackers backdoored 32 packages in Red Hat's official npm scope to steal cloud and CI secrets</description>
      <pubDate>Tue, 02 Jun 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/red-hat-npm-scope-backdoored/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Tabletop Exercise to Test How CISOs Respond to Major Supermarket Cyber-Attack </title>
      <link>https://www.infosecurity-magazine.com/news/infosecurity-europe-semperis/</link>
      <description>Semperis is set to bring ‘Enter the War Room: A Tabletop Experience’ to Infosecurity Europe to help cybersecurity leaders prepare to face real incidents</description>
      <pubDate>Mon, 01 Jun 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/infosecurity-europe-semperis/</guid>
    </item>
    <item>
      <title>FSB Group Gamaredon Hides Worm in Windows Data Streams</title>
      <link>https://www.infosecurity-magazine.com/news/gamaredon-worm-ntfs-data-streams/</link>
      <description>FSB-linked Gamaredon concealed a fileless worm in NTFS data streams to spy on Ukraine targets</description>
      <pubDate>Mon, 01 Jun 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gamaredon-worm-ntfs-data-streams/</guid>
    </item>
    <item>
      <title>Attackers Abuse Shared Content for ChatGPT Phishing Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/attackers-shared-content-chatgpt/</link>
      <description>Push Security says threat actors are delivering malware hosted on chatgpt.com/s/ domain </description>
      <pubDate>Mon, 01 Jun 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/attackers-shared-content-chatgpt/</guid>
    </item>
    <item>
      <title>Palo Alto Warns High-Severity Bug Is Being Actively Exploited</title>
      <link>https://www.infosecurity-magazine.com/news/palo-alto-highseverity-bug/</link>
      <description>A vulnerability in Palo Alto Networks’ PAN-OS software is being exploited in attacks</description>
      <pubDate>Mon, 01 Jun 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/palo-alto-highseverity-bug/</guid>
    </item>
    <item>
      <title>Silent Ransom Group Uses In-Person IT Impersonation to Breach Systems</title>
      <link>https://www.infosecurity-magazine.com/news/silent-ransom-group-it/</link>
      <description>Threat actors from the Silent Ransom Group, aka Luna Moth, are escalating attacks by impersonating IT staff in phone calls and even showing up in person to gain direct access to victim systems</description>
      <pubDate>Fri, 29 May 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/silent-ransom-group-it/</guid>
    </item>
    <item>
      <title>Chinese Hackers Exploit Iran War to Target Maritime and Energy Companies</title>
      <link>https://www.infosecurity-magazine.com/news/chinese-hackers-exploit-iran-war/</link>
      <description>ESET’s 2026 APT Activity Report suggests China-backed APTs are using instability in the region to target victims, as well as continuing activity against organizations around the globe</description>
      <pubDate>Fri, 29 May 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chinese-hackers-exploit-iran-war/</guid>
    </item>
    <item>
      <title>AI-Generated npm Malware Leaks Its Own GitHub Token</title>
      <link>https://www.infosecurity-magazine.com/news/ai-npm-malware-leaks-github-token/</link>
      <description>Sloppy AI-generated npm infostealer leaked its own GitHub token, exposing the operator</description>
      <pubDate>Fri, 29 May 2026 08:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-npm-malware-leaks-github-token/</guid>
    </item>
    <item>
      <title>Attackers Move Past Typosquatting to Realistic Package Impersonation</title>
      <link>https://www.infosecurity-magazine.com/news/attackers-beyond-typosquatting/</link>
      <description>Most malicious open source packages now mimic real code rather than rely on typosquatting</description>
      <pubDate>Thu, 28 May 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/attackers-beyond-typosquatting/</guid>
    </item>
    <item>
      <title>New Threat Actor Jinx-0164 Targets Crypto Developers on macOS</title>
      <link>https://www.infosecurity-magazine.com/news/jinx-0164-crypto-developers-macos/</link>
      <description>New actor Jinx-0164 hit crypto developers with fake recruiter lures and macOS malware</description>
      <pubDate>Thu, 28 May 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/jinx-0164-crypto-developers-macos/</guid>
    </item>
    <item>
      <title>GCHQ Chief Urges Action as AI Reshapes Cyber Threats</title>
      <link>https://www.infosecurity-magazine.com/news/gchq-keast-butler-cyber-action-ai/</link>
      <description>GCHQ director urges urgent business cyber action as AI and quantum reshape the threat</description>
      <pubDate>Thu, 28 May 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gchq-keast-butler-cyber-action-ai/</guid>
    </item>
    <item>
      <title>CrowdStrike, Google Take Down Glassworm Botnet</title>
      <link>https://www.infosecurity-magazine.com/news/crowdstrike-google-takedown/</link>
      <description>Operators of the malicious Glassworm botnet have been targeting software developers since at least early 2025</description>
      <pubDate>Wed, 27 May 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/crowdstrike-google-takedown/</guid>
    </item>
    <item>
      <title>Thousands of Fake FIFA Domains Target World Cup Fans</title>
      <link>https://www.infosecurity-magazine.com/news/ghost-stadium-fifa-world-cup-fraud/</link>
      <description>Group-IB uncovered Ghost Stadium phishing and 4300 fake FIFA World Cup domains targeting fans</description>
      <pubDate>Wed, 27 May 2026 11:28:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ghost-stadium-fifa-world-cup-fraud/</guid>
    </item>
    <item>
      <title>Why the Surge in DDoS Attacks Should Worry Security Leaders</title>
      <link>https://www.infosecurity-magazine.com/opinions/surge-ddos-attacks-cloudflare/</link>
      <description>As botnets grow larger and attackers become more opportunistic, organizations can no longer treat DDoS resilience as a secondary concern</description>
      <pubDate>Wed, 27 May 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/surge-ddos-attacks-cloudflare/</guid>
    </item>
    <item>
      <title>PureLogs Variant Steals Data via Purchase Order Lures</title>
      <link>https://www.infosecurity-magazine.com/news/purelogs-phishing-purchase-order/</link>
      <description>FortiGuard Labs detailed a PureLogs campaign using JavaScript, PowerShell and process hollowing</description>
      <pubDate>Wed, 27 May 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/purelogs-phishing-purchase-order/</guid>
    </item>
    <item>
      <title>Chinese Threat Actors Ditch Static Phishing Pages for Live Credential Interception</title>
      <link>https://www.infosecurity-magazine.com/news/chinese-phishing-live-credential/</link>
      <description>Almost all organizations impersonated by Chinese phishing platforms are non-Chinese entities, suggesting operators deliberately avoid domestic targets </description>
      <pubDate>Tue, 26 May 2026 14:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chinese-phishing-live-credential/</guid>
    </item>
    <item>
      <title>BTMOB Android RAT Spreads Through No-Code Builder Tooling</title>
      <link>https://www.infosecurity-magazine.com/news/btmob-android-rat-maas-builder/</link>
      <description>BTMOB Android RAT sold as a service with a no-code builder for fast, regional phishing lures</description>
      <pubDate>Tue, 26 May 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/btmob-android-rat-maas-builder/</guid>
    </item>
    <item>
      <title>Iran-Linked Hackers Target US Aviation with Phishing and SEO Poisoning Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/iranian-hackers-us-aviation/</link>
      <description>Iran's Nimbus Manticore pushes AI-built MiniFast backdoor via phishing and SEO poisoning</description>
      <pubDate>Tue, 26 May 2026 09:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/iranian-hackers-us-aviation/</guid>
    </item>
    <item>
      <title>FBI Warns 'Kali365' Phishing Kit Hijacks Microsoft 365 OAuth Tokens</title>
      <link>https://www.infosecurity-magazine.com/news/fbi-kali365-phishing-kit-m365/</link>
      <description>The Kali365 phishing-as-a-service platform lowers the barrier of entry for cybercriminals, said the FBI</description>
      <pubDate>Mon, 25 May 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fbi-kali365-phishing-kit-m365/</guid>
    </item>
    <item>
      <title>Fake Streams, Counterfeit Merch and Other Scams: How Fraudsters Target F1 Fans</title>
      <link>https://www.infosecurity-magazine.com/news/how-fraudsters-target-f1-fans/</link>
      <description>From fake F1 streams to counterfeit merch, fraudsters are exploiting fans online and the Bitdefender Cybersecurity Grand Prix Fan Threat Index details how</description>
      <pubDate>Mon, 25 May 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/how-fraudsters-target-f1-fans/</guid>
    </item>
    <item>
      <title>Fake Gemini and Claude Code Sites Spread Infostealers Through SEO Poisoning</title>
      <link>https://www.infosecurity-magazine.com/news/gemini-claude-infostealers-seo/</link>
      <description>The infostealer payload in this campaign collect a vast amount of data, from collaboration authentication keys to cryptocurrency wallets</description>
      <pubDate>Fri, 22 May 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gemini-claude-infostealers-seo/</guid>
    </item>
    <item>
      <title>Apple Blocked $2.2bn in App Store Fraud in the Last Year</title>
      <link>https://www.infosecurity-magazine.com/news/apple-blocked-2bn-app-store-fraud/</link>
      <description>Total figure for fraudulent transactions Apple has blocked since 2020 now stands at over $11bn</description>
      <pubDate>Fri, 22 May 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/apple-blocked-2bn-app-store-fraud/</guid>
    </item>
    <item>
      <title>Cybercriminal VPN Dismantled in Europol Crackdown</title>
      <link>https://www.infosecurity-magazine.com/news/first-vpn-takedown-europol/</link>
      <description>First VPN, a service used by ransomware actors and fraudsters, was dismantled by Europol</description>
      <pubDate>Thu, 21 May 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/first-vpn-takedown-europol/</guid>
    </item>
    <item>
      <title>GitHub Breach Traced to Malicious 'Nx Console' VS Code Extension</title>
      <link>https://www.infosecurity-magazine.com/news/github-breach-nx-console-vs-code/</link>
      <description>A threat actor compromised an Nx developer and posed as a legitimate maintainer to publish a malicious extension on Visual Studio Marketplace</description>
      <pubDate>Thu, 21 May 2026 14:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/github-breach-nx-console-vs-code/</guid>
    </item>
    <item>
      <title>Grafana Labs Says Code Breach Stemmed from TanStack Attack</title>
      <link>https://www.infosecurity-magazine.com/news/grafana-labs-code-breach-tanstack/</link>
      <description>Grafana Labs has confirmed a recent data breach was caused by the TanStack supply chain attack</description>
      <pubDate>Thu, 21 May 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/grafana-labs-code-breach-tanstack/</guid>
    </item>
    <item>
      <title>Android Malware Campaign Used Hundreds of Fake Apps to Silently Charge Users</title>
      <link>https://www.infosecurity-magazine.com/news/android-carrier-billing-fraud-four/</link>
      <description>Premium Deception campaign uses 250 Android apps to silently sign victims up to paid services</description>
      <pubDate>Wed, 20 May 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/android-carrier-billing-fraud-four/</guid>
    </item>
    <item>
      <title>Mini Shai-Hulud Hits Hundreds of npm Packages in AntV Ecosystem</title>
      <link>https://www.infosecurity-magazine.com/news/antv-npm-mini-shai-hulud-largest/</link>
      <description>Mini Shai-Hulud worm hits Alibaba AntV ecosystem in largest npm supply chain wave to date</description>
      <pubDate>Wed, 20 May 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/antv-npm-mini-shai-hulud-largest/</guid>
    </item>
    <item>
      <title>China-Linked Webworm APT Evolves Tactics, Expands to European Targets </title>
      <link>https://www.infosecurity-magazine.com/news/webworm-apt-evolves-tactics/</link>
      <description>China-linked Webworm APT expands beyond Asia, targeting European government organizations and refining its cyber espionage tactics, according to ESET research</description>
      <pubDate>Wed, 20 May 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/webworm-apt-evolves-tactics/</guid>
    </item>
    <item>
      <title>GitHub Confirms Breach of Internal Repositories Via Malicious VS Code Extension</title>
      <link>https://www.infosecurity-magazine.com/news/github-confirms-breach-vs-code/</link>
      <description>The prolific threat group TeamPCP has claimed a hack into GitHub’s internal repositories</description>
      <pubDate>Wed, 20 May 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/github-confirms-breach-vs-code/</guid>
    </item>
    <item>
      <title>Researchers Warn CypherLoc Scareware Has Targeted Millions of Users </title>
      <link>https://www.infosecurity-magazine.com/news/researchers-cypherloc-scareware/</link>
      <description>Barracuda reveals new CypherLoc scareware has featured in nearly three million attacks</description>
      <pubDate>Wed, 20 May 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/researchers-cypherloc-scareware/</guid>
    </item>
    <item>
      <title>Verizon DBIR: Vulnerability Exploits Overtake Credentials as Top Access Vector</title>
      <link>https://www.infosecurity-magazine.com/news/verizon-dbir-exploits-top-access/</link>
      <description>Verizon DBIR finds 31% of data breaches began with software flaws last year</description>
      <pubDate>Wed, 20 May 2026 08:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/verizon-dbir-exploits-top-access/</guid>
    </item>
    <item>
      <title>Microsoft Takes Down Fox Tempest for Providing Ransomware-Enabling Signing Tool</title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-takes-down-fox-tempest/</link>
      <description>Microsoft’s Digital Crimes Unit has taken down the infrastructure of Fox Tempest, a prolific cybercrime-enabling threat group</description>
      <pubDate>Tue, 19 May 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-takes-down-fox-tempest/</guid>
    </item>
    <item>
      <title>Grafana Labs Confirms Hackers Stole Source Code</title>
      <link>https://www.infosecurity-magazine.com/news/grafana-labs-confirms-hackers/</link>
      <description>Open source tool maker Grafana says hackers stole codebase via GitHub breach</description>
      <pubDate>Tue, 19 May 2026 09:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/grafana-labs-confirms-hackers/</guid>
    </item>
    <item>
      <title>Hackers Bypass Security Tools to Target Users Directly</title>
      <link>https://www.infosecurity-magazine.com/news/hackers-bypass-security-tools/</link>
      <description>Bridewell report calls out emergence of “fix-style” attacks</description>
      <pubDate>Tue, 19 May 2026 08:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hackers-bypass-security-tools/</guid>
    </item>
    <item>
      <title>Interpol Launches Sweeping Cybercrime Crackdown in MENA Region</title>
      <link>https://www.infosecurity-magazine.com/news/interpol-cybercrime-crackdown-mena/</link>
      <description>Over 200 people were arrested in an anti-cybercrime operation that spanned 13 countries across the Middle East and North Africa</description>
      <pubDate>Mon, 18 May 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/interpol-cybercrime-crackdown-mena/</guid>
    </item>
    <item>
      <title>Security Researchers Find 47 Zero-Days at Pwn2Own Berlin</title>
      <link>https://www.infosecurity-magazine.com/news/security-researchers-47-zerodays/</link>
      <description>The research community was awarded $1.3m as it found dozens of novel vulnerabilities at Pwn2Own Berlin</description>
      <pubDate>Mon, 18 May 2026 09:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/security-researchers-47-zerodays/</guid>
    </item>
    <item>
      <title>Bank of England, FCA and Treasury Raise Alarm Over Frontier AI</title>
      <link>https://www.infosecurity-magazine.com/news/bank-england-fca-treasury-alarm/</link>
      <description>The UK’s financial authorities have set expectations for the sector on cybersecurity and operational resilience</description>
      <pubDate>Mon, 18 May 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/bank-england-fca-treasury-alarm/</guid>
    </item>
    <item>
      <title>Gremlin Stealer Evolves into Modular Threat with Advanced Evasion Capabilities </title>
      <link>https://www.infosecurity-magazine.com/news/gremlin-stealer-evolves-into/</link>
      <description>A new Gremlin stealer variant has evolved into a modular toolkit with advanced evasion and data theft capabilities, according to new Unit 42 research </description>
      <pubDate>Fri, 15 May 2026 14:19:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gremlin-stealer-evolves-into/</guid>
    </item>
    <item>
      <title>China-Linked Hackers Deploy New TencShell Malware Against Global Manufacturer</title>
      <link>https://www.infosecurity-magazine.com/news/china-hackers-tencshell-malware/</link>
      <description>A suspected China-linked threat actor targeted the Indian branch of a global manufacturer leveraging an open source offensive toolkit</description>
      <pubDate>Fri, 15 May 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/china-hackers-tencshell-malware/</guid>
    </item>
    <item>
      <title>Mustang Panda Linked to Updated FDMTP Backdoor in Asia-Pacific Espionage Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/mustang-panda-fdmtp-backdoor-apj/</link>
      <description>Mustang Panda campaign deploys updated FDMTP backdoor against Asia-Pacific and Japan networks</description>
      <pubDate>Thu, 14 May 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/mustang-panda-fdmtp-backdoor-apj/</guid>
    </item>
    <item>
      <title>New Fragnesia Flaw Hands Linux Local Users Root Access</title>
      <link>https://www.infosecurity-magazine.com/news/fragnesia-linux-kernel-lpe-root/</link>
      <description>New Fragnesia kernel flaw lets unprivileged local users escalate to root on Linux systems</description>
      <pubDate>Thu, 14 May 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fragnesia-linux-kernel-lpe-root/</guid>
    </item>
    <item>
      <title>Most Organizations Now Use AI Agents for Sensitive Security Tasks</title>
      <link>https://www.infosecurity-magazine.com/news/most-organizations-ai-agents/</link>
      <description>Semperis study finds 74% of organizations believe AI will increase attacks on identity infrastructure</description>
      <pubDate>Thu, 14 May 2026 09:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/most-organizations-ai-agents/</guid>
    </item>
    <item>
      <title>ICO Publishes Five-Step Plan to Counter Emerging AI-Powered Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/ico-steps-in-advice-handling-ai/</link>
      <description>The Information Commissioner’s Office has released new guidance on how to mitigate the risk of AI-powered attacks</description>
      <pubDate>Thu, 14 May 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ico-steps-in-advice-handling-ai/</guid>
    </item>
    <item>
      <title>Canvas Owner Reaches Agreement With Cybercriminals After Ransomware Attack</title>
      <link>https://www.infosecurity-magazine.com/news/canvas-cybercriminals-agreement/</link>
      <description>Instructure says it reached an agreement with ShinyHunters over the Canvas breach data</description>
      <pubDate>Wed, 13 May 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/canvas-cybercriminals-agreement/</guid>
    </item>
    <item>
      <title>The First 24 Hours: What I Learned Responding to a Real-World Ransomware Attack</title>
      <link>https://www.infosecurity-magazine.com/opinions/the-first-24-hours-responding-to/</link>
      <description>CISO Zach Lewis details what happened when ransomware hit his organization - and how they responded the attack</description>
      <pubDate>Wed, 13 May 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/the-first-24-hours-responding-to/</guid>
    </item>
    <item>
      <title>Ransomware: Over Half of CISOs Would Consider Paying Ransom to Hackers</title>
      <link>https://www.infosecurity-magazine.com/news/ransomware-over-half-cisos-would/</link>
      <description>Survey of cybersecurity leaders suggests that majority would strongly consider paying cybercriminals, if that’s what it took to help restore encrypted systems</description>
      <pubDate>Wed, 13 May 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ransomware-over-half-cisos-would/</guid>
    </item>
    <item>
      <title>UK Cybersecurity Market Expands to £14.7bn with Strong Growth in AI Security Firms</title>
      <link>https://www.infosecurity-magazine.com/news/uks-cyber-sector-grows-revenue-11/</link>
      <description>UK cybersecurity sector reaches £14.7bn in revenue, driven by rapid growth in AI security firms, increased investment and rising employment across the industry</description>
      <pubDate>Wed, 13 May 2026 09:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uks-cyber-sector-grows-revenue-11/</guid>
    </item>
    <item>
      <title>Mini Shai-Hulud Hits TanStack npm Packages</title>
      <link>https://www.infosecurity-magazine.com/news/mini-shai-hulud-tanstack-npm/</link>
      <description>Mini Shai-Hulud compromises TanStack npm packages and spreads across PyPI</description>
      <pubDate>Tue, 12 May 2026 14:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/mini-shai-hulud-tanstack-npm/</guid>
    </item>
    <item>
      <title>Attackers Combine ClickFix With PySoxy Proxying to Maintain Persistence </title>
      <link>https://www.infosecurity-magazine.com/news/clickfix-combined-pysoxy-proxying/</link>
      <description>Exploitation of open-source tools allows attackers to maintain persistent access after initial social engineering, warn ReliaQuest researchers</description>
      <pubDate>Tue, 12 May 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/clickfix-combined-pysoxy-proxying/</guid>
    </item>
    <item>
      <title>Malicious Hugging Face Repository Typosquats OpenAI</title>
      <link>https://www.infosecurity-magazine.com/news/malicious-hugging-face-repo/</link>
      <description>HiddenLayer reveals infostealer malware in a Hugging Face repository</description>
      <pubDate>Tue, 12 May 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/malicious-hugging-face-repo/</guid>
    </item>
  </channel>
</rss>