https://www.infosecurity-magazine.com/human-factor/ Copyright © 2026 Reed Exhibitions Ltd. All Rights Reserved. https://www.infosecurity-magazine.com/news/zerotokens-phishing-real-time/ ZeroTokens gives phishing operators live control of victim sessions targeting 53 financial brands Tue, 25 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/zerotokens-phishing-real-time/ https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/ RecruitTrap campaigns use mobile-optimized phishing pages to target enterprise credentials Tue, 25 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/ https://www.infosecurity-magazine.com/news/reliaquest-not-compromised-by/ ReliaQuest has detailed a social engineering attack linked to ShinyHunters, denying reports that the threat actor successfully compromised its systems Tue, 25 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/reliaquest-not-compromised-by/ https://www.infosecurity-magazine.com/blogs/traditional-security-training/ Employees are adopting AI faster than organizations can govern it. Discover insights from Lenovo’s latest research and learn how to modernize security training for the AI era Tue, 25 Aug 2026 08:40:00 GMT https://www.infosecurity-magazine.com/blogs/traditional-security-training/ https://www.infosecurity-magazine.com/news/fake-codex-download-google-sites/ Fake Codex pages used Google Sites, sponsored search and ClickFix to target Mac users Mon, 24 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/fake-codex-download-google-sites/ https://www.infosecurity-magazine.com/news/researchers-thousands-eaked-aws/ Truffle Security says it found over 9000 publicly accessible and active AWS key pairs Mon, 24 Aug 2026 08:05:00 GMT https://www.infosecurity-magazine.com/news/researchers-thousands-eaked-aws/ https://www.infosecurity-magazine.com/news/cybersecurity-job-ads-ai-skills/ An analysis by the AI Workforce Consortium found that technical cybersecurity jobs are becoming more strategic due to the influence of AI Fri, 21 Aug 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-job-ads-ai-skills/ https://www.infosecurity-magazine.com/news/ncsc-stronger-controls-agentic-ai/ NCSC urged sandboxing, oversight and tight access controls for autonomous AI agents Thu, 20 Aug 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/ncsc-stronger-controls-agentic-ai/ https://www.infosecurity-magazine.com/news/updated-toxicpanda-140-banking/ Zimperium lifts the lid on the ToxicPanda 2.0 Android banking Trojan Thu, 20 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/updated-toxicpanda-140-banking/ https://www.infosecurity-magazine.com/news/def-con-attendees-persistent/ Huntress researcher explains how they were targeted by an elaborate and persistent phishing scam following Def Con Thu, 20 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/def-con-attendees-persistent/ https://www.infosecurity-magazine.com/news/maas-clickfix-errtraffic-cruciferra/ eSentire uncovered a malware campaign combining ClickFix lures with ErrTraffic and Cruciferra Wed, 19 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/maas-clickfix-errtraffic-cruciferra/ https://www.infosecurity-magazine.com/interviews/borussia-dortmund-it-chief/ From stadium infrastructure to player contracts, Borussia Dortmund's Head of IT reveals the cybersecurity challenges facing modern football clubs Wed, 19 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/interviews/borussia-dortmund-it-chief/ https://www.infosecurity-magazine.com/news/grandoreiro-mexico-dll-sideloading/ Grandoreiro is active after its 2024 disruption, with Mexico now accounting for 40% of detections Wed, 19 Aug 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/grandoreiro-mexico-dll-sideloading/ https://www.infosecurity-magazine.com/news/ico-police-data-governance-facial/ The UK’s privacy watchdog has called on police using facial recognition to follow its recommendations Wed, 19 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/ico-police-data-governance-facial/ https://www.infosecurity-magazine.com/news/uk-fraud-cases-hit-record-high/ Cifas data finds account takeover and identity fraud are driving a surge in fraud cases Wed, 19 Aug 2026 08:45:00 GMT https://www.infosecurity-magazine.com/news/uk-fraud-cases-hit-record-high/ https://www.infosecurity-magazine.com/news/enterprise-apps-critical-high/ Enterprise software creation has accelerated as vulnerability levels rise, Sonatype finds Tue, 18 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/enterprise-apps-critical-high/ https://www.infosecurity-magazine.com/news/nasa-ground-control-software-flaw/ Critical AIT-GUI flaws expose spacecraft commands and scripts to unauthenticated attackers Tue, 18 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/nasa-ground-control-software-flaw/ https://www.infosecurity-magazine.com/news/threequarters-ransomware-attacks/ Black Kite finds mid-market is the sweet spot for ransomware as manufacturers are most likely to be hit Tue, 18 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/threequarters-ransomware-attacks/ https://www.infosecurity-magazine.com/news/uk-legal-regulator-raises-ai/ Solicitors Regulation Authority sounds the alarm over AI hallucinations and data leaks Tue, 18 Aug 2026 08:17:00 GMT https://www.infosecurity-magazine.com/news/uk-legal-regulator-raises-ai/ https://www.infosecurity-magazine.com/news/unisoc-modem-flaw-rce-calls/ UNISOC modem flaw enabled kernel-level code execution through video calls Mon, 17 Aug 2026 15:45:00 GMT https://www.infosecurity-magazine.com/news/unisoc-modem-flaw-rce-calls/ https://www.infosecurity-magazine.com/news/wordpress-plugin-flaw-40000-sites/ Critical User Profile Builder flaw let unauthenticated attackers access administrator accounts Mon, 17 Aug 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/wordpress-plugin-flaw-40000-sites/ https://www.infosecurity-magazine.com/news/safepal-data-breach-tens-thousands/ Nearly 40,000 customers of hardware wallet provider SafePal have been impacted by a data breach Mon, 17 Aug 2026 09:10:00 GMT https://www.infosecurity-magazine.com/news/safepal-data-breach-tens-thousands/ https://www.infosecurity-magazine.com/news/infostealers-17-billion/ Flashpoint data reveals infostealers were responsible for taking 1.7 billion credentials in the first half of 2026 Mon, 17 Aug 2026 07:30:00 GMT https://www.infosecurity-magazine.com/news/infostealers-17-billion/ https://www.infosecurity-magazine.com/news/macos-infostealer-spread-clickfix/ AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data Fri, 14 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/macos-infostealer-spread-clickfix/ https://www.infosecurity-magazine.com/news/google-cloud-post-quantum-roadmap/ Google Cloud has set a 2027 deadline to mitigate store-now-decrypt-later risks as part of its post-quantum cryptography roadmap, with wider migration goals extending through 2028 Thu, 13 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/google-cloud-post-quantum-roadmap/ https://www.infosecurity-magazine.com/news/akira-affiliate-crashes-ransomware/ Huntress documents how a ransomware affiliate sabotaged its own attack with an anti-EDR effort Thu, 13 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/akira-affiliate-crashes-ransomware/ https://www.infosecurity-magazine.com/news/ico-reprimands-acro-records-office/ The ICO has issued a formal reprimand to ACRO after patching and security monitoring failures led to a breach Thu, 13 Aug 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/ico-reprimands-acro-records-office/ https://www.infosecurity-magazine.com/news/windrelay-nfc-relay-spynote-rat/ New WindRelay NFC malware paired with SpyNote RAT let a fraudster clone a card mid-call Wed, 12 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/windrelay-nfc-relay-spynote-rat/ https://www.infosecurity-magazine.com/news/lazarus-post-quantum-key-dream-job/ Lazarus malware used post-quantum key exchange to protect delivery of a Windows zero-day exploit Wed, 12 Aug 2026 13:35:00 GMT https://www.infosecurity-magazine.com/news/lazarus-post-quantum-key-dream-job/ https://www.infosecurity-magazine.com/news/npm-packages-ethereum-wallet-c2/ Six npm packages queried an Ethereum wallet to locate C2 infrastructure Tue, 11 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/npm-packages-ethereum-wallet-c2/ https://www.infosecurity-magazine.com/news/cursor-security-bug-command/ Cursor fixed a pre-trust code execution path in three days then closed the report as informative Tue, 11 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/cursor-security-bug-command/ https://www.infosecurity-magazine.com/news/logistics-ceva-data-breach/ Supply chain attack and data breach at Ceva Logistics appears to have a large blast radius Tue, 11 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/logistics-ceva-data-breach/ https://www.infosecurity-magazine.com/news/rovoblast-atlassian-rovo-url/ Atlassian fixed a flaw letting one crafted link make its Rovo AI assistant exfiltrate company data Mon, 10 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/rovoblast-atlassian-rovo-url/ https://www.infosecurity-magazine.com/news/bdthemes-wordpress-poisoned-api/ Poisoned JSON feed let attackers backdoor WordPress sites without changing any plugin files Mon, 10 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/bdthemes-wordpress-poisoned-api/ https://www.infosecurity-magazine.com/news/healthcare-victim-charities-beacon/ Beacon has informed around 1500 customer charities that its CRM databases were accessed and likely exfiltrated by an unauthorized actor Fri, 07 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/healthcare-victim-charities-beacon/ https://www.infosecurity-magazine.com/news/khunt-toolkit-oracle-database-sql/ Attackers used SQL injection to compile a post-exploitation toolkit inside an Oracle database Thu, 06 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/khunt-toolkit-oracle-database-sql/ https://www.infosecurity-magazine.com/news/violent-physical-crypto-thefts/ So-called “wrench attacks” have resulted in $30m in losses so far in 2026, says Chainalysis Thu, 06 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/violent-physical-crypto-thefts/ https://www.infosecurity-magazine.com/news/open-vsx-evil-twin-extensions-git/ 77 counterfeit Open VSX extensions beaconed to one domain, 19 harvesting git and CI identity Wed, 05 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/open-vsx-evil-twin-extensions-git/ https://www.infosecurity-magazine.com/news/paperclip-ai-vulnerabilities-rce/ 3 Paperclip flaws exposed data & allowed unauthenticated command execution in two deployment modes Wed, 05 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/paperclip-ai-vulnerabilities-rce/ https://www.infosecurity-magazine.com/news/frontier-models-unsanctioned/ Anthropic and OpenAI models attacked “real people and organizations” during AI Security Institute tests Wed, 05 Aug 2026 08:45:00 GMT https://www.infosecurity-magazine.com/news/frontier-models-unsanctioned/ https://www.infosecurity-magazine.com/news/whatsapp-voting-scam-linked/ WhatsApp scam abused the Linked devices feature to hijack accounts without stealing any passwords Tue, 04 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/whatsapp-voting-scam-linked/ https://www.infosecurity-magazine.com/news/talos-attackers-split-tasks-evade/ Talos read attacker prompt logs and found guardrails fell to task splitting and ownership claims Tue, 04 Aug 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/talos-attackers-split-tasks-evade/ https://www.infosecurity-magazine.com/news/ai-accounts-over-half-cybercrime/ Interpol claims AI is driving a surge in cybercrime in Africa, with related losses doubling Tue, 04 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/ai-accounts-over-half-cybercrime/ https://www.infosecurity-magazine.com/interviews/university-of-arts-london/ University of the Arts London's Keith Joy explains the unique cybersecurity challenges facing higher education and how institutions can secure users without restricting creativity Tue, 04 Aug 2026 09:06:00 GMT https://www.infosecurity-magazine.com/interviews/university-of-arts-london/ https://www.infosecurity-magazine.com/news/captivecrunch-midnight-blizzard/ Russian actor Storm-2945 hijacked hotel captive portals to push fake updates and steal tokens Mon, 03 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/captivecrunch-midnight-blizzard/ https://www.infosecurity-magazine.com/news/hollowframe-fake-python-dll/ New HollowFrame loader hid Go code in a fake Python DLL after pre-staging Defender exclusions Mon, 03 Aug 2026 11:26:00 GMT https://www.infosecurity-magazine.com/news/hollowframe-fake-python-dll/ https://www.infosecurity-magazine.com/news/koreas-largest-telco-kt-fine-39m/ Korean telco KT has been fined $39m for a year-long breach linked to femtocell compromise Mon, 03 Aug 2026 09:36:00 GMT https://www.infosecurity-magazine.com/news/koreas-largest-telco-kt-fine-39m/ https://www.infosecurity-magazine.com/news/aws-north-korea-axios-npm-supply/ AWS has linked North Korea to the axios campaign to other attacks on npm libraries Fri, 31 Jul 2026 09:50:00 GMT https://www.infosecurity-magazine.com/news/aws-north-korea-axios-npm-supply/ https://www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/ Cryptomining crew abandoned root to impersonate low-privileged Linux users and evade SOC alerts Thu, 30 Jul 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/ https://www.infosecurity-magazine.com/news/aitm-phishing-top-entry-point-law/ AiTM phishing is now the top entry point into law firms, with identity behind 56% of threats Thu, 30 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/aitm-phishing-top-entry-point-law/ https://www.infosecurity-magazine.com/news/logokit-phishing-real-time/ LogoKit now builds per-victim phishing pages using live screenshots of the target's real website Wed, 29 Jul 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/logokit-phishing-real-time/ https://www.infosecurity-magazine.com/news/ta488-outlook-half-click-owareaper/ TA488 returned with OWA half-click exploit deploying OWAReaper implant that survived re-imaging Wed, 29 Jul 2026 15:10:00 GMT https://www.infosecurity-magazine.com/news/ta488-outlook-half-click-owareaper/ https://www.infosecurity-magazine.com/news/researchers-aienhanced-phone-fraud/ AI is dramatically reducing the barriers to entry for scam phone farm operators, Human Security warns Wed, 29 Jul 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/researchers-aienhanced-phone-fraud/ https://www.infosecurity-magazine.com/news/hugging-face-diffusers-trust/ Three CVEs in Hugging Face diffusers let a malicious model repo run code on any machine that loads it Tue, 28 Jul 2026 15:15:00 GMT https://www.infosecurity-magazine.com/news/hugging-face-diffusers-trust/ https://www.infosecurity-magazine.com/news/ai-linux-kernel-zero-day-net-sched/ AI-assisted research uncovered Linux kernel use-after-free allowing root escalation Tue, 28 Jul 2026 14:45:00 GMT https://www.infosecurity-magazine.com/news/ai-linux-kernel-zero-day-net-sched/ https://www.infosecurity-magazine.com/news/phishing-dominates-initial-entry/ Analysis of real-life incident response cases by Cisco Talos warns that phishing remains a powerful method of initial compromise Tue, 28 Jul 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/phishing-dominates-initial-entry/ https://www.infosecurity-magazine.com/news/ubuntu-snap-confine-local-root-cve/ New Ubuntu snap-confine race condition lets local users escalate to root on default installs Wed, 22 Jul 2026 10:50:00 GMT https://www.infosecurity-magazine.com/news/ubuntu-snap-confine-local-root-cve/ https://www.infosecurity-magazine.com/news/trim-jailbroken-claude-ai-pentest/ Russian-speaking actor Trim built a commercial offensive AI pentest tool on jailbroken Claude models Tue, 21 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/trim-jailbroken-claude-ai-pentest/ https://www.infosecurity-magazine.com/news/fbi-deepfake-videos-ic3/ FBI warned of deepfake videos of IC3 leadership directing users to spoofed complaint sites Tue, 21 Jul 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/fbi-deepfake-videos-ic3/ https://www.infosecurity-magazine.com/news/north-korean-clickfake-campaign/ In a new campaign, North Korean hacking group Famous Chollima targeted crypto professionals through ClickFix lures to deliver Windows and macOS trojans Tue, 21 Jul 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/north-korean-clickfake-campaign/ https://www.infosecurity-magazine.com/news/phishing-lua-loader-truetype-font/ Global phishing campaign disguised a Lua loader as a font file to deploy RATs and infostealers Thu, 16 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/phishing-lua-loader-truetype-font/ https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/ Six-month phishing campaign used seasonal eCard lures to plant legitimate RMM tools on victims Wed, 15 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/ https://www.infosecurity-magazine.com/news/uefi-shims-secure-boot-bypass/ Eleven forgotten Microsoft-signed UEFI shims can bypass Secure Boot on almost any machine Wed, 15 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/uefi-shims-secure-boot-bypass/ https://www.infosecurity-magazine.com/news/compromised-logins-ransomware-entry/ Research of incidents by Sophos finds that phishing, brute force attacks and other identity-based threats have surpassed software vulnerabilities as means of delivering ransomware Wed, 15 Jul 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/compromised-logins-ransomware-entry/ https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/ Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA Mon, 13 Jul 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/ https://www.infosecurity-magazine.com/news/australia-warns-global-cms/ Australian Cyber Security Centre warns CMS users of mass scanning and exploitation campaign Mon, 13 Jul 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/australia-warns-global-cms/ https://www.infosecurity-magazine.com/news/vibe-coded-malware-ai-powershell/ Huntress found a threat actor using vibe-coded PowerShell to map an Active Directory network Thu, 09 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/vibe-coded-malware-ai-powershell/ https://www.infosecurity-magazine.com/news/china-interpol-cybercrime-crackdown/ Operation First Light 2026, coordinated by Interpol and funded by the Chinese government, has led to 5,811 arrests Thu, 09 Jul 2026 11:45:00 GMT https://www.infosecurity-magazine.com/news/china-interpol-cybercrime-crackdown/ https://www.infosecurity-magazine.com/news/ghostapproval-flaw-ai-coding/ Wiz discovered GhostApproval, a symlink flaw in six major AI coding assistants that bypasses approval Thu, 09 Jul 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/ghostapproval-flaw-ai-coding/ https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/ Zimperium found RedWing, an Android spyware sold as a service via Telegram to target banking apps Wed, 08 Jul 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/ https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/ Cisco Talos said China-linked APT UAT-7810 is growing its proxy relay network with new malware Wed, 08 Jul 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/ https://www.infosecurity-magazine.com/opinions/what-opera-taught-me-about/ My focus on growth in opera, with countless hours devoted to vocal training, collaboration and live performances, has directly fed into my development as a cybersecurity practitioner. The connection is quite natural. Wed, 08 Jul 2026 08:30:00 GMT https://www.infosecurity-magazine.com/opinions/what-opera-taught-me-about/ https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/ A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and Canada and harvest user credentials Tue, 07 Jul 2026 15:40:00 GMT https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/ https://www.infosecurity-magazine.com/news/scattered-spider-as-cybercrime/ Group-IB analysis argued Scattered Spider is a decentralized collective of independent clusters Tue, 07 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/scattered-spider-as-cybercrime/ https://www.infosecurity-magazine.com/news/indirect-prompt-injection-web/ Zscaler found sites hiding prompt-injection text to manipulate AI agents into crypto payments Mon, 06 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/indirect-prompt-injection-web/ https://www.infosecurity-magazine.com/news/opera-gx-flaw-gx-mods-css/ Opera GX flaw let sites automatically install mods to steal data from other pages, now patched Mon, 06 Jul 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/opera-gx-flaw-gx-mods-css/ https://www.infosecurity-magazine.com/news/nca-warn-parents-volume/ IWF and NCA warn that growing numbers of images and videos are being manipulated into sexual abuse material Mon, 06 Jul 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/nca-warn-parents-volume/ https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/ The NCSC has shared best practice advice from pen testers which could help improve system resilience Thu, 02 Jul 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/ https://www.infosecurity-magazine.com/news/veil-drop-blogspot-purelog-stealer/ Securonix said the Veil#Drop campaign abuses Google Blogspot to deliver PureLog Stealer in memory Wed, 01 Jul 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/veil-drop-blogspot-purelog-stealer/ https://www.infosecurity-magazine.com/news/ousaban-banking-trojan-spain/ FortiGuard says the Brazilian banking trojan Ousaban is targeting Spain and Portugal via phishing Wed, 01 Jul 2026 13:45:00 GMT https://www.infosecurity-magazine.com/news/ousaban-banking-trojan-spain/ https://www.infosecurity-magazine.com/news/nissan-oracle-peoplesoft-zero-day/ Nissan says employees' data was stolen via the Oracle PeopleSoft zero-day campaign Tue, 30 Jun 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/nissan-oracle-peoplesoft-zero-day/ https://www.infosecurity-magazine.com/news/openai-gpt-5-6-sol-limited-preview/ OpenAI is previewing its GPT-5.6 Sol model to a vetted few at the US government's request Mon, 29 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/openai-gpt-5-6-sol-limited-preview/ https://www.infosecurity-magazine.com/news/millenium-rat-telegram-60000/ Group-IB says Millenium RAT, now rewritten in C++, has hit 62,289 devices in 160+ countries Mon, 29 Jun 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/millenium-rat-telegram-60000/ https://www.infosecurity-magazine.com/news/fbi-alarm-russian-intelligence/ The FBI claims Russian spies are targeting Signal backup keys Mon, 29 Jun 2026 08:15:00 GMT https://www.infosecurity-magazine.com/news/fbi-alarm-russian-intelligence/ https://www.infosecurity-magazine.com/news/twenty-million-us-ip-connections/ Digital Citizens Alliance report claims that millions of Americans may have unwittingly had IP connections used by cybercriminals Thu, 25 Jun 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/twenty-million-us-ip-connections/ https://www.infosecurity-magazine.com/news/cisa-sase-tic-3-0-zero-trust/ New CISA guidance shows federal agencies how to use SASE to move from legacy TIC 2.0 to zero trust Thu, 25 Jun 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/cisa-sase-tic-3-0-zero-trust/ https://www.infosecurity-magazine.com/news/macos-xpc-flaw-disable-edr-mdm/ macos-xpc-flaw-disable-edr-mdm-standard-user-xm-cyber Thu, 25 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/macos-xpc-flaw-disable-edr-mdm/ https://www.infosecurity-magazine.com/news/bioshocking-ai-browser-prompt/ LayerX tricked AI browsers including ChatGPT Atlas and Comet into bypassing their guardrails Wed, 24 Jun 2026 16:05:00 GMT https://www.infosecurity-magazine.com/news/bioshocking-ai-browser-prompt/ https://www.infosecurity-magazine.com/news/ai-attacks-cheaper-faster-covert/ New ReliaQuest study reveals the six ways AI is practically being used in attacks today Wed, 24 Jun 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/ai-attacks-cheaper-faster-covert/ https://www.infosecurity-magazine.com/news/lookalike-npm-package-postcss/ JFrog found an npm package impersonating postcss-selector-parser to drop a multi-stage Windows RAT Tue, 23 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/lookalike-npm-package-postcss/ https://www.infosecurity-magazine.com/news/openai-daybreak-gpt-5-5-cyber/ OpenAI expanded Daybreak with a full GPT-5.5-Cyber release to help defenders patch software flaws Tue, 23 Jun 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/openai-daybreak-gpt-5-5-cyber/ https://www.infosecurity-magazine.com/news/five-eyes-issues-urgent-call/ The Five Eyes Alliance has published a rare call to action for organizations facing AI threats Tue, 23 Jun 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/five-eyes-issues-urgent-call/ https://www.infosecurity-magazine.com/news/gentlekiller-gentlemen-ransomware/ ESET details GentleKiller, the EDR-killer framework the Gentlemen ransomware gang gives affiliates Mon, 22 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/gentlekiller-gentlemen-ransomware/ https://www.infosecurity-magazine.com/news/apple-bootrom-exploit-a12-a13/ Apple BootROM exploit exposes unpatchable USB flaw on A12 and A13 devices Mon, 22 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/apple-bootrom-exploit-a12-a13/ https://www.infosecurity-magazine.com/news/information-commissioner-resigns/ The UK’s data protection regulator the information commissioner has resigned after his position became “untenable” Mon, 22 Jun 2026 09:20:00 GMT https://www.infosecurity-magazine.com/news/information-commissioner-resigns/ https://www.infosecurity-magazine.com/news/ncsc-fortinet-customers-tackle/ The NCSC has released guidance for Fortinet customers impacted by the FortiBleed threat campaign Mon, 22 Jun 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/ncsc-fortinet-customers-tackle/ https://www.infosecurity-magazine.com/opinions/human-cost-of-ransomware/ Organizations must prepare their people for what happens if faced with a ransomware attack, not just their systems Fri, 19 Jun 2026 09:00:00 GMT https://www.infosecurity-magazine.com/opinions/human-cost-of-ransomware/ https://www.infosecurity-magazine.com/news/crypto-clipboard-hijacker-fake/ A Rust crypto clipper hides behind fake GitHub stars and AI-narrated YouTube videos Thu, 18 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/crypto-clipboard-hijacker-fake/ https://www.infosecurity-magazine.com/news/ico-cautions-healthcare-worker/ Hospital insider escapes criminal prosecution after attempting to sell royal’s medical records Thu, 18 Jun 2026 14:45:00 GMT https://www.infosecurity-magazine.com/news/ico-cautions-healthcare-worker/ https://www.infosecurity-magazine.com/news/cybercriminals-worried-ai-take/ Analysis of chatter on underground forums by Sophos finds that hackers fear AI could take work away from them Thu, 18 Jun 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/cybercriminals-worried-ai-take/ https://www.infosecurity-magazine.com/news/operation-escaneo-cloudsek-latam/ CloudSEK maps Operation Escaneo, a campaign hitting Latin American infrastructure via perimeter bugs Thu, 18 Jun 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/operation-escaneo-cloudsek-latam/ https://www.infosecurity-magazine.com/news/cybercrime-surges-apac-digitization/ Interpol claims cybercrime accounts for third of crime in over half of Asia and South Pacific countries Thu, 18 Jun 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/cybercrime-surges-apac-digitization/ https://www.infosecurity-magazine.com/news/north-korea-it-worker-fraud-ai/ Nisos infiltrated a North Korean IT-worker fraud cell running on AI interviews and a US laptop farm Wed, 17 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/north-korea-it-worker-fraud-ai/ https://www.infosecurity-magazine.com/news/gitbait-github-pages-sheetbest/ GitBait phishing kit abuses GitHub Pages and the SheetBest API to steal Mexican banking credentials Wed, 17 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/gitbait-github-pages-sheetbest/ https://www.infosecurity-magazine.com/news/staffing-top-soc-challenge-ai/ SANS Institute study finds few SOCs have built AI into defined workflows, despite widespread adoption Wed, 17 Jun 2026 08:45:00 GMT https://www.infosecurity-magazine.com/news/staffing-top-soc-challenge-ai/ https://www.infosecurity-magazine.com/news/sprysocks-backdoor-windows/ China-linked SprySOCKS backdoor gains stealthy Windows variants and 30-plus C2 commands Tue, 16 Jun 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/sprysocks-backdoor-windows/ https://www.infosecurity-magazine.com/news/rokarolla-android-banking-trojan/ Rokarolla Android trojan steals banking logins and spies on victims while blocking fraud alerts Tue, 16 Jun 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/rokarolla-android-banking-trojan/ https://www.infosecurity-magazine.com/news/security-pros-cyber-cyber-harder/ ISSA study finds most security professionals feel challenged by colleagues’ involvement in cyber Tue, 16 Jun 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/security-pros-cyber-cyber-harder/ https://www.infosecurity-magazine.com/news/dragonforce-ransomware-hidden/ Command and control traffic exploited a Teams visitor token to make malicious activity look legitimate to defenders Tue, 16 Jun 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/dragonforce-ransomware-hidden/ https://www.infosecurity-magazine.com/news/fbi-warns-courier-cash-pickups/ The FBI claims couriers are being used to circumvent bank transfers in crypto investment schemes Tue, 16 Jun 2026 08:15:00 GMT https://www.infosecurity-magazine.com/news/fbi-warns-courier-cash-pickups/ https://www.infosecurity-magazine.com/opinions/what-the-fifa-world-cup-2026-means/ The 2026 FIFA World Cup in North America will be the biggest yet, with more host countries, participants and matches than ever before. Thomas Peacock, director of global fraud intelligence at BioCatch, analyses banking data from previous football tournaments to examine how major sporting events reshape digital activity and fraud risk. Fri, 12 Jun 2026 08:00:00 GMT https://www.infosecurity-magazine.com/opinions/what-the-fifa-world-cup-2026-means/ https://www.infosecurity-magazine.com/news/cisa-orders-agencies-to-patch-by/ New CISA directive tells federal agencies to patch by real-world risk, not CVSS severity scores Thu, 11 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cisa-orders-agencies-to-patch-by/ https://www.infosecurity-magazine.com/news/cybersecurity-training-time/ Organizations are aware of the challenges that new technologies like AI bring: but cybersecurity staff struggle to make time for the required training during working hours Thu, 11 Jun 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-training-time/ https://www.infosecurity-magazine.com/news/interpol-dismantles-sniperdz/ New revelations by Group-IB expose the full scale of the decade-old SniperDz phishing operation Thu, 11 Jun 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/interpol-dismantles-sniperdz/ https://www.infosecurity-magazine.com/news/extortion-only-attacks-surge/ Extortion-only attacks are increasing as data theft drives most ransomware claims, with many organizations unable to stop stolen data from being exposed Thu, 11 Jun 2026 10:20:00 GMT https://www.infosecurity-magazine.com/news/extortion-only-attacks-surge/ https://www.infosecurity-magazine.com/news/fake-software-videos-tiktok-vidar/ Threat actors push fake free-software tutorials on TikTok and Instagram to spread Vidar stealer Wed, 10 Jun 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/fake-software-videos-tiktok-vidar/ https://www.infosecurity-magazine.com/news/silabrat-trojan-session-hijacking/ MaaS trojan SilabRAT uses HVNC and browser cloning to hijack sessions and steal crypto Wed, 10 Jun 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/silabrat-trojan-session-hijacking/ https://www.infosecurity-magazine.com/news/cybersecurity-fails-to-detect/ Menlo Security research warns that as enterprise applications become increasingly browser based, traditional cybersecurity tools leave them vulnerable to cyber threats Wed, 10 Jun 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-fails-to-detect/ https://www.infosecurity-magazine.com/news/quarter-identity-crime-victims/ Nearly 26% of identity crime victims faced multiple incidents in the past year, as ITRC warns of a growing "multi-layered crisis" Wed, 10 Jun 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/quarter-identity-crime-victims/ https://www.infosecurity-magazine.com/news/ai-coding-adoption-governance-lags/ Most dev teams use AI coding assistants but only 30% have full governance in place Tue, 09 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/ai-coding-adoption-governance-lags/ https://www.infosecurity-magazine.com/news/phpbb-authentication-bypass/ Critical phpBB authentication bypass lets attackers hijack any account with one request Tue, 09 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/phpbb-authentication-bypass/ https://www.infosecurity-magazine.com/news/whatsapp-nso-group-spearphishing/ Meta’s WhatsApp demands contempt ruling after users report NSO Group-linked phishing Tue, 09 Jun 2026 08:15:00 GMT https://www.infosecurity-magazine.com/news/whatsapp-nso-group-spearphishing/ https://www.infosecurity-magazine.com/news/north-korean-hackers-developers/ North Korean actor UNK_DeadDrop targeted developers with fake coding tasks to steal crypto Mon, 08 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/north-korean-hackers-developers/ https://www.infosecurity-magazine.com/news/chatgpt-lockdown-mode-active/ OpenAI brings Lockdown Mode and Active Sessions to ChatGPT to curb prompt injection data theft Mon, 08 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/chatgpt-lockdown-mode-active/ https://www.infosecurity-magazine.com/news/ai-coding-tools-security-agentic/ Ox Security field CTO, Boaz Barzel, makes the case for vibe security to tackle AI agent coding risks Fri, 05 Jun 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/ai-coding-tools-security-agentic/ https://www.infosecurity-magazine.com/news/reactive-security-failing/ A perfect storm of legacy devices, hyper connectivity and human fatigue is bad news for the healthcare sector, warns Cyber Salus Fri, 05 Jun 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/reactive-security-failing/ https://www.infosecurity-magazine.com/news/everest-forms-pro-rce-actively/ Critical Everest Forms Pro RCE flaw exploited to create rogue WordPress admin accounts Thu, 04 Jun 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/everest-forms-pro-rce-actively/ https://www.infosecurity-magazine.com/news/ta4922-global-expansion/ Newly named Chinese-speaking actor TA4922 expands from East Asia into Europe and Africa Thu, 04 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/ta4922-global-expansion/ https://www.infosecurity-magazine.com/news/infosecurity-europe-cybersecurity/ Cybersecurity and business leaders with experience of dealing with major incidents from within the NCSC and at JLR detail what you need to prioritize if your organization is hit by a cyber-attack Thu, 04 Jun 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/infosecurity-europe-cybersecurity/ https://www.infosecurity-magazine.com/news/resilience-perseverance-ukraine/ Former Ukrainian foreign minister, Dmytro Kuleba, urges Infosecurity Europe attendees to fight the good fight Thu, 04 Jun 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/resilience-perseverance-ukraine/ https://www.infosecurity-magazine.com/news/trump-eo-voluntary-frontier-ai/ Trump's executive order invites voluntary pre-release review of frontier AI models Wed, 03 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/trump-eo-voluntary-frontier-ai/ https://www.infosecurity-magazine.com/news/anthropic-glasswing-expansion/ Anthropic widens Project Glasswing access to 150 more firms as patching becomes the bottleneck Wed, 03 Jun 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/anthropic-glasswing-expansion/ https://www.infosecurity-magazine.com/news/cybercrime-ai-tools-surge-3800/ Halcyon’s Cynthia Kaiser lifts the lid on the dark web market for AI cybercrime tools Wed, 03 Jun 2026 07:30:00 GMT https://www.infosecurity-magazine.com/news/cybercrime-ai-tools-surge-3800/ https://www.infosecurity-magazine.com/news/bayer-reinvents-security-awareness/ Bayer’s security awareness training now focuses on psychological approaches rather than technical methods for detecting social engineering Tue, 02 Jun 2026 13:45:00 GMT https://www.infosecurity-magazine.com/news/bayer-reinvents-security-awareness/ https://www.infosecurity-magazine.com/news/ai-edr-evasion-tooling/ A threat actor used AI coding tools to build and test EDR evasion malware, Sophos finds Tue, 02 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/ai-edr-evasion-tooling/ https://www.infosecurity-magazine.com/news/business-leaders-struggle-threat/ A new Silobreaker and SANS Institute paper examines the ‘Intelligence-Stakeholder Gap’ and what organizations must do to achieve business buy-in on threat intelligence Tue, 02 Jun 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/business-leaders-struggle-threat/ https://www.infosecurity-magazine.com/news/flowise-mcp-rce-poc/ Obsidian publishes PoC for a 1-click Flowise RCE that can fully compromise self-hosted servers Mon, 01 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/flowise-mcp-rce-poc/ https://www.infosecurity-magazine.com/news/infosecurity-europe-semperis/ Semperis is set to bring ‘Enter the War Room: A Tabletop Experience’ to Infosecurity Europe to help cybersecurity leaders prepare to face real incidents Mon, 01 Jun 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/infosecurity-europe-semperis/ https://www.infosecurity-magazine.com/news/ai-soc-still-need-analysts/ Top cybersecurity vendors said AI won't replace entry-level – only routine ticket-taking and triage Mon, 01 Jun 2026 11:45:00 GMT https://www.infosecurity-magazine.com/news/ai-soc-still-need-analysts/ https://www.infosecurity-magazine.com/news/gamaredon-worm-ntfs-data-streams/ FSB-linked Gamaredon concealed a fileless worm in NTFS data streams to spy on Ukraine targets Mon, 01 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/gamaredon-worm-ntfs-data-streams/ https://www.infosecurity-magazine.com/news/attackers-shared-content-chatgpt/ Push Security says threat actors are delivering malware hosted on chatgpt.com/s/ domain Mon, 01 Jun 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/attackers-shared-content-chatgpt/ https://www.infosecurity-magazine.com/news/ai-npm-malware-leaks-github-token/ Sloppy AI-generated npm infostealer leaked its own GitHub token, exposing the operator Fri, 29 May 2026 08:10:00 GMT https://www.infosecurity-magazine.com/news/ai-npm-malware-leaks-github-token/ https://www.infosecurity-magazine.com/news/attackers-beyond-typosquatting/ Most malicious open source packages now mimic real code rather than rely on typosquatting Thu, 28 May 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/attackers-beyond-typosquatting/ https://www.infosecurity-magazine.com/news/jinx-0164-crypto-developers-macos/ New actor Jinx-0164 hit crypto developers with fake recruiter lures and macOS malware Thu, 28 May 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/jinx-0164-crypto-developers-macos/ https://www.infosecurity-magazine.com/news/infosecurity-europe-isc2/ ISC2 survey of cybersecurity professionals suggests that staff want their information security leaders to have experienced reacting to a significant cyber incident Thu, 28 May 2026 10:01:00 GMT https://www.infosecurity-magazine.com/news/infosecurity-europe-isc2/ https://www.infosecurity-magazine.com/news/gchq-keast-butler-cyber-action-ai/ GCHQ director urges urgent business cyber action as AI and quantum reshape the threat Thu, 28 May 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/gchq-keast-butler-cyber-action-ai/ https://www.infosecurity-magazine.com/news/why-burnout-cybersecurity-risk/ Cybermindz warns that cybersecurity burnout is a growing risk, urging organizations to move beyond wellness initiatives and adopt a measurable, risk-based approach to workforce stress Wed, 27 May 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/why-burnout-cybersecurity-risk/ https://www.infosecurity-magazine.com/news/ghost-stadium-fifa-world-cup-fraud/ Group-IB uncovered Ghost Stadium phishing and 4300 fake FIFA World Cup domains targeting fans Wed, 27 May 2026 11:28:00 GMT https://www.infosecurity-magazine.com/news/ghost-stadium-fifa-world-cup-fraud/ https://www.infosecurity-magazine.com/news/uk-firms-cyber-spending-ai-risks/ UK firms plan higher cyber spending as AI adoption raises security concerns Wed, 27 May 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/uk-firms-cyber-spending-ai-risks/ https://www.infosecurity-magazine.com/news/purelogs-phishing-purchase-order/ FortiGuard Labs detailed a PureLogs campaign using JavaScript, PowerShell and process hollowing Wed, 27 May 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/purelogs-phishing-purchase-order/ https://www.infosecurity-magazine.com/news/btmob-android-rat-maas-builder/ BTMOB Android RAT sold as a service with a no-code builder for fast, regional phishing lures Tue, 26 May 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/btmob-android-rat-maas-builder/ https://www.infosecurity-magazine.com/news/cert-in-12-hour-patch-deadline-ai/ CERT-In urges 12-hour patching of exposed flaws as AI compresses exploitation timelines Tue, 26 May 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/cert-in-12-hour-patch-deadline-ai/ https://www.infosecurity-magazine.com/news/iranian-hackers-us-aviation/ Iran's Nimbus Manticore pushes AI-built MiniFast backdoor via phishing and SEO poisoning Tue, 26 May 2026 09:10:00 GMT https://www.infosecurity-magazine.com/news/iranian-hackers-us-aviation/ https://www.infosecurity-magazine.com/news/how-fraudsters-target-f1-fans/ From fake F1 streams to counterfeit merch, fraudsters are exploiting fans online and the Bitdefender Cybersecurity Grand Prix Fan Threat Index details how Mon, 25 May 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/how-fraudsters-target-f1-fans/ https://www.infosecurity-magazine.com/news/gemini-claude-infostealers-seo/ The infostealer payload in this campaign collect a vast amount of data, from collaboration authentication keys to cryptocurrency wallets Fri, 22 May 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/gemini-claude-infostealers-seo/ https://www.infosecurity-magazine.com/news/github-breach-nx-console-vs-code/ A threat actor compromised an Nx developer and posed as a legitimate maintainer to publish a malicious extension on Visual Studio Marketplace Thu, 21 May 2026 14:45:00 GMT https://www.infosecurity-magazine.com/news/github-breach-nx-console-vs-code/ https://www.infosecurity-magazine.com/news/linux-kernel-ptrace-flaw-ssh-keys/ Qualys finds nine-year-old Linux ptrace flaw exposing SSH keys and password hashes locally Thu, 21 May 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/linux-kernel-ptrace-flaw-ssh-keys/ https://www.infosecurity-magazine.com/news/android-carrier-billing-fraud-four/ Premium Deception campaign uses 250 Android apps to silently sign victims up to paid services Wed, 20 May 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/android-carrier-billing-fraud-four/ https://www.infosecurity-magazine.com/news/researchers-cypherloc-scareware/ Barracuda reveals new CypherLoc scareware has featured in nearly three million attacks Wed, 20 May 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/researchers-cypherloc-scareware/ https://www.infosecurity-magazine.com/news/verizon-dbir-exploits-top-access/ Verizon DBIR finds 31% of data breaches began with software flaws last year Wed, 20 May 2026 08:40:00 GMT https://www.infosecurity-magazine.com/news/verizon-dbir-exploits-top-access/ https://www.infosecurity-magazine.com/news/hackers-bypass-security-tools/ Bridewell report calls out emergence of “fix-style” attacks Tue, 19 May 2026 08:20:00 GMT https://www.infosecurity-magazine.com/news/hackers-bypass-security-tools/ https://www.infosecurity-magazine.com/news/mustang-panda-fdmtp-backdoor-apj/ Mustang Panda campaign deploys updated FDMTP backdoor against Asia-Pacific and Japan networks Thu, 14 May 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/mustang-panda-fdmtp-backdoor-apj/ https://www.infosecurity-magazine.com/news/fragnesia-linux-kernel-lpe-root/ New Fragnesia kernel flaw lets unprivileged local users escalate to root on Linux systems Thu, 14 May 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/fragnesia-linux-kernel-lpe-root/ https://www.infosecurity-magazine.com/interviews/how-alpines-head-of-it-secures-an/ In Formula 1 speed is of the essence and team members need secure, but swift, access to data at all times. Here’s how BWT Alpine Formula One Team ensures it meets that challenge all season long Thu, 14 May 2026 09:30:00 GMT https://www.infosecurity-magazine.com/interviews/how-alpines-head-of-it-secures-an/ https://www.infosecurity-magazine.com/news/most-organizations-ai-agents/ Semperis study finds 74% of organizations believe AI will increase attacks on identity infrastructure Thu, 14 May 2026 09:20:00 GMT https://www.infosecurity-magazine.com/news/most-organizations-ai-agents/ https://www.infosecurity-magazine.com/news/avada-builder-flaws-one-million/ Avada Builder flaws allowed file read and SQL injection on one million WordPress sites Wed, 13 May 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/avada-builder-flaws-one-million/ https://www.infosecurity-magazine.com/news/clickfix-combined-pysoxy-proxying/ Exploitation of open-source tools allows attackers to maintain persistent access after initial social engineering, warn ReliaQuest researchers Tue, 12 May 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/clickfix-combined-pysoxy-proxying/ https://www.infosecurity-magazine.com/news/south-staffordshire-water-fined-1m/ The ICO has fined South Staffordshire Water nearly £1m for a series of data protection failings Tue, 12 May 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/south-staffordshire-water-fined-1m/ https://www.infosecurity-magazine.com/news/fake-claude-code-installer/ Ontinue uncovers fake Claude Code installer pushing PowerShell stealer abusing Chrome's IElevator2 Mon, 11 May 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/fake-claude-code-installer/ https://www.infosecurity-magazine.com/news/zara-data-breach-impacts-200000/ ShinyHunters gets away with emails and other data on 200,000 Zara customers Mon, 11 May 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/zara-data-breach-impacts-200000/ https://www.infosecurity-magazine.com/news/police-shut-crimenetwork-may-2025/ Spanish police have arrested the suspected administrator of German dark web marketplace Crimenetwork Mon, 11 May 2026 08:15:00 GMT https://www.infosecurity-magazine.com/news/police-shut-crimenetwork-may-2025/ https://www.infosecurity-magazine.com/news/australian-cyber-security-centre/ ACSC warns over a campaign targeting organizations which uses ClickFix to deliver Vidar infostealer malware Fri, 08 May 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/australian-cyber-security-centre/ https://www.infosecurity-magazine.com/opinions/crowdsourced-public-sector-cyber/ With rising cyber risk, public sector organizations are embracing crowdsourced security and CTEM to strengthen defenses beyond periodic testing Fri, 08 May 2026 08:30:00 GMT https://www.infosecurity-magazine.com/opinions/crowdsourced-public-sector-cyber/ https://www.infosecurity-magazine.com/news/cline-kanban-websocket-hijack-ai/ Oasis Security finds critical Cline kanban WebSocket flaw exposing AI coding agents to hijack Thu, 07 May 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/cline-kanban-websocket-hijack-ai/ https://www.infosecurity-magazine.com/news/fake-claude-site-beagle-backdoor/ Sophos finds fake Claude site spreading DonutLoader and a new Beagle backdoor via DLL sideloading Thu, 07 May 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/fake-claude-site-beagle-backdoor/ https://www.infosecurity-magazine.com/news/researchers-spot-uptick-vercel/ Cofense has warned of a “significant” increase in phishing campaigns abusing Vercel platform Thu, 07 May 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/researchers-spot-uptick-vercel/ https://www.infosecurity-magazine.com/news/cloudz-rat-pheno-phone-link-otp/ Cisco Talos uncovers CloudZ RAT and Pheno plugin abusing Microsoft Phone Link to intercept SMS OTPs Wed, 06 May 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cloudz-rat-pheno-phone-link-otp/ https://www.infosecurity-magazine.com/opinions/lessons-learned-from-colonial/ In May 2021, a coordinated government response helped contain the ransomware attack that disrupted America’s gas supply. Are we ready for the next major attack against critical infrastructure? Wed, 06 May 2026 13:30:00 GMT https://www.infosecurity-magazine.com/opinions/lessons-learned-from-colonial/ https://www.infosecurity-magazine.com/news/cisa-ci-fortify-isolation-recovery/ CISA’s CI Fortify initiative aim for critical infrastructure operators to build isolation & recovery Wed, 06 May 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/cisa-ci-fortify-isolation-recovery/ https://www.infosecurity-magazine.com/news/iran-linked-apt-chaos-ransomware/ Rapid7 reveals an Iranian false flag operation masquerading as a Chaos ransomware attack Wed, 06 May 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/iran-linked-apt-chaos-ransomware/ https://www.infosecurity-magazine.com/news/one-eight-workers-sold-corporate/ Cifas says that 13% of employees admit selling company credentials to a former colleague Wed, 06 May 2026 08:40:00 GMT https://www.infosecurity-magazine.com/news/one-eight-workers-sold-corporate/ https://www.infosecurity-magazine.com/news/scarcruft-birdcall-android-yanbian/ ESET warns that North Korean hackers compromised a Yanbian gaming site in a supply‑chain attack, trojanizing Windows and Android software to spy on users Tue, 05 May 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/scarcruft-birdcall-android-yanbian/ https://www.infosecurity-magazine.com/news/ssa-emails-venomous-helper-phishing/ Venomous#Helper attackers impersonate the US Social Security Administration to deploy signed RMM software and maintain persistent access across US networks Tue, 05 May 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/ssa-emails-venomous-helper-phishing/ https://www.infosecurity-magazine.com/news/cybersecurity-workers-jailed/ The cybersecurity workers used their knowledge and skills to conduct ransomware attacks for notorious gang, rather than protect victims against them Fri, 01 May 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-workers-jailed/ https://www.infosecurity-magazine.com/opinions/adapt-defenses-to-protect-against/ Democratization of cybercrime is driving PhaaS expansion. Here's what you need to know to protect your network Fri, 01 May 2026 09:00:00 GMT https://www.infosecurity-magazine.com/opinions/adapt-defenses-to-protect-against/ https://www.infosecurity-magazine.com/news/deepdoor-python-backdoor-windows/ Deep#Door Python RAT uses tunneling and obfuscation to evade detection and steal credentials Thu, 30 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/deepdoor-python-backdoor-windows/ https://www.infosecurity-magazine.com/news/zero-trust-guidance-operational/ A new CISA‑led guide explains how zero‑trust security can be applied to operational technology, balancing cyber defence with safety and system availability Thu, 30 Apr 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/zero-trust-guidance-operational/ https://www.infosecurity-magazine.com/news/europol-albanian-scam-call-centers/ European police arrested 10 suspects after dismantling Albanian scam call centers linked to a €50m ($58m) online investment fraud operation Thu, 30 Apr 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/europol-albanian-scam-call-centers/ https://www.infosecurity-magazine.com/news/cyber-number-one-global-people/ Marsh’s 2026 People Risks survey finds cyber‑related challenges dominate, as cyber‑threat literacy tops risks and cyber and AI skills shortages rise Thu, 30 Apr 2026 09:10:00 GMT https://www.infosecurity-magazine.com/news/cyber-number-one-global-people/ https://www.infosecurity-magazine.com/news/cursor-extension-flaw-exposes-api/ Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX Wed, 29 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cursor-extension-flaw-exposes-api/ https://www.infosecurity-magazine.com/news/ai-npm-dependency-targets-crypto/ Researchers uncover a malicious npm dependency linked to an AI‑assisted code commit that steals sensitive data and exposes crypto wallets Wed, 29 Apr 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/ai-npm-dependency-targets-crypto/ https://www.infosecurity-magazine.com/news/ransomware-turf-war-0apt-krybit/ Ransomware groups 0APT and KryBit have doxxed each other online Tue, 28 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-turf-war-0apt-krybit/ https://www.infosecurity-magazine.com/news/chinese-national-extradited-silk/ Extradition links alleged MSS-directed hacker to Silk Typhoon and COVID-19 espionage Tue, 28 Apr 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/chinese-national-extradited-silk/ https://www.infosecurity-magazine.com/news/no-metrics-better-bad-metrics-soc/ The National Cyber Security Centre has warned against measuring SOCs with ticket-based metrics Tue, 28 Apr 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/no-metrics-better-bad-metrics-soc/ https://www.infosecurity-magazine.com/news/us-sanctions-cambodian-scam-network/ US sanctions target Cambodian scam networks tied to crypto fraud and trafficking Mon, 27 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/us-sanctions-cambodian-scam-network/ https://www.infosecurity-magazine.com/news/browser-extensions-sell-user-data/ Dozens of browser extensions openly sell user data via privacy policy disclosures Mon, 27 Apr 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/browser-extensions-sell-user-data/ https://www.infosecurity-magazine.com/news/cybersecurity-pros-feel/ A new report by global technology recruitment firm, Harvey Nash, found that three quarters of cybersecurity staff are pessimistic on pay and half are looking for a new job Mon, 27 Apr 2026 11:40:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-pros-feel/ https://www.infosecurity-magazine.com/news/blackfile-group-targets-retail/ Researchers uncover a new data theft and extortion group dubbed “BlackFile” Mon, 27 Apr 2026 08:15:00 GMT https://www.infosecurity-magazine.com/news/blackfile-group-targets-retail/ https://www.infosecurity-magazine.com/news/cyberattacks-surge-63-annually/ Quorum Cyber report finds higher and further education institutions experienced 63% increase in attacks over a year Thu, 23 Apr 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/cyberattacks-surge-63-annually/ https://www.infosecurity-magazine.com/news/macos-lotl-techniques-enterprise/ macOS LOTL techniques bypass detection using native tools and metadata abuse Wed, 22 Apr 2026 16:30:00 GMT https://www.infosecurity-magazine.com/news/macos-lotl-techniques-enterprise/ https://www.infosecurity-magazine.com/news/ncsc-silentglass-a-plugin-stop/ The UK’s cybersecurity agency said the devices will be available for purchase by organizations around the world Wed, 22 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/ncsc-silentglass-a-plugin-stop/ https://www.infosecurity-magazine.com/news/silent-subject-phishing-campaigns/ Null subject phishing campaigns bypass filters and target VIPs with QR code and RMM abuse Wed, 22 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/silent-subject-phishing-campaigns/ https://www.infosecurity-magazine.com/news/former-ransomware-negotiator/ A former ransomware negotiator has pleaded guilty to abusing his position by working with noted cybercrime group BlackCat Wed, 22 Apr 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/former-ransomware-negotiator/ https://www.infosecurity-magazine.com/news/trojanized-android-handle-nfc/ NGate malware abuses HandyPay app to steal NFC card data and PINs in Brazil Tue, 21 Apr 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/trojanized-android-handle-nfc/ https://www.infosecurity-magazine.com/news/unchecked-ai-agents-cause/ Data exposure, operational disruption and financial losses among issues faced by businesses struggling with the rapid rise of AI agents, warns Cloud Security Alliance report Tue, 21 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/unchecked-ai-agents-cause/ https://www.infosecurity-magazine.com/news/vercel-cyber-incident-threat-actor/ Cloud app developer Vercel appears to have suffered a security breach Tue, 21 Apr 2026 09:10:00 GMT https://www.infosecurity-magazine.com/news/vercel-cyber-incident-threat-actor/ https://www.infosecurity-magazine.com/news/zionsiphon-malware-water/ ZionSiphon malware targets OT water systems with sabotage and ICS scanning capabilities Mon, 20 Apr 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/zionsiphon-malware-water/ https://www.infosecurity-magazine.com/news/formbook-malware-multiple/ Formbook attacks use combination of DLL Side-Loading and Obfuscated JavaScript to stay hidden, researchers at WatchGuard have uncovered Mon, 20 Apr 2026 15:01:00 GMT https://www.infosecurity-magazine.com/news/formbook-malware-multiple/ https://www.infosecurity-magazine.com/news/mirai-variant-dvr-flaw-iot-botnet/ FortiGuard Labs has identified a Mirai-based Nexcorium campaign actively exploiting CVE-2024-3721 in TBK DVR devices Mon, 20 Apr 2026 13:01:00 GMT https://www.infosecurity-magazine.com/news/mirai-variant-dvr-flaw-iot-botnet/ https://www.infosecurity-magazine.com/news/ncsc-plan-boost-nhs-cyber/ The National Cyber Security Centre has shared an update of its resilience-building efforts for the NHS Mon, 20 Apr 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/ncsc-plan-boost-nhs-cyber/ https://www.infosecurity-magazine.com/news/us-nationals-jailed-north-korea/ US authorities jail two Americans for aiding North Korean laptop farm scams that infiltrated over 100 firms Thu, 16 Apr 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/us-nationals-jailed-north-korea/ https://www.infosecurity-magazine.com/news/apk-malformation-android-malware/ APK malformation tactic now appears in over 3000 Android malware samples evading static analysis Thu, 16 Apr 2026 15:45:00 GMT https://www.infosecurity-magazine.com/news/apk-malformation-android-malware/ https://www.infosecurity-magazine.com/news/systemic-flaw-mcp-expose-150/ Ox Security claims as many as 200,000 servers are exposed by newly discovered MCP vulnerability Thu, 16 Apr 2026 09:40:00 GMT https://www.infosecurity-magazine.com/news/systemic-flaw-mcp-expose-150/ https://www.infosecurity-magazine.com/news/dragon-boss-adware-disables/ Huntress uncovers adware deploying AV-killing payloads via signed updates across 23,000 endpoints Wed, 15 Apr 2026 14:40:00 GMT https://www.infosecurity-magazine.com/news/dragon-boss-adware-disables/ https://www.infosecurity-magazine.com/opinions/passwords-weakest-link-phishing/ As traditional network perimeters continue to disappear, modern SaaS environments, remote work, and expanding third-party access have shifted cyber risk away from networks and toward how trust is established and enforced. Wed, 15 Apr 2026 14:00:00 GMT https://www.infosecurity-magazine.com/opinions/passwords-weakest-link-phishing/ https://www.infosecurity-magazine.com/news/nginx-ui-mcp-flaw-actively/ Critical nginx-ui MCP authentication bypass CVE-2026-33032 actively exploited with CVSS 9.8 Wed, 15 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/nginx-ui-mcp-flaw-actively/ https://www.infosecurity-magazine.com/news/researchers-surge-bruteforce/ Barracuda says 88% of brute-force attempts in Q1 were from the region Wed, 15 Apr 2026 09:45:00 GMT https://www.infosecurity-magazine.com/news/researchers-surge-bruteforce/ https://www.infosecurity-magazine.com/news/cisos-innovate-talent-retention/ A new IANS report claims just 34% of cybersecurity professionals plan to stay put in the next 12 months Tue, 14 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/cisos-innovate-talent-retention/ https://www.infosecurity-magazine.com/news/chrome-extensions-expose-user-data/ 108 malicious Chrome extensions steal sessions, Google data, inject ads via single C2 infrastructure Tue, 14 Apr 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/chrome-extensions-expose-user-data/ https://www.infosecurity-magazine.com/news/mailbox-rule-abuse-stealthy-post/ Attackers are abusing Microsoft 365 mailbox rules to hide activity, exfiltrate data and retain access after account compromise, researchers warn Mon, 13 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/mailbox-rule-abuse-stealthy-post/ https://www.infosecurity-magazine.com/news/mirax-trojan-devices-proxy-nodes/ Security researchers warn of Mirax, an emerging Android banking trojan using MaaS, remote access and residential proxies to target European users Mon, 13 Apr 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/mirax-trojan-devices-proxy-nodes/ https://www.infosecurity-magazine.com/news/associate-cyber-professional-title/ The UK Cyber Security Council has unveiled a new Associate Cyber Security Professional title aimed at supporting early‑career cybersecurity professionals Mon, 13 Apr 2026 09:15:00 GMT https://www.infosecurity-magazine.com/news/associate-cyber-professional-title/ https://www.infosecurity-magazine.com/news/three-ransomware-gangs-40-percent/ Qilin, Akira and Dragonforce were responsible for 40% of 672 ransomware incidents reported in March, says Check Point Fri, 10 Apr 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/three-ransomware-gangs-40-percent/ https://www.infosecurity-magazine.com/news/stx-rat-targets-finance-sector/ STX RAT, a newly identified remote access trojan, attempted deployment in finance, showing advanced C2 and stealthy delivery methods Thu, 09 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/stx-rat-targets-finance-sector/ https://www.infosecurity-magazine.com/news/atomic-stealer-macos-clickfix/ macOS 26.4 update introduced security warnings into Terminal to prevent ClickFix attacks, so attackers have shifted to Script Editor instead Thu, 09 Apr 2026 11:20:00 GMT https://www.infosecurity-magazine.com/news/atomic-stealer-macos-clickfix/ https://www.infosecurity-magazine.com/news/governance-gaps-agents-76-increase/ SANS Institute reveals that AI agents are behind a 76% surge in non-human identities Thu, 09 Apr 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/governance-gaps-agents-76-increase/ https://www.infosecurity-magazine.com/news/google-warns-group-targeting-bpos/ Google’s threat intel team warns UNC6783, a new extortion group possibly linked to the “Raccoon” persona, is targeting BPOs and enterprises Thu, 09 Apr 2026 08:35:00 GMT https://www.infosecurity-magazine.com/news/google-warns-group-targeting-bpos/ https://www.infosecurity-magazine.com/news/google-api-keys-access-gemini/ Google API key flaw exposes mobile apps to Gemini AI access, private files and billing risks Wed, 08 Apr 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/google-api-keys-access-gemini/ https://www.infosecurity-magazine.com/news/flaw-ninja-forms-wordpress/ Ninja Forms File Upload RCE via unauthenticated arbitrary file upload; update to 3.3.27 immediately Wed, 08 Apr 2026 15:10:00 GMT https://www.infosecurity-magazine.com/news/flaw-ninja-forms-wordpress/ https://www.infosecurity-magazine.com/news/gpu-based-rowhammer-attack/ GPUBreach uses GPU Rowhammer on GDDR6 to flip bits, corrupt page tables and escalate to system root Tue, 07 Apr 2026 15:05:00 GMT https://www.infosecurity-magazine.com/news/gpu-based-rowhammer-attack/ https://www.infosecurity-magazine.com/news/grafanaghost-silent-data/ GrafanaGhost chains AI prompt injection and URL flaws to exfiltrate sensitive Grafana data Tue, 07 Apr 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/grafanaghost-silent-data/ https://www.infosecurity-magazine.com/opinions/when-world-splits-are-businesses/ Geopolitical rifts are becoming more frequent, more complex and more interconnected. Businesses cannot control global politics, but they can control their preparedness Mon, 06 Apr 2026 14:01:00 GMT https://www.infosecurity-magazine.com/opinions/when-world-splits-are-businesses/ https://www.infosecurity-magazine.com/news/ncsc-alert-hackers-whatsapp-signal/ The UK’s cybersecurity agency offered advice to “high-risk’ individuals” on how to protect against social engineering and cyber-attacks Thu, 02 Apr 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/ncsc-alert-hackers-whatsapp-signal/ https://www.infosecurity-magazine.com/news/github-covert-multi-stage-malware/ LNK files use GitHub C2, embedded decoders and PowerShell for persistence and data exfiltration Thu, 02 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/github-covert-multi-stage-malware/ https://www.infosecurity-magazine.com/news/google-android-dev-verification/ Android requires dev identity verification for sideloaded apps; phased global rollout from September Wed, 01 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/google-android-dev-verification/ https://www.infosecurity-magazine.com/news/venom-stealer-maas-automates-data/ Venom Stealer malware-as-a-service automates ClickFix social engineering, credential and crypto exfiltration Wed, 01 Apr 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/venom-stealer-maas-automates-data/ https://www.infosecurity-magazine.com/news/eight-10-uk-manufacturers-hit/ Most UK manufacturers compromised last year suffered financial loss, says ESET Wed, 01 Apr 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/eight-10-uk-manufacturers-hit/ https://www.infosecurity-magazine.com/news/phantom-project-infostealer-nov-25/ Phantom Stealer .NET harvests browser credentials, cookies, cards, sessions, as stealer-as-a-service Tue, 31 Mar 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/phantom-project-infostealer-nov-25/ https://www.infosecurity-magazine.com/news/chatgpt-security-issue-steal-data/ OpenAI has patched vulnerability, which Check Point said was because of a DNS loophole Tue, 31 Mar 2026 13:01:00 GMT https://www.infosecurity-magazine.com/news/chatgpt-security-issue-steal-data/ https://www.infosecurity-magazine.com/news/teampcp-exploit-stolen-supply/ TeamPCP is exploring ways to monetize the secrets harvested during supply chain attacks, with identified ties to the Lapsus$ and Vect ransomware gangs Tue, 31 Mar 2026 12:15:00 GMT https://www.infosecurity-magazine.com/news/teampcp-exploit-stolen-supply/ https://www.infosecurity-magazine.com/news/employee-data-breaches-surge/ Analysis from law firm Nockolds suggests non-cyber incidents are driving up employee data breaches Tue, 31 Mar 2026 10:01:00 GMT https://www.infosecurity-magazine.com/news/employee-data-breaches-surge/ https://www.infosecurity-magazine.com/news/tax-season-new-phishing-tactics/ Tax-season phishing floods deliver RMM malware, credential theft, BEC and tax-form scams Mon, 30 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/tax-season-new-phishing-tactics/ https://www.infosecurity-magazine.com/news/ico-fines-uk-nuisance-call/ The UK Information Commissioner’s Office has handed a £100,000 fine to Birmingham-based TMAC Mon, 30 Mar 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/ico-fines-uk-nuisance-call/ https://www.infosecurity-magazine.com/opinions/it-and-ot-are-not-equal/ It’s high time that OT cybersecurity got the attention and investment it deserves, writes Secolve's Aaron Singleton-Martin Fri, 27 Mar 2026 10:01:00 GMT https://www.infosecurity-magazine.com/opinions/it-and-ot-are-not-equal/ https://www.infosecurity-magazine.com/news/critical-oracle-weblogic-rce/ Attackers rapidly exploited a critical Oracle WebLogic RCE flaw the same day exploit code was released, according to a CloudSEK honeypot study Thu, 26 Mar 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/critical-oracle-weblogic-rce/ https://www.infosecurity-magazine.com/news/invoice-fraud-uk-construction/ The National Crime Agency has warned construction firms about surging invoice fraud Thu, 26 Mar 2026 10:07:00 GMT https://www.infosecurity-magazine.com/news/invoice-fraud-uk-construction/ https://www.infosecurity-magazine.com/news/cloud-phones-financial-fraud/ Cloud Android phones fuel financial fraud, evading detection and enabling dropper accounts Wed, 25 Mar 2026 16:05:00 GMT https://www.infosecurity-magazine.com/news/cloud-phones-financial-fraud/ https://www.infosecurity-magazine.com/news/hackers-exploit-id-industrial-scale/ Cybersecurity company’s annual report issues warning over a “mass-marketed impersonation crisis” over attackers abusing legitimate credentials Wed, 25 Mar 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/hackers-exploit-id-industrial-scale/ https://www.infosecurity-magazine.com/news/teampcp-litellm-pypi-supply-chain/ Python package LiteLLM compromised with credential-stealing malware linked to TeamPCP threat group Wed, 25 Mar 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/teampcp-litellm-pypi-supply-chain/ https://www.infosecurity-magazine.com/news/experts-prompt-poaching-browser/ Expel has warned of malicious Chrome extensions stealing users’ AI conversations Wed, 25 Mar 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/experts-prompt-poaching-browser/