https://www.infosecurity-magazine.com/identity-access-management/ Copyright © 2026 Reed Exhibitions Ltd. All Rights Reserved. https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/ RecruitTrap campaigns use mobile-optimized phishing pages to target enterprise credentials Tue, 25 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/ https://www.infosecurity-magazine.com/news/australia-exploitation-teamcity/ Australian officials are urging TeamCity customers to patch an actively exploited critical flaw, which follows a similar warning from the US government Tue, 25 Aug 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/australia-exploitation-teamcity/ https://www.infosecurity-magazine.com/news/nist-risks-multi-cloud/ NIST has set out 23 novel challenges that arise in multi-cloud environments and has encouraged the cyber community to find solutions Mon, 24 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/nist-risks-multi-cloud/ https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/ Doubloon Dredger abused Notion and malicious PDFs to harvest Microsoft authentication tokens Mon, 24 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/ https://www.infosecurity-magazine.com/news/researchers-thousands-eaked-aws/ Truffle Security says it found over 9000 publicly accessible and active AWS key pairs Mon, 24 Aug 2026 08:05:00 GMT https://www.infosecurity-magazine.com/news/researchers-thousands-eaked-aws/ https://www.infosecurity-magazine.com/news/ics-ai-attacks-siemens/ A US government advisory warned that attackers are deploying AI-generated exploitation scripts against exposed Siemens S7 Series PLCs Thu, 20 Aug 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/ics-ai-attacks-siemens/ https://www.infosecurity-magazine.com/news/critical-infrastructure-medusa/ The FBI warned that the RaaS operation has significantly enhanced its tactics, techniques and procedures, making it harder for defenders to counter Wed, 19 Aug 2026 10:50:00 GMT https://www.infosecurity-magazine.com/news/critical-infrastructure-medusa/ https://www.infosecurity-magazine.com/news/wordpress-plugin-flaw-40000-sites/ Critical User Profile Builder flaw let unauthenticated attackers access administrator accounts Mon, 17 Aug 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/wordpress-plugin-flaw-40000-sites/ https://www.infosecurity-magazine.com/news/etsi-proposes-17-cybersecurity/ The European Telecommunications Standards Institute has launched an approval process for standards vendors will have to meet under the Cyber Resilience Act Mon, 17 Aug 2026 11:15:00 GMT https://www.infosecurity-magazine.com/news/etsi-proposes-17-cybersecurity/ https://www.infosecurity-magazine.com/news/infostealers-17-billion/ Flashpoint data reveals infostealers were responsible for taking 1.7 billion credentials in the first half of 2026 Mon, 17 Aug 2026 07:30:00 GMT https://www.infosecurity-magazine.com/news/infostealers-17-billion/ https://www.infosecurity-magazine.com/blogs/rise-with-sap-idm-sunset-identity/ As SAP Identity Management approaches end of life and organizations transition to RISE with SAP, identity governance becomes a critical parallel initiative. This article explores key risks, migration strategies, and planning considerations, helping organizations modernize identity governance, maintain compliance, and avoid provisioning, access, and audit challenges during transformation Fri, 14 Aug 2026 09:00:00 GMT https://www.infosecurity-magazine.com/blogs/rise-with-sap-idm-sunset-identity/ https://www.infosecurity-magazine.com/news/gunra-ransomware-fortinet-flaws/ Gunra actors are using stealth to exfiltrate vast volumes of data from Microsoft services, US and Korean agencies have warned Wed, 12 Aug 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/gunra-ransomware-fortinet-flaws/ https://www.infosecurity-magazine.com/blogs/securing-service-desk-verification/ Discover how NHS organizations can strengthen service desk identity verification for mobile staff, locums and temporary workers while reducing risk Tue, 11 Aug 2026 07:30:00 GMT https://www.infosecurity-magazine.com/blogs/securing-service-desk-verification/ https://www.infosecurity-magazine.com/news/healthcare-victim-charities-beacon/ Beacon has informed around 1500 customer charities that its CRM databases were accessed and likely exfiltrated by an unauthorized actor Fri, 07 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/healthcare-victim-charities-beacon/ https://www.infosecurity-magazine.com/news/canadian-hacker-guilty-snowflake/ A Canadian hacker has admitted involvement in the widespread compromise of 165 Snowflake customer accounts used to steal data and extort victims Thu, 06 Aug 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/canadian-hacker-guilty-snowflake/ https://www.infosecurity-magazine.com/news/whatsapp-voting-scam-linked/ WhatsApp scam abused the Linked devices feature to hijack accounts without stealing any passwords Tue, 04 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/whatsapp-voting-scam-linked/ https://www.infosecurity-magazine.com/interviews/university-of-arts-london/ University of the Arts London's Keith Joy explains the unique cybersecurity challenges facing higher education and how institutions can secure users without restricting creativity Tue, 04 Aug 2026 09:06:00 GMT https://www.infosecurity-magazine.com/interviews/university-of-arts-london/ https://www.infosecurity-magazine.com/news/captivecrunch-midnight-blizzard/ Russian actor Storm-2945 hijacked hotel captive portals to push fake updates and steal tokens Mon, 03 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/captivecrunch-midnight-blizzard/ https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-july-2026/ Seven-figure purchase showcased how agentic AI and AI agent security are still at the forefront of industry leaders’ minds Fri, 31 Jul 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-july-2026/ https://www.infosecurity-magazine.com/news/aitm-phishing-top-entry-point-law/ AiTM phishing is now the top entry point into law firms, with identity behind 56% of threats Thu, 30 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/aitm-phishing-top-entry-point-law/ https://www.infosecurity-magazine.com/news/logokit-phishing-real-time/ LogoKit now builds per-victim phishing pages using live screenshots of the target's real website Wed, 29 Jul 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/logokit-phishing-real-time/ https://www.infosecurity-magazine.com/opinions/engineering-for-resilience/ Bad actors explore our digital supply chains to find weak links. We must fix these weaknesses Wed, 15 Jul 2026 09:01:00 GMT https://www.infosecurity-magazine.com/opinions/engineering-for-resilience/ https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/ Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA Mon, 13 Jul 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/ https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/ Zimperium found RedWing, an Android spyware sold as a service via Telegram to target banking apps Wed, 08 Jul 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/ https://www.infosecurity-magazine.com/blogs/where-organizations-fall-short/ While MFA is non-negotiable, traditional methods are increasingly vulnerable to phishing and fatigue attacks. This article explores why organizations must transition to phishing-resistant MFA, such as hardware keys, to effectively secure their workforce against today’s sophisticated threat landscape Tue, 07 Jul 2026 08:30:00 GMT https://www.infosecurity-magazine.com/blogs/where-organizations-fall-short/ https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-june-2026/ Industry Mergers and Acquisitions for June saw firms continue to position themselves to make offerings in an evolving threat landscape Fri, 03 Jul 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-june-2026/ https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/ The NCSC has shared best practice advice from pen testers which could help improve system resilience Thu, 02 Jul 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/ https://www.infosecurity-magazine.com/news/ousaban-banking-trojan-spain/ FortiGuard says the Brazilian banking trojan Ousaban is targeting Spain and Portugal via phishing Wed, 01 Jul 2026 13:45:00 GMT https://www.infosecurity-magazine.com/news/ousaban-banking-trojan-spain/ https://www.infosecurity-magazine.com/news/nissan-oracle-peoplesoft-zero-day/ Nissan says employees' data was stolen via the Oracle PeopleSoft zero-day campaign Tue, 30 Jun 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/nissan-oracle-peoplesoft-zero-day/ https://www.infosecurity-magazine.com/interviews/interview-shopify-ciso-andrew/ Millions of online stores, from global brands to independent retailers, rely on Shopify’s platform to sell their products. This is how the company deploys zero trust, bug bounties, AI and more to keep itself and its customers safe from evolving hacker threats Wed, 24 Jun 2026 08:00:00 GMT https://www.infosecurity-magazine.com/interviews/interview-shopify-ciso-andrew/ https://www.infosecurity-magazine.com/blogs/how-world-cup-password-trends/ Football-themed passwords remain a predictable weakness in enterprise environments. Drawing on analysis of more than 6.4 billion compromised passwords, this article explores how attackers exploit familiar patterns, where native Active Directory policy falls short, and how stronger controls can help organizations block weak and breached passwords before they create risk Tue, 23 Jun 2026 08:30:00 GMT https://www.infosecurity-magazine.com/blogs/how-world-cup-password-trends/ https://www.infosecurity-magazine.com/news/ncsc-fortinet-customers-tackle/ The NCSC has released guidance for Fortinet customers impacted by the FortiBleed threat campaign Mon, 22 Jun 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/ncsc-fortinet-customers-tackle/ https://www.infosecurity-magazine.com/news/rokarolla-android-banking-trojan/ Rokarolla Android trojan steals banking logins and spies on victims while blocking fraud alerts Tue, 16 Jun 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/rokarolla-android-banking-trojan/ https://www.infosecurity-magazine.com/news/quarter-identity-crime-victims/ Nearly 26% of identity crime victims faced multiple incidents in the past year, as ITRC warns of a growing "multi-layered crisis" Wed, 10 Jun 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/quarter-identity-crime-victims/ https://www.infosecurity-magazine.com/news/phpbb-authentication-bypass/ Critical phpBB authentication bypass lets attackers hijack any account with one request Tue, 09 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/phpbb-authentication-bypass/ https://www.infosecurity-magazine.com/news/jlr-cyberattack-ciso-inperson/ Speaking at Infosecurity Europe, Ashish Shrestha, former CISO at Jaguar Land Rover revealed why he wanted over 30,000 employees to change their passwords in the immediate aftermath of the incident Tue, 09 Jun 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/jlr-cyberattack-ciso-inperson/ https://www.infosecurity-magazine.com/news/chatgpt-lockdown-mode-active/ OpenAI brings Lockdown Mode and Active Sessions to ChatGPT to curb prompt injection data theft Mon, 08 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/chatgpt-lockdown-mode-active/ https://www.infosecurity-magazine.com/news/lloyds-agentic-ai-security-playbook/ Lloyds Banking Group shared its approach for securing agentic AI workflows, with a mix of hands on experimentation and cross functional governance Fri, 05 Jun 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/lloyds-agentic-ai-security-playbook/ https://www.infosecurity-magazine.com/news/everest-forms-pro-rce-actively/ Critical Everest Forms Pro RCE flaw exploited to create rogue WordPress admin accounts Thu, 04 Jun 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/everest-forms-pro-rce-actively/ https://www.infosecurity-magazine.com/news/ghost-stadium-fifa-world-cup-fraud/ Group-IB uncovered Ghost Stadium phishing and 4300 fake FIFA World Cup domains targeting fans Wed, 27 May 2026 11:28:00 GMT https://www.infosecurity-magazine.com/news/ghost-stadium-fifa-world-cup-fraud/ https://www.infosecurity-magazine.com/blogs/90-days-to-full-nhi-management/ Non-human identities now outnumber users, creating security gaps as governance lags. Limited visibility, stale credentials, and AI agents increase risk. Organizations need unified, real-time identity governance to control access, reduce breaches, and securely scale automation and AI in 90 days Mon, 25 May 2026 12:00:00 GMT https://www.infosecurity-magazine.com/blogs/90-days-to-full-nhi-management/ https://www.infosecurity-magazine.com/news/github-breach-nx-console-vs-code/ A threat actor compromised an Nx developer and posed as a legitimate maintainer to publish a malicious extension on Visual Studio Marketplace Thu, 21 May 2026 14:45:00 GMT https://www.infosecurity-magazine.com/news/github-breach-nx-console-vs-code/ https://www.infosecurity-magazine.com/news/linux-kernel-ptrace-flaw-ssh-keys/ Qualys finds nine-year-old Linux ptrace flaw exposing SSH keys and password hashes locally Thu, 21 May 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/linux-kernel-ptrace-flaw-ssh-keys/ https://www.infosecurity-magazine.com/news/verizon-dbir-exploits-top-access/ Verizon DBIR finds 31% of data breaches began with software flaws last year Wed, 20 May 2026 08:40:00 GMT https://www.infosecurity-magazine.com/news/verizon-dbir-exploits-top-access/ https://www.infosecurity-magazine.com/news/most-organizations-ai-agents/ Semperis study finds 74% of organizations believe AI will increase attacks on identity infrastructure Thu, 14 May 2026 09:20:00 GMT https://www.infosecurity-magazine.com/news/most-organizations-ai-agents/ https://www.infosecurity-magazine.com/news/avada-builder-flaws-one-million/ Avada Builder flaws allowed file read and SQL injection on one million WordPress sites Wed, 13 May 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/avada-builder-flaws-one-million/ https://www.infosecurity-magazine.com/news/pcpjack-campaign-boots-teampcp-off/ SentinelOne believes the PCPJack campaign may be the brainchild of a former TeamPCP member Fri, 08 May 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/pcpjack-campaign-boots-teampcp-off/ https://www.infosecurity-magazine.com/news/cloudz-rat-pheno-phone-link-otp/ Cisco Talos uncovers CloudZ RAT and Pheno plugin abusing Microsoft Phone Link to intercept SMS OTPs Wed, 06 May 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cloudz-rat-pheno-phone-link-otp/ https://www.infosecurity-magazine.com/news/iran-linked-apt-chaos-ransomware/ Rapid7 reveals an Iranian false flag operation masquerading as a Chaos ransomware attack Wed, 06 May 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/iran-linked-apt-chaos-ransomware/ https://www.infosecurity-magazine.com/news/one-eight-workers-sold-corporate/ Cifas says that 13% of employees admit selling company credentials to a former colleague Wed, 06 May 2026 08:40:00 GMT https://www.infosecurity-magazine.com/news/one-eight-workers-sold-corporate/ https://www.infosecurity-magazine.com/news/29-billion-compromised-credentials/ KELA claims infostealers remained the primary access vector for attacks in 2025 Wed, 29 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/29-billion-compromised-credentials/ https://www.infosecurity-magazine.com/news/ncsc-backs-passkeys-new-era-of/ The UK’s NCSC has fully backed passkeys as consumers’ first choice for login, citing progress with FIDO and successful use across the NHS Thu, 23 Apr 2026 08:45:00 GMT https://www.infosecurity-magazine.com/news/ncsc-backs-passkeys-new-era-of/ https://www.infosecurity-magazine.com/news/ncsc-silentglass-a-plugin-stop/ The UK’s cybersecurity agency said the devices will be available for purchase by organizations around the world Wed, 22 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/ncsc-silentglass-a-plugin-stop/ https://www.infosecurity-magazine.com/news/silent-subject-phishing-campaigns/ Null subject phishing campaigns bypass filters and target VIPs with QR code and RMM abuse Wed, 22 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/silent-subject-phishing-campaigns/ https://www.infosecurity-magazine.com/news/vercel-cyber-incident-threat-actor/ Cloud app developer Vercel appears to have suffered a security breach Tue, 21 Apr 2026 09:10:00 GMT https://www.infosecurity-magazine.com/news/vercel-cyber-incident-threat-actor/ https://www.infosecurity-magazine.com/news/ncsc-plan-boost-nhs-cyber/ The National Cyber Security Centre has shared an update of its resilience-building efforts for the NHS Mon, 20 Apr 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/ncsc-plan-boost-nhs-cyber/ https://www.infosecurity-magazine.com/opinions/passwords-weakest-link-phishing/ As traditional network perimeters continue to disappear, modern SaaS environments, remote work, and expanding third-party access have shifted cyber risk away from networks and toward how trust is established and enforced. Wed, 15 Apr 2026 14:00:00 GMT https://www.infosecurity-magazine.com/opinions/passwords-weakest-link-phishing/ https://www.infosecurity-magazine.com/news/researchers-surge-bruteforce/ Barracuda says 88% of brute-force attempts in Q1 were from the region Wed, 15 Apr 2026 09:45:00 GMT https://www.infosecurity-magazine.com/news/researchers-surge-bruteforce/ https://www.infosecurity-magazine.com/blogs/are-rainbow-tables-still-relevant/ Specops outlines the strong defenses organizations need today, from salted hashing and MFA to compromised password screening, to reduce risk from modern credential attacks Tue, 14 Apr 2026 08:30:00 GMT https://www.infosecurity-magazine.com/blogs/are-rainbow-tables-still-relevant/ https://www.infosecurity-magazine.com/news/mailbox-rule-abuse-stealthy-post/ Attackers are abusing Microsoft 365 mailbox rules to hide activity, exfiltrate data and retain access after account compromise, researchers warn Mon, 13 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/mailbox-rule-abuse-stealthy-post/ https://www.infosecurity-magazine.com/news/google-warns-group-targeting-bpos/ Google’s threat intel team warns UNC6783, a new extortion group possibly linked to the “Raccoon” persona, is targeting BPOs and enterprises Thu, 09 Apr 2026 08:35:00 GMT https://www.infosecurity-magazine.com/news/google-warns-group-targeting-bpos/ https://www.infosecurity-magazine.com/news/hackers-exploit-id-industrial-scale/ Cybersecurity company’s annual report issues warning over a “mass-marketed impersonation crisis” over attackers abusing legitimate credentials Wed, 25 Mar 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/hackers-exploit-id-industrial-scale/ https://www.infosecurity-magazine.com/blogs/blueprint-higher-education/ Discover how higher education IT leaders balance open access and locked‑down security to protect students, faculty, and sensitive campus data Wed, 25 Mar 2026 09:15:00 GMT https://www.infosecurity-magazine.com/blogs/blueprint-higher-education/ https://www.infosecurity-magazine.com/news/tycoon2fa-phishing-service-resumes/ Tycoon2FA phishing platform resumes activity post-takedown, leveraging AITM techniques to bypass MFA Mon, 23 Mar 2026 16:05:00 GMT https://www.infosecurity-magazine.com/news/tycoon2fa-phishing-service-resumes/ https://www.infosecurity-magazine.com/news/financial-brands-mobile-banking/ Mobile banking malware targets over 1200 financial apps globally, shifting fraud to user devices Thu, 19 Mar 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/financial-brands-mobile-banking/ https://www.infosecurity-magazine.com/news/android-attack-bypasses-payment/ Android’s LSPosed-based attack hijacks payment apps via runtime manipulation and SIM-binding bypass Tue, 17 Mar 2026 16:30:00 GMT https://www.infosecurity-magazine.com/news/android-attack-bypasses-payment/ https://www.infosecurity-magazine.com/blogs/identity-drift-risk-in-hybrid-ad/ Identity drift happens when password resets in AD or Entra ID don’t instantly update everywhere. Cached credentials and sync delays can leave old passwords active, creating a short but dangerous window attackers can exploit. Updating cached credentials and enforcing MFA helps close the gap and reduce the risk of compromised identities Tue, 17 Mar 2026 09:45:00 GMT https://www.infosecurity-magazine.com/blogs/identity-drift-risk-in-hybrid-ad/ https://www.infosecurity-magazine.com/news-features/what-cisos-should-know-and-do/ Infosecurity spoke to several experts, including OpenClaw’s own security advisor, to explore what CISOs should do to contain the viral AI agent tool’s security vulnerabilities Fri, 13 Mar 2026 14:05:00 GMT https://www.infosecurity-magazine.com/news-features/what-cisos-should-know-and-do/ https://www.infosecurity-magazine.com/news/organizations-test-identity-sec-6/ Only 24% of organizations test identity disaster recovery plans every 6 months, Quest Software said Tue, 10 Mar 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/organizations-test-identity-sec-6/ https://www.infosecurity-magazine.com/news/russian-hackers-target-military/ Dutch intelligence reveals Russian state hackers are trying to hijack the Signal and WhatsApp accounts of key targets Tue, 10 Mar 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/russian-hackers-target-military/ https://www.infosecurity-magazine.com/news/ai-security-startups-cyber/ Over one in five winners of IT-Harvest’s 2026 Cyber 150 are AI security companies Mon, 09 Mar 2026 13:25:00 GMT https://www.infosecurity-magazine.com/news/ai-security-startups-cyber/ https://www.infosecurity-magazine.com/news/zero-day-enterprise-record-high/ Almost a quarter of the zero days detected by Google in 2025 targeted security and networking appliances Fri, 06 Mar 2026 12:29:00 GMT https://www.infosecurity-magazine.com/news/zero-day-enterprise-record-high/ https://www.infosecurity-magazine.com/news/middle-east-conflict-surge-global/ Military strikes in the Middle East escalate cyber ops, raising spillover risks globally for firms Mon, 02 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/middle-east-conflict-surge-global/ https://www.infosecurity-magazine.com/news/cost-of-insider-incidents-surges/ DTEX claims insider incidents cost $19.5m in 2025, with employee negligence most expensive Tue, 24 Feb 2026 17:00:00 GMT https://www.infosecurity-magazine.com/news/cost-of-insider-incidents-surges/ https://www.infosecurity-magazine.com/news/bitpanda-mfa-phishing-scheme/ Phishing attack mimicking Bitpanda targets users, harvesting credentials and personal information Tue, 24 Feb 2026 16:05:00 GMT https://www.infosecurity-magazine.com/news/bitpanda-mfa-phishing-scheme/ https://www.infosecurity-magazine.com/news/ai-accelerates-attack-breakout/ ReliaQuest claims AI has reduced breakout and exfiltration time to under 10 minutes Tue, 24 Feb 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/ai-accelerates-attack-breakout/ https://www.infosecurity-magazine.com/news/ai-powered-cyberattacks-up/ CrowdStrike Global Threat Report warns how adversaries are leveraging AI to make campaigns more efficient and more effective Tue, 24 Feb 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/ai-powered-cyberattacks-up/ https://www.infosecurity-magazine.com/news/starkiller-phishing-kit-bypasses/ A new cybercriminal toolkit uses proxies to mimic popular online services and represents a “significant escalation in phishing infrastructure,” warn researchers at Abnormal Thu, 19 Feb 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/starkiller-phishing-kit-bypasses/ https://www.infosecurity-magazine.com/news/overprivileged-ai-45-times-higher/ Teleport study reveals that organizations running over-privileged AI have a 76% incident rate Tue, 17 Feb 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/overprivileged-ai-45-times-higher/ https://www.infosecurity-magazine.com/news/vulnerabilities-password-managers/ Security researchers have challenged end-to-end encryption claims from popular commercial password managers Mon, 16 Feb 2026 17:15:00 GMT https://www.infosecurity-magazine.com/news/vulnerabilities-password-managers/ https://www.infosecurity-magazine.com/news/sme-cyber-attack-threat-ncsc/ NCSC’s Richard Horne has warned that cybercriminals do not care about business size and called for SMEs to act now to secure their organizations Mon, 16 Feb 2026 16:30:00 GMT https://www.infosecurity-magazine.com/news/sme-cyber-attack-threat-ncsc/ https://www.infosecurity-magazine.com/opinions/safeguarding-solar-through-smarter/ Solar energy has been recognised by EU Institutions as critical infrastructure. This is what the industry must do to better protect itself from cyber threats. Fri, 13 Feb 2026 10:00:00 GMT https://www.infosecurity-magazine.com/opinions/safeguarding-solar-through-smarter/ https://www.infosecurity-magazine.com/news/men-charged-gambling-fraud-scheme/ Two Connecticut men face federal charges for a $3m scheme targeting online gambling platforms Mon, 09 Feb 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/men-charged-gambling-fraud-scheme/ https://www.infosecurity-magazine.com/blogs/five-single-signon-best-practices/ Understand five best practices to overcome the most common SSO failure points and how organizations can reduce identity risk in 2026 Tue, 03 Feb 2026 09:15:00 GMT https://www.infosecurity-magazine.com/blogs/five-single-signon-best-practices/ https://www.infosecurity-magazine.com/news/nsa-zero-trust-implementation/ NSA released new guidelines to help organizations achieve target-level Zero Trust maturity Mon, 02 Feb 2026 16:05:00 GMT https://www.infosecurity-magazine.com/news/nsa-zero-trust-implementation/ https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-jan-26/ 2026 has started with a string of cybersecurity industry mergers & acquisitions as vendors position themselves around agentic AI Mon, 02 Feb 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-jan-26/ https://www.infosecurity-magazine.com/news/android-rat-hugging-face-host/ Bitdefender has discovered a new Android malware campaign that uses Hugging Face Mon, 02 Feb 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/android-rat-hugging-face-host/ https://www.infosecurity-magazine.com/news/okta-flags-vishing-attacks-which/ Threat actors posing as IT support teams use phishing kits to generate fake login sites in real-time to trick victims into handing over credentials Mon, 26 Jan 2026 12:12:00 GMT https://www.infosecurity-magazine.com/news/okta-flags-vishing-attacks-which/ https://www.infosecurity-magazine.com/news/lastpass-phishing-master-passwords/ Phoney email alerts suggest users need to backup their LastPass accounts within 24 hours. LastPass says it would never require this action from users Thu, 22 Jan 2026 12:07:00 GMT https://www.infosecurity-magazine.com/news/lastpass-phishing-master-passwords/ https://www.infosecurity-magazine.com/news/loan-scam-harvests-cards-pins/ Loan phishing operation in Peru is stealing card info by impersonating financial institutions Wed, 21 Jan 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/loan-scam-harvests-cards-pins/ https://www.infosecurity-magazine.com/blogs/zero-trust-active-directory-modern/ Explore why Active Directory is the foundation of a zero trust strategy. Learn about common AD audit findings, excessive privileges, stale accounts, weak passwords and how zero trust principles, continuous monitoring and stronger password hygiene help reduce risk and protect identities Mon, 19 Jan 2026 09:15:00 GMT https://www.infosecurity-magazine.com/blogs/zero-trust-active-directory-modern/ https://www.infosecurity-magazine.com/news/codebuild-flaw-aws-console-risk/ A critical AWS CodeBuild misconfiguration has exposed core repositories to potential attack Thu, 15 Jan 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/codebuild-flaw-aws-console-risk/ https://www.infosecurity-magazine.com/news/wef-deepfake-faceswapping-security/ Researchers at the World Economic Forum have shown that threat actors can use commercial deepfake tools to bypass corporate security protections Fri, 09 Jan 2026 12:34:00 GMT https://www.infosecurity-magazine.com/news/wef-deepfake-faceswapping-security/ https://www.infosecurity-magazine.com/news/ai-truman-show-industrializes/ Check Point has uncovered a vast, AI-powered scam operation dubbed the “Truman Show” Fri, 09 Jan 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/ai-truman-show-industrializes/ https://www.infosecurity-magazine.com/news/gobruteforcer-botnet-linux-servers/ The GoBruteforcer botnet has been observed targeting exposed Linux servers on services like FTP and MySQL Thu, 08 Jan 2026 17:30:00 GMT https://www.infosecurity-magazine.com/news/gobruteforcer-botnet-linux-servers/ https://www.infosecurity-magazine.com/news/maximum-severity-ni8mare-bug/ A newly discovered vulnerability in authentication platform n8n could allow threat actors to take control of n8n servers Thu, 08 Jan 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/maximum-severity-ni8mare-bug/ https://www.infosecurity-magazine.com/news/mfa-failure-infostealer-breach-50/ Threat actor “Zestix” was able to breach around 50 firms using infostealers because they lacked multi-factor authentication Wed, 07 Jan 2026 09:45:00 GMT https://www.infosecurity-magazine.com/news/mfa-failure-infostealer-breach-50/ https://www.infosecurity-magazine.com/news/experts-trace-35m-stolen-crypto/ TRM Labs says it has recorded $35m drained from users’ wallets following 2022 LastPass breach Mon, 05 Jan 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/experts-trace-35m-stolen-crypto/ https://www.infosecurity-magazine.com/news-features/five-flaws-exploited-2025-software/ Infosecurity has selected five of the most significant vulnerability exploitation campaigns of 2025 that led to major software supply chain incidents Mon, 29 Dec 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news-features/five-flaws-exploited-2025-software/ https://www.infosecurity-magazine.com/news-features/biggest-cybersecurity-mergers/ Infosecurity explores the biggest cybersecurity mergers and acquisitions of 2025, including two mega-deals that reshaped the industry Thu, 25 Dec 2025 09:00:00 GMT https://www.infosecurity-magazine.com/news-features/biggest-cybersecurity-mergers/ https://www.infosecurity-magazine.com/opinions/how-pam-for-all-strengthens/ With major cyber-attacks accelerating and identity-based threats becoming the norm, the defensive mindset can no longer focus on a narrow group of administrators Fri, 19 Dec 2025 09:10:00 GMT https://www.infosecurity-magazine.com/opinions/how-pam-for-all-strengthens/ https://www.infosecurity-magazine.com/news/oauth-phishing-campaigns/ A surge in phishing attacks exploiting Microsoft’s OAuth device code flow has been identified by Proofpoint Thu, 18 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/oauth-phishing-campaigns/ https://www.infosecurity-magazine.com/news/jumpcloud-windows-agent-flaw/ A flaw in JumpCloud Remote Assist for Windows has exposed managed endpoints to local privilege escalation and denial-of-service attacks Tue, 16 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/jumpcloud-windows-agent-flaw/ https://www.infosecurity-magazine.com/news/defendant-pleads-guilty-fantasy/ A Minnesota man has pleaded guilty to a credential stuffing scheme that compromised over 60,000 accounts Mon, 15 Dec 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/defendant-pleads-guilty-fantasy/ https://www.infosecurity-magazine.com/news/top-25-dangerous-software/ MITRE has released its Top 25 CWE list for 2025, compiled from software and hardware flaws behind almost 40,000 CVEs Mon, 15 Dec 2025 10:45:00 GMT https://www.infosecurity-magazine.com/news/top-25-dangerous-software/ https://www.infosecurity-magazine.com/news/deadlock-ransomware-uses-byovd/ Cisco Talos has detected new tactics from a financially motivated actor using DeadLock ransomware Tue, 09 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/deadlock-ransomware-uses-byovd/ https://www.infosecurity-magazine.com/blogs/energy-operations-managing/ Energy companies face rising credential-based cyber threats as IT and OT systems converge. The article explains how legacy equipment, shared accounts and operational pressures complicate strong authentication Tue, 09 Dec 2025 08:00:00 GMT https://www.infosecurity-magazine.com/blogs/energy-operations-managing/ https://www.infosecurity-magazine.com/news/ico-demands-clarity-facial/ A Home Office report has revealed racial bias in facial recognition technology used by police Mon, 08 Dec 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/ico-demands-clarity-facial/ https://www.infosecurity-magazine.com/opinions/five-steps-to-stop-modern-fraud/ Five steps every organization should take to protect its people, processes and payments from the modern era of impersonation and fraud Fri, 05 Dec 2025 09:15:00 GMT https://www.infosecurity-magazine.com/opinions/five-steps-to-stop-modern-fraud/ https://www.infosecurity-magazine.com/news/star-blizzard-targets-reporters/ A fresh wave of spear-phishing linked to the Russia-based Star Blizzard group has been detected by Sekoia Wed, 03 Dec 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/star-blizzard-targets-reporters/ https://www.infosecurity-magazine.com/news/australian-man-seven-years-evil/ A Western Australia man will spend seven years behind bars after stealing intimate data via Wi-Fi Mon, 01 Dec 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/australian-man-seven-years-evil/ https://www.infosecurity-magazine.com/blogs/hardening-your-environment-for/ In this article, learn how CISOs can strengthen Active Directory, enforce strong password policies and implement MFA to achieve NIS2 compliance Thu, 27 Nov 2025 10:30:00 GMT https://www.infosecurity-magazine.com/blogs/hardening-your-environment-for/ https://www.infosecurity-magazine.com/news/scattered-lapsus-hunters-zendesk/ New phishing domains point to a campaign from the notorious Scattered Lapsus$ Hunters collective Thu, 27 Nov 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/scattered-lapsus-hunters-zendesk/ https://www.infosecurity-magazine.com/news/flexibleferret-malware-macos-go/ A new macOS malware chain using staged scripts and a Go-based backdoor has been attributed to FlexibleFerret, designed to steal credentials and maintain system access Tue, 25 Nov 2025 13:45:00 GMT https://www.infosecurity-magazine.com/news/flexibleferret-malware-macos-go/ https://www.infosecurity-magazine.com/news/ai-deepfake-fraud-skyrockets/ In its latest annual identity fraud report, Sumsub observed a “sophistication shift” in global fraud trends Tue, 25 Nov 2025 11:30:00 GMT https://www.infosecurity-magazine.com/news/ai-deepfake-fraud-skyrockets/ https://www.infosecurity-magazine.com/news/new-shaihulud-worm-trouble-npm/ A new version of the Shai-Hulud worm has infected hundreds of npm packages and caused disruption to global CI/CD workflows Tue, 25 Nov 2025 10:00:00 GMT https://www.infosecurity-magazine.com/news/new-shaihulud-worm-trouble-npm/ https://www.infosecurity-magazine.com/news/flaws-expose-risks-fluent-bit/ Critical flaws in Fluent Bit threaten telemetry across platforms according to an advisory published by Oligo Security researchers Mon, 24 Nov 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/flaws-expose-risks-fluent-bit/ https://www.infosecurity-magazine.com/news/half-ransomware-access-hijacked/ Beazley Security data finds the top cause of initial access for ransomware in Q3 was compromised VPN credentials Wed, 19 Nov 2025 09:40:00 GMT https://www.infosecurity-magazine.com/news/half-ransomware-access-hijacked/ https://www.infosecurity-magazine.com/blogs/beyond-the-password-security/ Compliance frameworks set essential cybersecurity standards, but checking boxes is not enough to prevent breaches. Continuous security requires proactive threat detection, breached password monitoring, and adaptive password policies that protect high-risk accounts. Specops Password Policy strengthens Active Directory defenses by bridging the gap between compliance, password security and real protection Wed, 19 Nov 2025 09:15:00 GMT https://www.infosecurity-magazine.com/blogs/beyond-the-password-security/ https://www.infosecurity-magazine.com/news/genai-deepfakes-digital-forgeries/ Entrust says AI is helping fraudsters open new accounts and bypass biometric checks Tue, 18 Nov 2025 10:45:00 GMT https://www.infosecurity-magazine.com/news/genai-deepfakes-digital-forgeries/ https://www.infosecurity-magazine.com/news/half-million-stolen-ftse-100/ Socura finds 460,000 compromised credentials belonging to FTSE 100 company employees Tue, 18 Nov 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/half-million-stolen-ftse-100/ https://www.infosecurity-magazine.com/blogs/sap-identity-framework-migration/ Explore the impact of SAP IdM and GRC end-of-life by 2027 and discover key considerations for migrating to new identity and governance solutions Wed, 12 Nov 2025 14:07:00 GMT https://www.infosecurity-magazine.com/blogs/sap-identity-framework-migration/ https://www.infosecurity-magazine.com/news/android-devices-targeted-konni-apt/ A new cyber-attack has been observed exploiting Google Find Hub to remotely wipe Android devices, linked to North Korean APTs Tue, 11 Nov 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/android-devices-targeted-konni-apt/ https://www.infosecurity-magazine.com/news/qilin-ransomware-activity-surges/ Qilin group ransomware incidents have surged in SMBs, exploiting security gaps and collaborating with Scattered Spider threat group Tue, 11 Nov 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/qilin-ransomware-activity-surges/ https://www.infosecurity-magazine.com/news/quantum-route-redirect-phishing/ KnowBe4 claims the new Quantum Route Redirect kit is supercharging phishing attacks on Microsoft365 users Tue, 11 Nov 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/quantum-route-redirect-phishing/ https://www.infosecurity-magazine.com/news/leading-ai-companies-secret-leaks/ A new study has revealed 65% of top AI firms have leaked sensitive data on GitHub, risking $400bn in assets Mon, 10 Nov 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/leading-ai-companies-secret-leaks/ https://www.infosecurity-magazine.com/opinions/how-the-tech-industry-got-identity/ Teleport CEO Ev Kontsevoy explains why identity management is broken and why it takes 11 hours to resolve a single breach Fri, 07 Nov 2025 10:10:00 GMT https://www.infosecurity-magazine.com/opinions/how-the-tech-industry-got-identity/ https://www.infosecurity-magazine.com/news/hacktivistdriven-ddos-attacks/ ENISA report reveals DDoS accounted for 60% of public sector security incidents last year Thu, 06 Nov 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/hacktivistdriven-ddos-attacks/ https://www.infosecurity-magazine.com/news/identity-is-now-the-top-cloud-risk/ ReliaQuest data reveals identity issues were responsible for 44% of cloud security alerts in Q3 Tue, 04 Nov 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news/identity-is-now-the-top-cloud-risk/ https://www.infosecurity-magazine.com/news/cisa-nsa-secure-exchange-servers/ CISA and NSA have released a blueprint to enhance Microsoft Exchange Server security against cyber-attacks Mon, 03 Nov 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/cisa-nsa-secure-exchange-servers/ https://www.infosecurity-magazine.com/news/php-servers-and-iot-devices-cyber/ A rise in attacks on PHP servers, IoT devices and cloud gateways is linked to botnets exploiting flaws, according to new research published by Qualys Wed, 29 Oct 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news/php-servers-and-iot-devices-cyber/ https://www.infosecurity-magazine.com/news/lumma-stealer-vacuum-filled-vidar-2/ Trend Micro believe security teams should anticipate increased Vidar 2.0 prevalence in campaigns through Q4 2025 Thu, 23 Oct 2025 11:00:00 GMT https://www.infosecurity-magazine.com/news/lumma-stealer-vacuum-filled-vidar-2/ https://www.infosecurity-magazine.com/news/microsoft-process-100-trillion/ Microsoft systems analyze over 100 trillion daily signals, suggesting dramatically increasing AI-driven cyber-threats Thu, 16 Oct 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-process-100-trillion/ https://www.infosecurity-magazine.com/news/whisper-2fa-behind-1m-phishing/ Whisper 2FA is now one of the most active PhaaS tools alongside Tycoon and EvilProxy, responsible for one million attacks since July 2025 Wed, 15 Oct 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/whisper-2fa-behind-1m-phishing/ https://www.infosecurity-magazine.com/news/legacy-windows-protocols-expose/ Legacy Windows protocols are still exposing organizations to credential theft, Resecurity found Tue, 14 Oct 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/legacy-windows-protocols-expose/ https://www.infosecurity-magazine.com/news/russia-hacktivistsattack-water/ Forescout said that the TwoNet actor was lured into attacking a honeypot disguised as a water treatment utility, providing insights into the group’s tactics Fri, 10 Oct 2025 09:15:00 GMT https://www.infosecurity-magazine.com/news/russia-hacktivistsattack-water/ https://www.infosecurity-magazine.com/news/sonicwall-cloud-firewall/ SonicWall said that a threat actor has accessed files containing encrypted credentials and configuration data for all customers who have used its cloud backup service Thu, 09 Oct 2025 12:10:00 GMT https://www.infosecurity-magazine.com/news/sonicwall-cloud-firewall/ https://www.infosecurity-magazine.com/news/redis-servers-remote-exploitation/ A critical Redis flaw, dubbed “RediShell,” has exposed 60,000 unprotected servers to exploitation Tue, 07 Oct 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/redis-servers-remote-exploitation/ https://www.infosecurity-magazine.com/opinions/security-teams-agentic-ai-risks/ Gitlab's Josh Lemos argues organizations must develop new approaches to identity management, network security, and data protection to mitigate risks to AI agents Fri, 03 Oct 2025 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/security-teams-agentic-ai-risks/ https://www.infosecurity-magazine.com/news/shortcut-credential-lures-deliver/ A new campaign has been observed using malicious Windows shortcuts in credential-themed ZIP files to deploy PowerShell script Wed, 01 Oct 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/shortcut-credential-lures-deliver/ https://www.infosecurity-magazine.com/news/sonicwall-ssl-vpn-attacks-escalate/ Akira ransomware attacks on SonicWall SSL VPN appliances are bypassing its MFA for rapid deployment Mon, 29 Sep 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/sonicwall-ssl-vpn-attacks-escalate/ https://www.infosecurity-magazine.com/blogs/how-to-use-a-password-audit/ This article explains how audits strengthen cybersecurity by exposing common gaps, enabling faster remediation and enforcing stronger policies Mon, 29 Sep 2025 10:10:00 GMT https://www.infosecurity-magazine.com/blogs/how-to-use-a-password-audit/ https://www.infosecurity-magazine.com/news/malicious-ai-agent-server/ The security researchers who discovered the malicious npm package called it the “first malicious MCP in the wild” Thu, 25 Sep 2025 16:30:00 GMT https://www.infosecurity-magazine.com/news/malicious-ai-agent-server/ https://www.infosecurity-magazine.com/news/deepfake-attacks-hit-twothirds-of/ Gartner research found that 62% of organizations have experienced a deepfake attack in the past 12 months Tue, 23 Sep 2025 14:45:00 GMT https://www.infosecurity-magazine.com/news/deepfake-attacks-hit-twothirds-of/ https://www.infosecurity-magazine.com/news/critical-security-flaws-grow-ai-use/ Rising hardware, API, and network flaws expose organizations to new risks in an AI-driven landscape Tue, 23 Sep 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/critical-security-flaws-grow-ai-use/ https://www.infosecurity-magazine.com/news/update-defenses-scattered-spider/ Experts at a Gartner event highlighted areas of focus in identity, processes and third-party risk management to tackle the novel tactics employed by Scattered Spider Mon, 22 Sep 2025 17:10:00 GMT https://www.infosecurity-magazine.com/news/update-defenses-scattered-spider/ https://www.infosecurity-magazine.com/news/sonicwall-compromise-cloud-backup/ SonicWall said that threat actors accessed firewall preference files stored in the cloud for around 5% of its firewall install base Thu, 18 Sep 2025 13:45:00 GMT https://www.infosecurity-magazine.com/news/sonicwall-compromise-cloud-backup/ https://www.infosecurity-magazine.com/news/microsoft-disrupts-phishing-kit/ Microsoft revealed it has seized 338 websites associated with RaccoonO365, a phishing kit which has stolen at least 5000 Microsoft credentials worldwide Wed, 17 Sep 2025 12:15:00 GMT https://www.infosecurity-magazine.com/news/microsoft-disrupts-phishing-kit/ https://www.infosecurity-magazine.com/news/supply-chain-worm-hundreds-npm/ A secret-stealing worm is spreading fast across the npm ecosystem, experts have warned Wed, 17 Sep 2025 10:20:00 GMT https://www.infosecurity-magazine.com/news/supply-chain-worm-hundreds-npm/ https://www.infosecurity-magazine.com/news/finwise-bank-warns-of-insider-data/ An insider data breach at FinWise may have impacted 689,000 customers Tue, 16 Sep 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/finwise-bank-warns-of-insider-data/ https://www.infosecurity-magazine.com/blogs/locking-down-ephemeral-accounts/ Explore the hidden risks of ephemeral accounts and discover how just-in-time (JIT) privilege elevation can enhance security without compromising operational efficiency Wed, 10 Sep 2025 08:40:00 GMT https://www.infosecurity-magazine.com/blogs/locking-down-ephemeral-accounts/ https://www.infosecurity-magazine.com/news/salty2fa-phishing-kit/ Salty2FA phishing campaign showcases advanced techniques and professionalism of cybercrime operations Tue, 09 Sep 2025 14:30:00 GMT https://www.infosecurity-magazine.com/news/salty2fa-phishing-kit/ https://www.infosecurity-magazine.com/news/salesloft-github-breach-drift/ Salesloft has revealed that threat actors targeted customer Salesforce data after breaching its GitHub account Tue, 09 Sep 2025 10:00:00 GMT https://www.infosecurity-magazine.com/news/salesloft-github-breach-drift/ https://www.infosecurity-magazine.com/news/macos-stealer-cracked-apps-bypass/ Trend Micro observed the attackers using terminal-based installation methods for the AMOS malware, luring macOS users into installing cracked versions of apps Fri, 05 Sep 2025 12:30:00 GMT https://www.infosecurity-magazine.com/news/macos-stealer-cracked-apps-bypass/ https://www.infosecurity-magazine.com/news/brazilian-fintech-giant-sinqia/ Evertec subsidiary Sinqia has posted details of an attempt to steal $130m from two B2B partners Wed, 03 Sep 2025 10:00:00 GMT https://www.infosecurity-magazine.com/news/brazilian-fintech-giant-sinqia/ https://www.infosecurity-magazine.com/news/azure-ad-credentials-exposed/ Experts have revealed an Azure AD vulnerability exposing ClientId and ClientSecret in a publicly accessible appsettings.json file Tue, 02 Sep 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/azure-ad-credentials-exposed/ https://www.infosecurity-magazine.com/news/salesloft-attacks-target-google/ Adversaries targeting the Salesloft Drift application integration with Salesforce have also compromised Google Workspace accounts Mon, 01 Sep 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/salesloft-attacks-target-google/ https://www.infosecurity-magazine.com/news/ransomware-deletes-data-backups/ Microsoft observed Storm-0501 pivot to the victim’s cloud environment to exfiltrate data rapidly and prevent the victim’s recovery Thu, 28 Aug 2025 09:05:00 GMT https://www.infosecurity-magazine.com/news/ransomware-deletes-data-backups/ https://www.infosecurity-magazine.com/news-features/legacy-it-strategic-priority-cisos/ Warnings about Windows 10's end-of-life date in October highlight the significant cyber risks posed by growing reliance on legacy IT Wed, 27 Aug 2025 11:30:00 GMT https://www.infosecurity-magazine.com/news-features/legacy-it-strategic-priority-cisos/ https://www.infosecurity-magazine.com/news/data-theft-campaign-salesforce/ Google is warning of a new credential theft campaign targeting Salesforce customers via Salesloft Drift Wed, 27 Aug 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/data-theft-campaign-salesforce/ https://www.infosecurity-magazine.com/news/attackers-virtual-servers/ Darktrace observed a coordinated campaign on customer SaaS accounts, all of which involved logins from IP addresses linked to VPS providers Fri, 22 Aug 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/attackers-virtual-servers/ https://www.infosecurity-magazine.com/news/orange-data-breach-sim-swapping/ Orange Belgium revealed that a threat actor has compromised 850,000 customer accounts, with SIM card numbers among the data accessed Thu, 21 Aug 2025 11:30:00 GMT https://www.infosecurity-magazine.com/news/orange-data-breach-sim-swapping/ https://www.infosecurity-magazine.com/news/nist-unveils-guidelines-spot-face/ NIST has released new guidelines examining the pros and cons of detection methods for face morphing software Thu, 21 Aug 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/nist-unveils-guidelines-spot-face/ https://www.infosecurity-magazine.com/news/warlock-ransomware-sharepoint/ Trend Micro highlighted a sophisticated post-compromise attack chain to deploy the Warlock ransomware in unpatched SharePoint on-prem environments Wed, 20 Aug 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/warlock-ransomware-sharepoint/ https://www.infosecurity-magazine.com/news/allianz-life-breach-exposes/ A cyber-attack on Allianz Life, linked to the ShinyHunters group, has exposed the personal information of 1.1 million customers Tue, 19 Aug 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/allianz-life-breach-exposes/ https://www.infosecurity-magazine.com/news/attacker-patches-vulnerability/ Red Canary observed the novel tactic in a cluster of activity targeting a legacy vulnerability to access cloud-based Linux systems Tue, 19 Aug 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/attacker-patches-vulnerability/ https://www.infosecurity-magazine.com/news/aussie-isp-iinet-breach-280000/ Over 280,000 customers of Australian ISP iiNet have been impacted by a data breach Tue, 19 Aug 2025 10:00:00 GMT https://www.infosecurity-magazine.com/news/aussie-isp-iinet-breach-280000/ https://www.infosecurity-magazine.com/news/chinese-apt-web-hosting-taiwan/ Cisco Talos observed the newly identified group compromise a Taiwanese web hosting provider to conduct a range of malicious activities Mon, 18 Aug 2025 13:45:00 GMT https://www.infosecurity-magazine.com/news/chinese-apt-web-hosting-taiwan/ https://www.infosecurity-magazine.com/news/cisco-critical-rce-flaw-firewall/ Cisco has issued a software update to address the vulnerability, which can allow an unauthenticated, remote attacker to inject arbitrary shell commands Fri, 15 Aug 2025 11:30:00 GMT https://www.infosecurity-magazine.com/news/cisco-critical-rce-flaw-firewall/ https://www.infosecurity-magazine.com/news/law-enforcement-government-emails/ Abnormal AI said gaining access to such accounts provides opportunities for sophisticated fraud schemes that impersonate officials Thu, 14 Aug 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news/law-enforcement-government-emails/ https://www.infosecurity-magazine.com/news/servers-unpatched-microsoft/ Over 29,000 Microsoft Exchange servers remain unpatched against a vulnerability that could allow attackers to seize control of entire domains in hybrid cloud environments Tue, 12 Aug 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/servers-unpatched-microsoft/ https://www.infosecurity-magazine.com/news/home-office-phishing-uk/ The sophisticated campaign aims to steal credentials of sponsor license holders to facilitate immigration fraud, extortion and other monetization schemes Tue, 12 Aug 2025 15:15:00 GMT https://www.infosecurity-magazine.com/news/home-office-phishing-uk/ https://www.infosecurity-magazine.com/news/cybercriminals-low-cost-initial/ Rapid7 found that threat actors are able to purchase low-cost initial access broker services, with many packages offering a variety of options Tue, 12 Aug 2025 14:30:00 GMT https://www.infosecurity-magazine.com/news/cybercriminals-low-cost-initial/ https://www.infosecurity-magazine.com/opinions/corporate-deepfake-safeguarding-ai/ Daryl Huff says businesses must fight fire with fire when it comes to defending against the rising corporate deepfake threat Fri, 08 Aug 2025 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/corporate-deepfake-safeguarding-ai/ https://www.infosecurity-magazine.com/news/microsoft-exchange-vulnerability/ Microsoft Exchange customers have been urged to apply fixes set out in a hybrid deployment security update published in April Thu, 07 Aug 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-exchange-vulnerability/ https://www.infosecurity-magazine.com/news/experts-alarmed-companies-house-id/ A UK government initiative to tackle Companies House fraud has raised security concerns Thu, 07 Aug 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/experts-alarmed-companies-house-id/ https://www.infosecurity-magazine.com/news/sonicwall-attacks-legacy-bug/ SonicWall has claimed an uptick in Akira ransomware intrusions is due to legacy password use Thu, 07 Aug 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/sonicwall-attacks-legacy-bug/ https://www.infosecurity-magazine.com/news/attackers-critical-apex-one/ Trend Micro has released a temporary fix for the flaws, which enable remote code execution on on-prem Apex One machines Wed, 06 Aug 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/attackers-critical-apex-one/ https://www.infosecurity-magazine.com/news/ghost-zip-behind-pxa-stealer/ Python-based PXA Stealer has stolen data from more than 4000 victims in over 62 countries, according to SentinalLabs Mon, 04 Aug 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/ghost-zip-behind-pxa-stealer/ https://www.infosecurity-magazine.com/news/uptick-akira-ransomware-actors/ Arctic Wolf has spotted an increase in Akira ransomware attacks targeting SonicWall SSL VPNs Mon, 04 Aug 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/uptick-akira-ransomware-actors/ https://www.infosecurity-magazine.com/news/staggering-800-rise-infostealer/ Flashpoint data reveals an 800% increase in credentials stolen via infostealers in just six months Fri, 01 Aug 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/staggering-800-rise-infostealer/ https://www.infosecurity-magazine.com/news-features/ma-roundup-palo-alto-acquire/ Cybersecurity giant Palo Alto Networks reached a definitive agreement to acquire identity security specialist CyberArk for $25bn Fri, 01 Aug 2025 09:00:00 GMT https://www.infosecurity-magazine.com/news-features/ma-roundup-palo-alto-acquire/ https://www.infosecurity-magazine.com/news/passwordless-years-microsoft/ Experts argue that password managers are still useful despite Microsoft Authenticator ditching its capabilities Thu, 31 Jul 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/passwordless-years-microsoft/ https://www.infosecurity-magazine.com/news/data-breach-costs-fall/ IBM found that the global average cost of a data breach has fallen by 9% compared to 2024, driven by improved detection and containment Wed, 30 Jul 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/data-breach-costs-fall/ https://www.infosecurity-magazine.com/news/owasp-agentic-ai-security-guidance/ The comprehensive guidance focuses on technical recommendations for securing agentic AI applications, from development to deployment Wed, 30 Jul 2025 09:00:00 GMT https://www.infosecurity-magazine.com/news/owasp-agentic-ai-security-guidance/ https://www.infosecurity-magazine.com/news/authentication-flaw-base44/ Flaw in Base44 allowed unauthorized access to private apps, bypassing authentication systems Tue, 29 Jul 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/authentication-flaw-base44/ https://www.infosecurity-magazine.com/news/cisa-kev-cisco-ise/ Hackers are actively exploiting two critical flaws in Cisco Identity Services Engine, said the US Cybersecurity and Infrastructure Security Agency Tue, 29 Jul 2025 13:15:00 GMT https://www.infosecurity-magazine.com/news/cisa-kev-cisco-ise/ https://www.infosecurity-magazine.com/news/chinese-espionage-targets-vmware/ Sygnia observed Chinese cyber campaign dubbed Fire Ant deploying sophisticated techniques to gain full compromise of victim environments, discovering isolated assets Fri, 25 Jul 2025 12:20:00 GMT https://www.infosecurity-magazine.com/news/chinese-espionage-targets-vmware/ https://www.infosecurity-magazine.com/news/ransomware-compromised-sharepoint/ Microsoft said Chinese actor Storm-2603 is deploying Warlock ransomware following the exploitation of vulnerabilities in on-prem SharePoint systems Thu, 24 Jul 2025 14:45:00 GMT https://www.infosecurity-magazine.com/news/ransomware-compromised-sharepoint/ https://www.infosecurity-magazine.com/news/new-york-cybersecurity-regulations/ A series of new cybersecurity regulations related to the water industry have been set out by New York state agencies Wed, 23 Jul 2025 15:45:00 GMT https://www.infosecurity-magazine.com/news/new-york-cybersecurity-regulations/ https://www.infosecurity-magazine.com/news/france-data-breach-jobseekers/ The French employment agency’s partner web portal has been accessed by a malicious actor Wed, 23 Jul 2025 12:20:00 GMT https://www.infosecurity-magazine.com/news/france-data-breach-jobseekers/ https://www.infosecurity-magazine.com/news/us-government-interlockattacks/ A joint US government advisory highlighted novel initial access techniques deployed by Interlock, and urged businesses and critical infrastructure to stay vigilant Wed, 23 Jul 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/us-government-interlockattacks/ https://www.infosecurity-magazine.com/news/russian-hackers-target-ngos-oauth/ A new wave of phishing attacks exploiting Microsoft 365 OAuth tools has been observed impersonating diplomats to steal access codes Tue, 22 Jul 2025 17:15:00 GMT https://www.infosecurity-magazine.com/news/russian-hackers-target-ngos-oauth/ https://www.infosecurity-magazine.com/news/microsoft-compromising-sharepoint/ On-prem SharePoint customers have been told to assume compromise, with attackers observed to be exfiltrating data from victim servers across critical sectors Mon, 21 Jul 2025 11:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-compromising-sharepoint/ https://www.infosecurity-magazine.com/blogs/how-iam-control-prevent-major/ Why self-service password reset with MFA is more than just a convenience – it’s a critical layer of defense Wed, 16 Jul 2025 10:10:00 GMT https://www.infosecurity-magazine.com/blogs/how-iam-control-prevent-major/ https://www.infosecurity-magazine.com/news/saas-security-adoption-grows/ The latest report from AppOmni has revealed 91% confidence in SaaS security while 75% of organizations have faced incidents Tue, 15 Jul 2025 14:15:00 GMT https://www.infosecurity-magazine.com/news/saas-security-adoption-grows/ https://www.infosecurity-magazine.com/news/ms-chairman-declines-ransom-payment/ M&S chairman Archie Norman provided more insights into the April ransomware attack, but did not confirm whether a payment was made to the attackers Wed, 09 Jul 2025 09:20:00 GMT https://www.infosecurity-magazine.com/news/ms-chairman-declines-ransom-payment/ https://www.infosecurity-magazine.com/blogs/worried-consumers-data-breach/ Specops discuss the action consumers should take when they receive a data breach notification Wed, 09 Jul 2025 09:15:00 GMT https://www.infosecurity-magazine.com/blogs/worried-consumers-data-breach/ https://www.infosecurity-magazine.com/news/scattered-spider-phishing-domains/ Check Point discovered around 500 suspected Scattered Spider phishing domains, suggesting the group is preparing to expand its targeting Tue, 08 Jul 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/scattered-spider-phishing-domains/ https://www.infosecurity-magazine.com/news/hackers-target-employee-credentials/ Cybersecurity researchers have observed a 156% increase in credential theft incidents between 2024 and Q1 2025 Mon, 07 Jul 2025 12:15:00 GMT https://www.infosecurity-magazine.com/news/hackers-target-employee-credentials/ https://www.infosecurity-magazine.com/news/qantas-contacted-cybercriminal/ Qantas said it is currently validating the contact, and has informed law enforcement Mon, 07 Jul 2025 10:45:00 GMT https://www.infosecurity-magazine.com/news/qantas-contacted-cybercriminal/ https://www.infosecurity-magazine.com/news/privilege-escalation-flaw-azure-ml/ A critical Azure Machine Learning flaw allows privilege escalation, risking subscription compromise Thu, 03 Jul 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/privilege-escalation-flaw-azure-ml/ https://www.infosecurity-magazine.com/news-features/the-rising-cyber-threats-impacting/ Data extortion attacks are impacting carriers like Qantas, WestJet and Hawaiian Airlines, as the FBI issues a critical warning ahead of the busy summer travel season Wed, 02 Jul 2025 16:15:00 GMT https://www.infosecurity-magazine.com/news-features/the-rising-cyber-threats-impacting/ https://www.infosecurity-magazine.com/news/crypto-hack-losses-half-exceed-2024/ CertiK found $2.47bn in crypto was stolen in H1 2025, largely due to two major security incidents – ByBit and Cetus Tue, 01 Jul 2025 12:15:00 GMT https://www.infosecurity-magazine.com/news/crypto-hack-losses-half-exceed-2024/ https://www.infosecurity-magazine.com/news/it-worker-jailed-revenge-attack/ An IT worker has been jailed for launching a cyber-attack after he was suspended at work Mon, 30 Jun 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/it-worker-jailed-revenge-attack/ https://www.infosecurity-magazine.com/news/half-customer-signups-now/ Okta says over 46% of new customer registrations are bot-driven fraud attempts Wed, 25 Jun 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/half-customer-signups-now/ https://www.infosecurity-magazine.com/news/cyber-essentials-breaks-quarterly/ The UK government’s Cyber Essentials scheme hits 10,000 certifications for the first time in a quarter but challenges persist Mon, 23 Jun 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/cyber-essentials-breaks-quarterly/ https://www.infosecurity-magazine.com/news/meta-introduce-full-passkey-support/ Around half of the world’s top 100 websites have already integrated passkey support Fri, 20 Jun 2025 12:45:00 GMT https://www.infosecurity-magazine.com/news/meta-introduce-full-passkey-support/ https://www.infosecurity-magazine.com/news/russia-expert-elite-hackers-us/ A prominent expert on Russian information operations was targeted by a sophisticated spear phishing attack likely coming from Russian hackers Fri, 20 Jun 2025 09:00:00 GMT https://www.infosecurity-magazine.com/news/russia-expert-elite-hackers-us/ https://www.infosecurity-magazine.com/news/linux-flaws-allowing-root-access/ Two critical Linux flaws allow unprivileged users to gain root access, affecting major distributions Wed, 18 Jun 2025 16:15:00 GMT https://www.infosecurity-magazine.com/news/linux-flaws-allowing-root-access/ https://www.infosecurity-magazine.com/news/ico-fines-23andme-23m-data/ 23andMe has been fined over £2m by the UK ICO for failing to adequately protect genetic data Tue, 17 Jun 2025 14:55:00 GMT https://www.infosecurity-magazine.com/news/ico-fines-23andme-23m-data/ https://www.infosecurity-magazine.com/news/nist-zero-trust-implementation/ The new NIST guidance sets out 19 example implementations of zero trust using commercial, off-the-shelf technologies Thu, 12 Jun 2025 11:40:00 GMT https://www.infosecurity-magazine.com/news/nist-zero-trust-implementation/ https://www.infosecurity-magazine.com/news/android-enterprise-security-updates/ Android Enterprise has introduced features for mobile security, device management and user productivity in its latest update Tue, 10 Jun 2025 19:00:00 GMT https://www.infosecurity-magazine.com/news/android-enterprise-security-updates/ https://www.infosecurity-magazine.com/news/cyber-trends-cisos-know/ Experts at Infosecurity Europe 2025 highlighted a range of major industry trends, from advanced social engineering techniques to vulnerability exploits Fri, 06 Jun 2025 12:15:00 GMT https://www.infosecurity-magazine.com/news/cyber-trends-cisos-know/ https://www.infosecurity-magazine.com/news/infosec2025-securing-endpoints/ Endpoint and network security is still essential, even as malicious actors turn to supply chains, identities and AI Thu, 05 Jun 2025 09:15:00 GMT https://www.infosecurity-magazine.com/news/infosec2025-securing-endpoints/ https://www.infosecurity-magazine.com/news/majority-compromises-stolen/ Rapid7 found that 56% of all compromises in Q1 2025 resulted from the theft of valid account credentials with no MFA in place Wed, 04 Jun 2025 09:00:00 GMT https://www.infosecurity-magazine.com/news/majority-compromises-stolen/ https://www.infosecurity-magazine.com/news/linux-vulnerabilities-expose/ Two local information disclosure flaws in Linux crash-reporting tools have been identified exposing system data to attackers Mon, 02 Jun 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/linux-vulnerabilities-expose/ https://www.infosecurity-magazine.com/news/russian-state-group-europe-america/ A newly-discovered Russian group, Void Blizzard, has successfully compromised organizations in critical industries, Microsoft warned Wed, 28 May 2025 09:15:00 GMT https://www.infosecurity-magazine.com/news/russian-state-group-europe-america/ https://www.infosecurity-magazine.com/news/cyber-criminals-mimic-kling-ai/ A new malware campaign disguised as Kling AI used fake Facebook ads and counterfeit websites to distribute an infostealer Wed, 21 May 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/cyber-criminals-mimic-kling-ai/ https://www.infosecurity-magazine.com/news/flaw-google-cloud-security-concerns/ Patched privilege escalation flaw in Google Cloud Platform linked to wider cloud security concerns Wed, 21 May 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/flaw-google-cloud-security-concerns/ https://www.infosecurity-magazine.com/news/twofifths-americans-want-ban/ ITRC report finds that 39% of American consumers believe biometric use should be banned Wed, 21 May 2025 11:15:00 GMT https://www.infosecurity-magazine.com/news/twofifths-americans-want-ban/ https://www.infosecurity-magazine.com/news/genai-cyber-risks-investment/ Thales found that 73% of organizations are investing in AI-specific security tools, amid surging takeup of GenAI tools in enterprises Tue, 20 May 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news/genai-cyber-risks-investment/ https://www.infosecurity-magazine.com/news/23andme-buyer-regeneron-prioritize/ Regeneron, which intends to acquire 23andMe for $256m, says data security and privacy will be a priority Tue, 20 May 2025 10:00:00 GMT https://www.infosecurity-magazine.com/news/23andme-buyer-regeneron-prioritize/ https://www.infosecurity-magazine.com/news/sec-sim-swapper-14-months-x/ An Alabama man has been sentenced to 14 months for hacking the SEC’s X account Mon, 19 May 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/sec-sim-swapper-14-months-x/ https://www.infosecurity-magazine.com/news/infosec2025-cisos-evolving-cloud/ Security experts tell Infosecurity about the cloud attack trends in the past year, and how CISOs can mitigate evolving techniques Mon, 19 May 2025 09:00:00 GMT https://www.infosecurity-magazine.com/news/infosec2025-cisos-evolving-cloud/ https://www.infosecurity-magazine.com/news/endemic-ransomware-nhs-supplier/ The voluntary cybersecurity charter asks NHS suppliers to commit to eight cybersecurity pledges, amid rising attacks on healthcare Thu, 15 May 2025 13:30:00 GMT https://www.infosecurity-magazine.com/news/endemic-ransomware-nhs-supplier/ https://www.infosecurity-magazine.com/blogs/rethinking-account-takeover/ In today’s threat landscape, companies need more than MFA enforcement. They need smarter, layered security controls that defend against MFA bypasses Wed, 14 May 2025 10:15:00 GMT https://www.infosecurity-magazine.com/blogs/rethinking-account-takeover/ https://www.infosecurity-magazine.com/news/powerschool-ransom-payment/ PowerSchool said its customers had been hit by new extortion demands using data stolen in a previous attack, despite attacker claims the data had been deleted Fri, 09 May 2025 09:15:00 GMT https://www.infosecurity-magazine.com/news/powerschool-ransom-payment/ https://www.infosecurity-magazine.com/news/us-alert-unsophisticated-ot-cyber/ Cyber incidents targeting OT in US critical infrastructure have prompted renewed federal action Thu, 08 May 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/us-alert-unsophisticated-ot-cyber/ https://www.infosecurity-magazine.com/news/russian-group-lostkeys-malware/ New LOSTKEYS malware has been identified and linked to COLDRIVER by GTIG, stealing files and system data in targeted attacks Thu, 08 May 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/russian-group-lostkeys-malware/ https://www.infosecurity-magazine.com/news/passkeys-govuk-accounts/ The UK government has announced that it will be replace its current SMS verification system with passkeys by the end of 2025 Wed, 07 May 2025 12:30:00 GMT https://www.infosecurity-magazine.com/news/passkeys-govuk-accounts/ https://www.infosecurity-magazine.com/blogs/breached-passwords-account/ The rise of AI-generated deepfakes, automated credential stuffing, and advanced fraud tools has made ATO attacks even more effective at bypassing security defenses Wed, 07 May 2025 10:45:00 GMT https://www.infosecurity-magazine.com/blogs/breached-passwords-account/ https://www.infosecurity-magazine.com/news/uks-ncsc-security-tips-coop-data/ The National Cyber Security Centre has published advice for retailers while the Co-op admits customer data was stolen Tue, 06 May 2025 10:20:00 GMT https://www.infosecurity-magazine.com/news/uks-ncsc-security-tips-coop-data/ https://www.infosecurity-magazine.com/news/third-online-users-hacks-passwords/ FIDO Alliance found an uptick in awareness and takeup of passkeys as an alternative method to passwords Fri, 02 May 2025 10:45:00 GMT https://www.infosecurity-magazine.com/news/third-online-users-hacks-passwords/ https://www.infosecurity-magazine.com/news/ico-no-action-british-library/ The ICO has decided not to fine the British Library for a 2023 ransomware breach Thu, 01 May 2025 10:45:00 GMT https://www.infosecurity-magazine.com/news/ico-no-action-british-library/ https://www.infosecurity-magazine.com/news/fbi-publishes-42000-labhost/ The FBI has released details of 42,000 phishing domains associated with the LabHost operation, in order to help the security community Thu, 01 May 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/fbi-publishes-42000-labhost/ https://www.infosecurity-magazine.com/news/jpmorgan-ciso-warns-saas-security/ JPMorgan’s CISO has argued that SaaS apps represent a growing risk to businesses, “quietly enabling cyber attackers” Wed, 30 Apr 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/jpmorgan-ciso-warns-saas-security/ https://www.infosecurity-magazine.com/news/infostealers-harvest-banking/ Dvuln researchers highlighted the growing impact of infostealers on the cybercrime landscape, enabling attackers to bypass traditional defenses Tue, 29 Apr 2025 12:15:00 GMT https://www.infosecurity-magazine.com/news/infostealers-harvest-banking/ https://www.infosecurity-magazine.com/opinions/ursala-ai-wants-voice/ Leeza Garber discusses the unique cybersecurity challenges posed by AI voice cloning technologies Fri, 25 Apr 2025 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/ursala-ai-wants-voice/ https://www.infosecurity-magazine.com/news/elenor-corp-ransomware-targets/ ELENOR-corp ransomware, a new version of Mimic, is targeting healthcare organizations using advanced capabilities Thu, 24 Apr 2025 18:00:00 GMT https://www.infosecurity-magazine.com/news/elenor-corp-ransomware-targets/ https://www.infosecurity-magazine.com/news/microsoft-secure-initiative/ The tech giant has released its second Secure Future Initiative (SFI) progress report, showcasing its ongoing efforts to improve cybersecurity Tue, 22 Apr 2025 17:30:00 GMT https://www.infosecurity-magazine.com/news/microsoft-secure-initiative/ https://www.infosecurity-magazine.com/opinions/resilience-age-ai-cybercrime/ Dan Lohrmann explains why next era of cyber resilience demands a proactive mindset that fuses AI-powered defense, identity-first security and operational agility Fri, 18 Apr 2025 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/resilience-age-ai-cybercrime/ https://www.infosecurity-magazine.com/news/identity-attacks-now-comprise/ IBM warns of infostealer surge as attackers automate credential theft and adopt AI to generate highly convincing phishing emails en masse Thu, 17 Apr 2025 11:00:00 GMT https://www.infosecurity-magazine.com/news/identity-attacks-now-comprise/ https://www.infosecurity-magazine.com/news/92-mobile-apps-insecure/ Study reveals 92% of mobile apps use insecure cryptographic methods, exposing millions to data risks Wed, 16 Apr 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/92-mobile-apps-insecure/ https://www.infosecurity-magazine.com/news/wordpress-plugin-flaw-exploited-4/ Flaw in SureTriggers plugin allows unauthenticated users to create admin accounts on WordPress sites Mon, 14 Apr 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/wordpress-plugin-flaw-exploited-4/ https://www.infosecurity-magazine.com/news/aipowered-akirabot-captcha-spam/ A new AI-powered framework dubbed “AkiraBot” has successfully spammed 80,000 websites since September 2024 Thu, 10 Apr 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/aipowered-akirabot-captcha-spam/ https://www.infosecurity-magazine.com/news/precision-validated-phishing/ New phishing method targets high-value accounts using real-time email validation Wed, 09 Apr 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/precision-validated-phishing/ https://www.infosecurity-magazine.com/blogs/can-ai-help-protect-passwords-from/ AI is revolutionizing cybersecurity by both enabling hackers and empowering defenders. It enhances password protection through adaptive authentication, real-time threat detection, and behavioral biometrics, while also being exploited for sophisticated attacks like phishing, credential stuffing, and MFA bypass. Organizations must leverage AI-driven tools to counter evolving threats Wed, 09 Apr 2025 10:15:00 GMT https://www.infosecurity-magazine.com/blogs/can-ai-help-protect-passwords-from/ https://www.infosecurity-magazine.com/news/aussie-pension-savers-hit/ Cyber-attacks on Australian superannuation funds leave some savers out of pocket Mon, 07 Apr 2025 10:00:00 GMT https://www.infosecurity-magazine.com/news/aussie-pension-savers-hit/ https://www.infosecurity-magazine.com/news/half-attacks-electricity-water/ Semperis claims 62% of water and electricity providers were hit by cyber-attacks in the past year Thu, 03 Apr 2025 10:05:00 GMT https://www.infosecurity-magazine.com/news/half-attacks-electricity-water/