<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <link>https://www.infosecurity-magazine.com/industry-announcements/</link>
    <copyright>Copyright © 2026 Reed Exhibitions Ltd. All Rights Reserved.</copyright>
    <item>
      <title>Fake Recruiter Scams Target Corporate Credentials on Mobile</title>
      <link>https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/</link>
      <description>RecruitTrap campaigns use mobile-optimized phishing pages to target enterprise credentials</description>
      <pubDate>Tue, 25 Aug 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/</guid>
    </item>
    <item>
      <title>Australia Warns of Active Exploitation of Critical TeamCity Server Flaw</title>
      <link>https://www.infosecurity-magazine.com/news/australia-exploitation-teamcity/</link>
      <description>Australian officials are urging TeamCity customers to patch an actively exploited critical flaw, which follows a similar warning from the US government</description>
      <pubDate>Tue, 25 Aug 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/australia-exploitation-teamcity/</guid>
    </item>
    <item>
      <title>NIST Warns of Unique Security Risks in Multi-Cloud Environments</title>
      <link>https://www.infosecurity-magazine.com/news/nist-risks-multi-cloud/</link>
      <description>NIST has set out 23 novel challenges that arise in multi-cloud environments and has encouraged the cyber community to find solutions</description>
      <pubDate>Mon, 24 Aug 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nist-risks-multi-cloud/</guid>
    </item>
    <item>
      <title>New Agent Tesla Malware Variant Boosts Evasion Capabilities</title>
      <link>https://www.infosecurity-magazine.com/news/agent-tesla-malware-evasion/</link>
      <description>An Agent Tesla v4 malware campaign used novel emoji-based code obfuscation to evade detection, KnowBe4 has revealed</description>
      <pubDate>Fri, 21 Aug 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/agent-tesla-malware-evasion/</guid>
    </item>
    <item>
      <title>ICS Operators Warned of AI-Driven Attacks on Siemens PLCs</title>
      <link>https://www.infosecurity-magazine.com/news/ics-ai-attacks-siemens/</link>
      <description>A US government advisory warned that attackers are deploying AI-generated exploitation scripts against exposed Siemens S7 Series PLCs</description>
      <pubDate>Thu, 20 Aug 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ics-ai-attacks-siemens/</guid>
    </item>
    <item>
      <title>Exclusive: Linux Foundation's Akrites to Go Live in September</title>
      <link>https://www.infosecurity-magazine.com/news/linux-foundations-akrites-go-live/</link>
      <description>The Linux Foundation's Akrites initiative will become operational in September, when it will begin accepting AI-powered vulnerability reports for open-source projects</description>
      <pubDate>Wed, 19 Aug 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/linux-foundations-akrites-go-live/</guid>
    </item>
    <item>
      <title>Grandoreiro Resurfaces in Mexico With New DLL Sideloading Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/grandoreiro-mexico-dll-sideloading/</link>
      <description>Grandoreiro is active after its 2024 disruption, with Mexico now accounting for 40% of detections</description>
      <pubDate>Wed, 19 Aug 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/grandoreiro-mexico-dll-sideloading/</guid>
    </item>
    <item>
      <title>Over 500 Critical Infrastructure Organizations Hit by Medusa Ransomware</title>
      <link>https://www.infosecurity-magazine.com/news/critical-infrastructure-medusa/</link>
      <description>The FBI warned that the RaaS operation has significantly enhanced its tactics, techniques and procedures, making it harder for defenders to counter</description>
      <pubDate>Wed, 19 Aug 2026 10:50:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/critical-infrastructure-medusa/</guid>
    </item>
    <item>
      <title>Enterprise Applications Carry 4.31x More Critical and High Vulnerabilities</title>
      <link>https://www.infosecurity-magazine.com/news/enterprise-apps-critical-high/</link>
      <description>Enterprise software creation has accelerated as vulnerability levels rise, Sonatype finds</description>
      <pubDate>Tue, 18 Aug 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/enterprise-apps-critical-high/</guid>
    </item>
    <item>
      <title>Novel macOS Infostealer AmnesiaStealer Spread via ClickFix</title>
      <link>https://www.infosecurity-magazine.com/news/macos-infostealer-spread-clickfix/</link>
      <description>AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data</description>
      <pubDate>Fri, 14 Aug 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/macos-infostealer-spread-clickfix/</guid>
    </item>
    <item>
      <title>vCenter Flaw Exploited Just Five Days After Disclosure</title>
      <link>https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/</link>
      <description>Attackers exploited a critical-severity vCenter flaw five days after Broadcom disclosed it</description>
      <pubDate>Thu, 13 Aug 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/</guid>
    </item>
    <item>
      <title>Trump Authorizes Private Sector Participation in Offensive Cyber Operations</title>
      <link>https://www.infosecurity-magazine.com/news/trump-private-offensive-cyber/</link>
      <description>The White House has authorized government-directed offensive cyber operations against transnational groups, prompting warnings over escalation and attribution risks</description>
      <pubDate>Thu, 13 Aug 2026 12:35:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trump-private-offensive-cyber/</guid>
    </item>
    <item>
      <title>Lazarus Used Post-Quantum Key Exchange to Deliver Zero-Day</title>
      <link>https://www.infosecurity-magazine.com/news/lazarus-post-quantum-key-dream-job/</link>
      <description>Lazarus malware used post-quantum key exchange to protect delivery of a Windows zero-day exploit</description>
      <pubDate>Wed, 12 Aug 2026 13:35:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/lazarus-post-quantum-key-dream-job/</guid>
    </item>
    <item>
      <title>Gunra Ransomware Exploits Fortinet Flaws to Target Critical Infrastructure</title>
      <link>https://www.infosecurity-magazine.com/news/gunra-ransomware-fortinet-flaws/</link>
      <description>Gunra actors are using stealth to exfiltrate vast volumes of data from Microsoft services, US and Korean agencies have warned</description>
      <pubDate>Wed, 12 Aug 2026 13:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gunra-ransomware-fortinet-flaws/</guid>
    </item>
    <item>
      <title>Six npm Packages Read C2 Addresses From Ethereum Wallet</title>
      <link>https://www.infosecurity-magazine.com/news/npm-packages-ethereum-wallet-c2/</link>
      <description>Six npm packages queried an Ethereum wallet to locate C2 infrastructure</description>
      <pubDate>Tue, 11 Aug 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/npm-packages-ethereum-wallet-c2/</guid>
    </item>
    <item>
      <title>“Ghostjacking” Exploits AI Agents’ Trusted Access to Evade Firewall Controls</title>
      <link>https://www.infosecurity-magazine.com/news/ghostjacking-ai-gents-access/</link>
      <description>Tenet reported that half of Fortune 500 companies are vulnerable to the Ghostjacking technique, which involves tricking AI agents with fake reports</description>
      <pubDate>Mon, 10 Aug 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ghostjacking-ai-gents-access/</guid>
    </item>
    <item>
      <title>Ransomware Surges in July After Q2 Lull</title>
      <link>https://www.infosecurity-magazine.com/news/ransomware-surges-july-q2-lull/</link>
      <description>Finance, technology and healthcare sectors were particularly heavily targeted in July, according to Comparitech</description>
      <pubDate>Fri, 07 Aug 2026 08:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ransomware-surges-july-q2-lull/</guid>
    </item>
    <item>
      <title>TeamPCP Traced Back to 2020 Cryptojacking Operation</title>
      <link>https://www.infosecurity-magazine.com/news/teampcp-shadowray-ta-natalstatus/</link>
      <description>Oligo Security has linked TeamPCP to ShadowRay 2.0 and to cryptojacking infrastructure dating back to 2020</description>
      <pubDate>Thu, 06 Aug 2026 14:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/teampcp-shadowray-ta-natalstatus/</guid>
    </item>
    <item>
      <title>Canadian Hacker Pleads Guilty Over Snowflake Extortion Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/canadian-hacker-guilty-snowflake/</link>
      <description>A Canadian hacker has admitted involvement in the widespread compromise of 165 Snowflake customer accounts used to steal data and extort victims</description>
      <pubDate>Thu, 06 Aug 2026 10:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/canadian-hacker-guilty-snowflake/</guid>
    </item>
    <item>
      <title>NVIDIA Group Proposes SAFE Initiative for Agentic Threat Intel Sharing</title>
      <link>https://www.infosecurity-magazine.com/news/safe-initiative-agentic-threat/</link>
      <description>The Open Secure AI Alliance has announced plans for the Shared AI Findings Exchange (SAFE)</description>
      <pubDate>Thu, 06 Aug 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/safe-initiative-agentic-threat/</guid>
    </item>
    <item>
      <title>Fake Open VSX Extensions Harvest Private Repo and CI Data</title>
      <link>https://www.infosecurity-magazine.com/news/open-vsx-evil-twin-extensions-git/</link>
      <description>77 counterfeit Open VSX extensions beaconed to one domain, 19 harvesting git and CI identity</description>
      <pubDate>Wed, 05 Aug 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/open-vsx-evil-twin-extensions-git/</guid>
    </item>
    <item>
      <title>Prompt Injection Remains Biggest LLM Risk, Despite Limited Incidents</title>
      <link>https://www.infosecurity-magazine.com/news/prompt-injection-llm-risk/</link>
      <description>Prompt injection remains the most dangerous security threat to LLMs, according to OWASP’s latest Top 10 LLM Applications list</description>
      <pubDate>Wed, 05 Aug 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/prompt-injection-llm-risk/</guid>
    </item>
    <item>
      <title>Cybercriminals Bypass AI Safety Controls by Splitting Malicious Tasks Across Multiple Sessions</title>
      <link>https://www.infosecurity-magazine.com/news/talos-attackers-split-tasks-evade/</link>
      <description>Talos read attacker prompt logs and found guardrails fell to task splitting and ownership claims</description>
      <pubDate>Tue, 04 Aug 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/talos-attackers-split-tasks-evade/</guid>
    </item>
    <item>
      <title>Cloud and SaaS Environments Now Top Targets for Attackers</title>
      <link>https://www.infosecurity-magazine.com/news/cloud-saas-targets-attackers/</link>
      <description>Cloud and SaaS are now the preferred operating environments for threat actors, amid a continued shift to identity attacks </description>
      <pubDate>Tue, 04 Aug 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cloud-saas-targets-attackers/</guid>
    </item>
    <item>
      <title>Midnight Blizzard Targets Travelers via Captive Portals</title>
      <link>https://www.infosecurity-magazine.com/news/captivecrunch-midnight-blizzard/</link>
      <description>Russian actor Storm-2945 hijacked hotel captive portals to push fake updates and steal tokens</description>
      <pubDate>Mon, 03 Aug 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/captivecrunch-midnight-blizzard/</guid>
    </item>
    <item>
      <title>Cybersecurity M&amp;A Roundup: Cyera Announces Intent to Buy Oasis in Billion-Dollar Deal Around AI Security </title>
      <link>https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-july-2026/</link>
      <description>Seven-figure purchase showcased how agentic AI and AI agent security are still at the forefront of industry leaders’ minds</description>
      <pubDate>Fri, 31 Jul 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-july-2026/</guid>
    </item>
    <item>
      <title>Cryptominer Abuses Linux PAM to Hide From SOC Analysts</title>
      <link>https://www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/</link>
      <description>Cryptomining crew abandoned root to impersonate low-privileged Linux users and evade SOC alerts</description>
      <pubDate>Thu, 30 Jul 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/</guid>
    </item>
    <item>
      <title>AiTM Phishing Becomes Top Initial Access Threat to Law Firms</title>
      <link>https://www.infosecurity-magazine.com/news/aitm-phishing-top-entry-point-law/</link>
      <description>AiTM phishing is now the top entry point into law firms, with identity behind 56% of threats</description>
      <pubDate>Thu, 30 Jul 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/aitm-phishing-top-entry-point-law/</guid>
    </item>
    <item>
      <title>LogoKit Phishing Kit Screenshots Victim Sites in Real Time</title>
      <link>https://www.infosecurity-magazine.com/news/logokit-phishing-real-time/</link>
      <description>LogoKit now builds per-victim phishing pages using live screenshots of the target's real website</description>
      <pubDate>Wed, 29 Jul 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/logokit-phishing-real-time/</guid>
    </item>
    <item>
      <title>Russian-Alligned TA488 Returns With Persistent Outlook Web Access Attack</title>
      <link>https://www.infosecurity-magazine.com/news/ta488-outlook-half-click-owareaper/</link>
      <description>TA488 returned with OWA half-click exploit deploying OWAReaper implant that survived re-imaging</description>
      <pubDate>Wed, 29 Jul 2026 15:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ta488-outlook-half-click-owareaper/</guid>
    </item>
    <item>
      <title>Microsoft Launches Flurry of AI Security Initiatives to Combat AI-Enabled Threats</title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-ai-security-initiatives/</link>
      <description>Microsoft has launched a new agentic security system for cyber defenders as well as its first cyber-focused AI model</description>
      <pubDate>Tue, 28 Jul 2026 12:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-ai-security-initiatives/</guid>
    </item>
    <item>
      <title>TrickBot Ditches HTTP for DNS Tunneling in Latest Variant</title>
      <link>https://www.infosecurity-magazine.com/news/trickbot-dns-tunneling-c2/</link>
      <description>New TrickBot variant hides C2 communication inside DNS queries, replacing decade-old HTTP pattern</description>
      <pubDate>Wed, 22 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trickbot-dns-tunneling-c2/</guid>
    </item>
    <item>
      <title>Cruciferra Crypter Uses Process Ghosting to Evade Detection</title>
      <link>https://www.infosecurity-magazine.com/news/cruciferra-crypter-process-ghosting/</link>
      <description>Cruciferra crypter used process ghosting and 90 custom ciphers to hide payloads for multiple actors</description>
      <pubDate>Mon, 20 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cruciferra-crypter-process-ghosting/</guid>
    </item>
    <item>
      <title>JadePuffer Returns With Ransomware Designed to Wipe AI Models</title>
      <link>https://www.infosecurity-magazine.com/news/jadepuffer-ai-model-ransomware/</link>
      <description>JadePuffer follow-up campaign deployed ENCFORGE locker built to destroy AI model artifacts</description>
      <pubDate>Mon, 20 Jul 2026 14:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/jadepuffer-ai-model-ransomware/</guid>
    </item>
    <item>
      <title>Phishing Campaign Abuses eCards to Deploy RMM Tools</title>
      <link>https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/</link>
      <description>Six-month phishing campaign used seasonal eCard lures to plant legitimate RMM tools on victims</description>
      <pubDate>Wed, 15 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/</guid>
    </item>
    <item>
      <title>Open Directory Exposes Three Evilginx Phishing Operators</title>
      <link>https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/</link>
      <description>Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA</description>
      <pubDate>Mon, 13 Jul 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/</guid>
    </item>
    <item>
      <title>Pakistani Police Systems Hit by Chinese and Indian Espionage</title>
      <link>https://www.infosecurity-magazine.com/news/chinese-indian-espionage-pakistani/</link>
      <description>Chinese and Indian spies converged on the same Balochistan police force, SentinelLabs found</description>
      <pubDate>Mon, 13 Jul 2026 14:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chinese-indian-espionage-pakistani/</guid>
    </item>
    <item>
      <title>Anthropic and OpenAI Security Tools Could Fuel Cyber-Attacks, Researchers Warn</title>
      <link>https://www.infosecurity-magazine.com/news/anthropic-openai-report-exploit/</link>
      <description>Researchers at the AI Now Institute developed a proof-of-concept exploit showing common AI tools used for security could backfire</description>
      <pubDate>Fri, 10 Jul 2026 13:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/anthropic-openai-report-exploit/</guid>
    </item>
    <item>
      <title>New AI Security Charter Backed by Over 70 Cyber Firms</title>
      <link>https://www.infosecurity-magazine.com/news/crest-ai-security-charter-cyber/</link>
      <description>Over 70 cybersecurity organizations have signed the CREST AI Charter detailing responsible use of AI for security</description>
      <pubDate>Thu, 09 Jul 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/crest-ai-security-charter-cyber/</guid>
    </item>
    <item>
      <title>RedWing Android Spyware Sold as a Service on Telegram</title>
      <link>https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/</link>
      <description>Zimperium found RedWing, an Android spyware sold as a service via Telegram to target banking apps</description>
      <pubDate>Wed, 08 Jul 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/</guid>
    </item>
    <item>
      <title>China-Linked APT Expands Proxy Network With New Malware</title>
      <link>https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/</link>
      <description>Cisco Talos said China-linked APT UAT-7810 is growing its proxy relay network with new malware</description>
      <pubDate>Wed, 08 Jul 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/</guid>
    </item>
    <item>
      <title>Suspected Chinese Threat Group Targets Universities via Vulnerable Roundcube Servers</title>
      <link>https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/</link>
      <description>A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and Canada and harvest user credentials</description>
      <pubDate>Tue, 07 Jul 2026 15:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/</guid>
    </item>
    <item>
      <title>Scattered Spider’s Structure More Like a Cybercrime Collective Than a Unified Gang</title>
      <link>https://www.infosecurity-magazine.com/news/scattered-spider-as-cybercrime/</link>
      <description>Group-IB analysis argued Scattered Spider is a decentralized collective of independent clusters</description>
      <pubDate>Tue, 07 Jul 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/scattered-spider-as-cybercrime/</guid>
    </item>
    <item>
      <title>Google Cloud's New CISO Chris Betz on Integrating AI in Cyber Defenses</title>
      <link>https://www.infosecurity-magazine.com/interviews/google-cloud-new-ciso-chris-betz/</link>
      <description>In his very first interview since assuming the CISO title at Google Cloud, Cris Betz shares his vision for the role AI will play in defending global enterprises</description>
      <pubDate>Tue, 07 Jul 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/interviews/google-cloud-new-ciso-chris-betz/</guid>
    </item>
    <item>
      <title>Indirect Prompt Injection in Web Content Targets AI Agents</title>
      <link>https://www.infosecurity-magazine.com/news/indirect-prompt-injection-web/</link>
      <description>Zscaler found sites hiding prompt-injection text to manipulate AI agents into crypto payments</description>
      <pubDate>Mon, 06 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/indirect-prompt-injection-web/</guid>
    </item>
    <item>
      <title>Fileless Malware Abuses Google Blogspot to Deploy Infostealer in Memory</title>
      <link>https://www.infosecurity-magazine.com/news/veil-drop-blogspot-purelog-stealer/</link>
      <description>Securonix said the Veil#Drop campaign abuses Google Blogspot to deliver PureLog Stealer in memory</description>
      <pubDate>Wed, 01 Jul 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/veil-drop-blogspot-purelog-stealer/</guid>
    </item>
    <item>
      <title>Brazilian Banking Trojan Ousaban Targets Spain and Portugal</title>
      <link>https://www.infosecurity-magazine.com/news/ousaban-banking-trojan-spain/</link>
      <description>FortiGuard says the Brazilian banking trojan Ousaban is targeting Spain and Portugal via phishing</description>
      <pubDate>Wed, 01 Jul 2026 13:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ousaban-banking-trojan-spain/</guid>
    </item>
    <item>
      <title>Critical SimpleHelp Vulnerability Exploited For Malware Delivery</title>
      <link>https://www.infosecurity-magazine.com/news/simplehelp-rmm-vulnerability/</link>
      <description>Attackers exploited a critical SimpleHelp RMM bug to deploy TaskWeaver and Djinn Stealer malware</description>
      <pubDate>Tue, 30 Jun 2026 15:34:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/simplehelp-rmm-vulnerability/</guid>
    </item>
    <item>
      <title>OpenAI Reveals GPT-5.6 Sol Cybersecurity Model, Restricts Early Access</title>
      <link>https://www.infosecurity-magazine.com/news/openai-gpt-5-6-sol-limited-preview/</link>
      <description>OpenAI is previewing its GPT-5.6 Sol model to a vetted few at the US government's request</description>
      <pubDate>Mon, 29 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/openai-gpt-5-6-sol-limited-preview/</guid>
    </item>
    <item>
      <title>Telegram-Based Millenium RAT Campaign Infects 60,000 Devices</title>
      <link>https://www.infosecurity-magazine.com/news/millenium-rat-telegram-60000/</link>
      <description>Group-IB says Millenium RAT, now rewritten in C++, has hit 62,289 devices in 160+ countries</description>
      <pubDate>Mon, 29 Jun 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/millenium-rat-telegram-60000/</guid>
    </item>
    <item>
      <title>Lookalike npm Package Hides a Multi-Stage Windows RAT</title>
      <link>https://www.infosecurity-magazine.com/news/lookalike-npm-package-postcss/</link>
      <description>JFrog found an npm package impersonating postcss-selector-parser to drop a multi-stage Windows RAT</description>
      <pubDate>Tue, 23 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/lookalike-npm-package-postcss/</guid>
    </item>
    <item>
      <title>OpenAI Expands Daybreak to Help Defenders Patch Flaws</title>
      <link>https://www.infosecurity-magazine.com/news/openai-daybreak-gpt-5-5-cyber/</link>
      <description>OpenAI expanded Daybreak with a full GPT-5.5-Cyber release to help defenders patch software flaws</description>
      <pubDate>Tue, 23 Jun 2026 14:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/openai-daybreak-gpt-5-5-cyber/</guid>
    </item>
    <item>
      <title>GentleKiller Framework Disables Victims' Security Software</title>
      <link>https://www.infosecurity-magazine.com/news/gentlekiller-gentlemen-ransomware/</link>
      <description>ESET details GentleKiller, the EDR-killer framework the Gentlemen ransomware gang gives affiliates</description>
      <pubDate>Mon, 22 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gentlekiller-gentlemen-ransomware/</guid>
    </item>
    <item>
      <title>UK Information Commissioner Resigns After Workplace Investigation </title>
      <link>https://www.infosecurity-magazine.com/news/information-commissioner-resigns/</link>
      <description>The UK’s data protection regulator the information commissioner has resigned after his position became “untenable”</description>
      <pubDate>Mon, 22 Jun 2026 09:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/information-commissioner-resigns/</guid>
    </item>
    <item>
      <title>Fake GitHub Stars and AI Videos Mask a Crypto Clipper</title>
      <link>https://www.infosecurity-magazine.com/news/crypto-clipboard-hijacker-fake/</link>
      <description>A Rust crypto clipper hides behind fake GitHub stars and AI-narrated YouTube videos</description>
      <pubDate>Thu, 18 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/crypto-clipboard-hijacker-fake/</guid>
    </item>
    <item>
      <title>LATAM Infrastructure Hit by Fortinet and Ivanti Exploits</title>
      <link>https://www.infosecurity-magazine.com/news/operation-escaneo-cloudsek-latam/</link>
      <description>CloudSEK maps Operation Escaneo, a campaign hitting Latin American infrastructure via perimeter bugs</description>
      <pubDate>Thu, 18 Jun 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/operation-escaneo-cloudsek-latam/</guid>
    </item>
    <item>
      <title>North Korean Hiring Fraud Runs on AI and US Laptop Farms</title>
      <link>https://www.infosecurity-magazine.com/news/north-korea-it-worker-fraud-ai/</link>
      <description>Nisos infiltrated a North Korean IT-worker fraud cell running on AI interviews and a US laptop farm</description>
      <pubDate>Wed, 17 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/north-korea-it-worker-fraud-ai/</guid>
    </item>
    <item>
      <title>Serverless Phishing Kit on GitHub Targets Mexican Banks</title>
      <link>https://www.infosecurity-magazine.com/news/gitbait-github-pages-sheetbest/</link>
      <description>GitBait phishing kit abuses GitHub Pages and the SheetBest API to steal Mexican banking credentials</description>
      <pubDate>Wed, 17 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gitbait-github-pages-sheetbest/</guid>
    </item>
    <item>
      <title>SprySOCKS Backdoor Expands From Linux to Windows</title>
      <link>https://www.infosecurity-magazine.com/news/sprysocks-backdoor-windows/</link>
      <description>China-linked SprySOCKS backdoor gains stealthy Windows variants and 30-plus C2 commands</description>
      <pubDate>Tue, 16 Jun 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/sprysocks-backdoor-windows/</guid>
    </item>
    <item>
      <title>Rokarolla Trojan Combines Banking Fraud With Device Surveillance</title>
      <link>https://www.infosecurity-magazine.com/news/rokarolla-android-banking-trojan/</link>
      <description>Rokarolla Android trojan steals banking logins and spies on victims while blocking fraud alerts</description>
      <pubDate>Tue, 16 Jun 2026 13:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/rokarolla-android-banking-trojan/</guid>
    </item>
    <item>
      <title>Over Two-Thirds of Security Pros Say Cyber Is Getting Harder</title>
      <link>https://www.infosecurity-magazine.com/news/security-pros-cyber-cyber-harder/</link>
      <description>ISSA study finds most security professionals feel challenged by colleagues’ involvement in cyber</description>
      <pubDate>Tue, 16 Jun 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/security-pros-cyber-cyber-harder/</guid>
    </item>
    <item>
      <title>Attackers Hijack Popular WordPress Plugins to Deploy Backdoors</title>
      <link>https://www.infosecurity-magazine.com/news/wordpress-plugin-supply-chain/</link>
      <description>Tampered OptinMonster and sister plugins plant hidden backdoors on 1.2 million WordPress sites</description>
      <pubDate>Mon, 15 Jun 2026 17:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/wordpress-plugin-supply-chain/</guid>
    </item>
    <item>
      <title>Adriatic Port Cyber-Attack by Anubis Sparks Warning Over Maritime Security Risks</title>
      <link>https://www.infosecurity-magazine.com/news/anubis-ransomware-adriatic-port/</link>
      <description>How the Anubis ransomware group stole and leaked an Italian Adriatic port authority's data</description>
      <pubDate>Mon, 15 Jun 2026 16:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/anubis-ransomware-adriatic-port/</guid>
    </item>
    <item>
      <title>GitHub to Update npm to Thwart Software Supply Chain Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/github-update-npm-supply-chain/</link>
      <description>NPM, part of GitHub, announced a new version of the npm package manager with several security improvements, including disabling install scripts</description>
      <pubDate>Fri, 12 Jun 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/github-update-npm-supply-chain/</guid>
    </item>
    <item>
      <title>Cybercriminals Use Fake AI Guides and Dev Tools to Spread AsyncRAT Malware</title>
      <link>https://www.infosecurity-magazine.com/news/fake-ai-guides-dev-tools-spread/</link>
      <description>Fake AI guides hide a multi-stage chain that drops AsyncRAT, with signs of AI-assisted coding</description>
      <pubDate>Thu, 11 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fake-ai-guides-dev-tools-spread/</guid>
    </item>
    <item>
      <title>Fake Software Tutorials on TikTok Spread Vidar Stealer</title>
      <link>https://www.infosecurity-magazine.com/news/fake-software-videos-tiktok-vidar/</link>
      <description>Threat actors push fake free-software tutorials on TikTok and Instagram to spread Vidar stealer</description>
      <pubDate>Wed, 10 Jun 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fake-software-videos-tiktok-vidar/</guid>
    </item>
    <item>
      <title>New SilabRAT Trojan Hijacks Sessions to Steal Crypto</title>
      <link>https://www.infosecurity-magazine.com/news/silabrat-trojan-session-hijacking/</link>
      <description>MaaS trojan SilabRAT uses HVNC and browser cloning to hijack sessions and steal crypto</description>
      <pubDate>Wed, 10 Jun 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/silabrat-trojan-session-hijacking/</guid>
    </item>
    <item>
      <title>AI Coding Adoption Hits 97% but Governance Lags Behind</title>
      <link>https://www.infosecurity-magazine.com/news/ai-coding-adoption-governance-lags/</link>
      <description>Most dev teams use AI coding assistants but only 30% have full governance in place</description>
      <pubDate>Tue, 09 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-coding-adoption-governance-lags/</guid>
    </item>
    <item>
      <title>North Korean Hackers Use Fake Coding Tasks to Steal Crypto</title>
      <link>https://www.infosecurity-magazine.com/news/north-korean-hackers-developers/</link>
      <description>North Korean actor UNK_DeadDrop targeted developers with fake coding tasks to steal crypto</description>
      <pubDate>Mon, 08 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/north-korean-hackers-developers/</guid>
    </item>
    <item>
      <title>Cybersecurity M&amp;A Roundup: Vendors Continue Focus on Acquisition of AI Specialists</title>
      <link>https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-may-2026/</link>
      <description>Mergers and Acquisitions for May followed a theme which has defined much of 2026: bringing AI tools in-house</description>
      <pubDate>Mon, 08 Jun 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-may-2026/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Practical Lessons From Lloyds' Agentic AI Security Playbook</title>
      <link>https://www.infosecurity-magazine.com/news/lloyds-agentic-ai-security-playbook/</link>
      <description>Lloyds Banking Group shared its approach for securing agentic AI workflows, with a mix of hands on experimentation and cross functional governance</description>
      <pubDate>Fri, 05 Jun 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/lloyds-agentic-ai-security-playbook/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: OWASP Introduces Agentic AI Security Maturity Framework</title>
      <link>https://www.infosecurity-magazine.com/news/owasp-agentic-ai-security-maturity/</link>
      <description>The OWASP agentic AI security framework helps organizations assess governance maturity vs adoption and adjust governance as needed</description>
      <pubDate>Fri, 05 Jun 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/owasp-agentic-ai-security-maturity/</guid>
    </item>
    <item>
      <title>Chinese-Speaking Actor TA4922 Widens Its Global Reach</title>
      <link>https://www.infosecurity-magazine.com/news/ta4922-global-expansion/</link>
      <description>Newly named Chinese-speaking actor TA4922 expands from East Asia into Europe and Africa</description>
      <pubDate>Thu, 04 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ta4922-global-expansion/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Vulnerability Management Innovator Konvu Wins Cyber Startup Award</title>
      <link>https://www.infosecurity-magazine.com/news/konvu-wins-cyber-startup-award/</link>
      <description>
Inaugural Infosecurity Europe Cyber Startup Award Winner Impresses Panel with Ability Help Prioritize Vulnerabilities in AI era</description>
      <pubDate>Wed, 03 Jun 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/konvu-wins-cyber-startup-award/</guid>
    </item>
    <item>
      <title>Anthropic Expands Mythos Access to 150 More Organizations</title>
      <link>https://www.infosecurity-magazine.com/news/anthropic-glasswing-expansion/</link>
      <description>Anthropic widens Project Glasswing access to 150 more firms as patching becomes the bottleneck</description>
      <pubDate>Wed, 03 Jun 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/anthropic-glasswing-expansion/</guid>
    </item>
    <item>
      <title>Threat Actor Uses AI to Build EDR Evasion Tools</title>
      <link>https://www.infosecurity-magazine.com/news/ai-edr-evasion-tooling/</link>
      <description>A threat actor used AI coding tools to build and test EDR evasion malware, Sophos finds</description>
      <pubDate>Tue, 02 Jun 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-edr-evasion-tooling/</guid>
    </item>
    <item>
      <title>Attackers Hijack Red Hat npm Scope to Steal Cloud Secrets</title>
      <link>https://www.infosecurity-magazine.com/news/red-hat-npm-scope-backdoored/</link>
      <description>Attackers backdoored 32 packages in Red Hat's official npm scope to steal cloud and CI secrets</description>
      <pubDate>Tue, 02 Jun 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/red-hat-npm-scope-backdoored/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: AI SOCs Will Still Need SOC Analysts, Security Vendors Say</title>
      <link>https://www.infosecurity-magazine.com/news/ai-soc-still-need-analysts/</link>
      <description>Top cybersecurity vendors said AI won't replace entry-level – only routine ticket-taking and triage</description>
      <pubDate>Mon, 01 Jun 2026 11:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-soc-still-need-analysts/</guid>
    </item>
    <item>
      <title>FSB Group Gamaredon Hides Worm in Windows Data Streams</title>
      <link>https://www.infosecurity-magazine.com/news/gamaredon-worm-ntfs-data-streams/</link>
      <description>FSB-linked Gamaredon concealed a fileless worm in NTFS data streams to spy on Ukraine targets</description>
      <pubDate>Mon, 01 Jun 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gamaredon-worm-ntfs-data-streams/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: OWASP Forms New Agentic Research Council</title>
      <link>https://www.infosecurity-magazine.com/news/owasp-new-agentic-research-council/</link>
      <description>OWASP’s new Agentic Research Council will aim to connect academic work to operational realities on agentic AI security</description>
      <pubDate>Mon, 01 Jun 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/owasp-new-agentic-research-council/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: CyCOS Project Expands to Support UK SMEs as CIISec Takes Over</title>
      <link>https://www.infosecurity-magazine.com/news/cycos-expands-uk-smes-ciisec/</link>
      <description>From a research-driven pilot, the Cybersecurity Communities of Support (CyCOS) is about to be handed over to CIISec</description>
      <pubDate>Fri, 29 May 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cycos-expands-uk-smes-ciisec/</guid>
    </item>
    <item>
      <title>Attackers Move Past Typosquatting to Realistic Package Impersonation</title>
      <link>https://www.infosecurity-magazine.com/news/attackers-beyond-typosquatting/</link>
      <description>Most malicious open source packages now mimic real code rather than rely on typosquatting</description>
      <pubDate>Thu, 28 May 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/attackers-beyond-typosquatting/</guid>
    </item>
    <item>
      <title>New Threat Actor Jinx-0164 Targets Crypto Developers on macOS</title>
      <link>https://www.infosecurity-magazine.com/news/jinx-0164-crypto-developers-macos/</link>
      <description>New actor Jinx-0164 hit crypto developers with fake recruiter lures and macOS malware</description>
      <pubDate>Thu, 28 May 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/jinx-0164-crypto-developers-macos/</guid>
    </item>
    <item>
      <title>Thousands of Fake FIFA Domains Target World Cup Fans</title>
      <link>https://www.infosecurity-magazine.com/news/ghost-stadium-fifa-world-cup-fraud/</link>
      <description>Group-IB uncovered Ghost Stadium phishing and 4300 fake FIFA World Cup domains targeting fans</description>
      <pubDate>Wed, 27 May 2026 11:28:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ghost-stadium-fifa-world-cup-fraud/</guid>
    </item>
    <item>
      <title>68% of UK Firms Plan to Increase Cyber Spending as AI Risks Rise</title>
      <link>https://www.infosecurity-magazine.com/news/uk-firms-cyber-spending-ai-risks/</link>
      <description>UK firms plan higher cyber spending as AI adoption raises security concerns</description>
      <pubDate>Wed, 27 May 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-firms-cyber-spending-ai-risks/</guid>
    </item>
    <item>
      <title>PureLogs Variant Steals Data via Purchase Order Lures</title>
      <link>https://www.infosecurity-magazine.com/news/purelogs-phishing-purchase-order/</link>
      <description>FortiGuard Labs detailed a PureLogs campaign using JavaScript, PowerShell and process hollowing</description>
      <pubDate>Wed, 27 May 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/purelogs-phishing-purchase-order/</guid>
    </item>
    <item>
      <title>Cyber House Party: More Than Just an After Party</title>
      <link>https://www.infosecurity-magazine.com/opinions/cyber-house-party-more-than-just/</link>
      <description>Cyber House Party 2026 at Infosecurity Europe returns on June 3 at the ExCeL London, bringing the cybersecurity community together for networking, fun and fundraising</description>
      <pubDate>Wed, 27 May 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/cyber-house-party-more-than-just/</guid>
    </item>
    <item>
      <title>BTMOB Android RAT Spreads Through No-Code Builder Tooling</title>
      <link>https://www.infosecurity-magazine.com/news/btmob-android-rat-maas-builder/</link>
      <description>BTMOB Android RAT sold as a service with a no-code builder for fast, regional phishing lures</description>
      <pubDate>Tue, 26 May 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/btmob-android-rat-maas-builder/</guid>
    </item>
    <item>
      <title>Iran-Linked Hackers Target US Aviation with Phishing and SEO Poisoning Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/iranian-hackers-us-aviation/</link>
      <description>Iran's Nimbus Manticore pushes AI-built MiniFast backdoor via phishing and SEO poisoning</description>
      <pubDate>Tue, 26 May 2026 09:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/iranian-hackers-us-aviation/</guid>
    </item>
    <item>
      <title>Nine-Year-Old Linux Kernel Flaw Leaks SSH Keys and Password Hashes</title>
      <link>https://www.infosecurity-magazine.com/news/linux-kernel-ptrace-flaw-ssh-keys/</link>
      <description>Qualys finds nine-year-old Linux ptrace flaw exposing SSH keys and password hashes locally</description>
      <pubDate>Thu, 21 May 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/linux-kernel-ptrace-flaw-ssh-keys/</guid>
    </item>
    <item>
      <title>Android Malware Campaign Used Hundreds of Fake Apps to Silently Charge Users</title>
      <link>https://www.infosecurity-magazine.com/news/android-carrier-billing-fraud-four/</link>
      <description>Premium Deception campaign uses 250 Android apps to silently sign victims up to paid services</description>
      <pubDate>Wed, 20 May 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/android-carrier-billing-fraud-four/</guid>
    </item>
    <item>
      <title>Mini Shai-Hulud Hits Hundreds of npm Packages in AntV Ecosystem</title>
      <link>https://www.infosecurity-magazine.com/news/antv-npm-mini-shai-hulud-largest/</link>
      <description>Mini Shai-Hulud worm hits Alibaba AntV ecosystem in largest npm supply chain wave to date</description>
      <pubDate>Wed, 20 May 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/antv-npm-mini-shai-hulud-largest/</guid>
    </item>
    <item>
      <title>Mustang Panda Linked to Updated FDMTP Backdoor in Asia-Pacific Espionage Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/mustang-panda-fdmtp-backdoor-apj/</link>
      <description>Mustang Panda campaign deploys updated FDMTP backdoor against Asia-Pacific and Japan networks</description>
      <pubDate>Thu, 14 May 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/mustang-panda-fdmtp-backdoor-apj/</guid>
    </item>
    <item>
      <title>UK Cybersecurity Market Expands to £14.7bn with Strong Growth in AI Security Firms</title>
      <link>https://www.infosecurity-magazine.com/news/uks-cyber-sector-grows-revenue-11/</link>
      <description>UK cybersecurity sector reaches £14.7bn in revenue, driven by rapid growth in AI security firms, increased investment and rising employment across the industry</description>
      <pubDate>Wed, 13 May 2026 09:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uks-cyber-sector-grows-revenue-11/</guid>
    </item>
    <item>
      <title>Mini Shai-Hulud Hits TanStack npm Packages</title>
      <link>https://www.infosecurity-magazine.com/news/mini-shai-hulud-tanstack-npm/</link>
      <description>Mini Shai-Hulud compromises TanStack npm packages and spreads across PyPI</description>
      <pubDate>Tue, 12 May 2026 14:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/mini-shai-hulud-tanstack-npm/</guid>
    </item>
    <item>
      <title>TrickMo Variant Routes Android Trojan Traffic Through TON</title>
      <link>https://www.infosecurity-magazine.com/news/trickmo-c-ton-network-android/</link>
      <description>ThreatFabric finds new TrickMo Android banking trojan variant routing C2 through The Open Network</description>
      <pubDate>Mon, 11 May 2026 15:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trickmo-c-ton-network-android/</guid>
    </item>
    <item>
      <title>Fake Claude Code Page Pushes PowerShell Stealer at Devs</title>
      <link>https://www.infosecurity-magazine.com/news/fake-claude-code-installer/</link>
      <description>Ontinue uncovers fake Claude Code installer pushing PowerShell stealer abusing Chrome's IElevator2</description>
      <pubDate>Mon, 11 May 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fake-claude-code-installer/</guid>
    </item>
    <item>
      <title>Cline Kanban Flaw Lets Websites Hijack AI Coding Agents</title>
      <link>https://www.infosecurity-magazine.com/news/cline-kanban-websocket-hijack-ai/</link>
      <description>Oasis Security finds critical Cline kanban WebSocket flaw exposing AI coding agents to hijack</description>
      <pubDate>Thu, 07 May 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cline-kanban-websocket-hijack-ai/</guid>
    </item>
    <item>
      <title>Fake Claude AI Site Drops Beagle Backdoor on Windows Users</title>
      <link>https://www.infosecurity-magazine.com/news/fake-claude-site-beagle-backdoor/</link>
      <description>Sophos finds fake Claude site spreading DonutLoader and a new Beagle backdoor via DLL sideloading</description>
      <pubDate>Thu, 07 May 2026 13:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fake-claude-site-beagle-backdoor/</guid>
    </item>
    <item>
      <title>CloudZ Malware Abuses Phone Link to Steal SMS OTPs</title>
      <link>https://www.infosecurity-magazine.com/news/cloudz-rat-pheno-phone-link-otp/</link>
      <description>Cisco Talos uncovers CloudZ RAT and Pheno plugin abusing Microsoft Phone Link to intercept SMS OTPs</description>
      <pubDate>Wed, 06 May 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cloudz-rat-pheno-phone-link-otp/</guid>
    </item>
    <item>
      <title>Fake SSA Emails Drive Venomous#Helper Phishing Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/ssa-emails-venomous-helper-phishing/</link>
      <description>Venomous#Helper attackers impersonate the US Social Security Administration to deploy signed RMM software and maintain persistent access across US networks</description>
      <pubDate>Tue, 05 May 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ssa-emails-venomous-helper-phishing/</guid>
    </item>
    <item>
      <title>Cybersecurity M&amp;A Roundup: Acquisition of Agentic AI Specialist Firms Continues at Pace</title>
      <link>https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-round-up-april-26/</link>
      <description>Palo Alto Networks lead a focus on agentic AI in M&amp;A deals made in April 2026</description>
      <pubDate>Mon, 04 May 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-round-up-april-26/</guid>
    </item>
    <item>
      <title>OpenAI To Extend Cyber Program to Government Agencies</title>
      <link>https://www.infosecurity-magazine.com/news/openai-extend-cyber-program/</link>
      <description>OpenAI announced its intention to expand the Trusted Access for Cyber program for cyber defenders at the federal, state and local government levels</description>
      <pubDate>Mon, 04 May 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/openai-extend-cyber-program/</guid>
    </item>
    <item>
      <title>Deep#Door Python Backdoor Evades Detection On Windows</title>
      <link>https://www.infosecurity-magazine.com/news/deepdoor-python-backdoor-windows/</link>
      <description>Deep#Door Python RAT uses tunneling and obfuscation to evade detection and steal credentials</description>
      <pubDate>Thu, 30 Apr 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/deepdoor-python-backdoor-windows/</guid>
    </item>
    <item>
      <title>Cyber is the Number One Global “People Risk,” Says Marsh</title>
      <link>https://www.infosecurity-magazine.com/news/cyber-number-one-global-people/</link>
      <description>Marsh’s 2026 People Risks survey finds cyber‑related challenges dominate, as cyber‑threat literacy tops risks and cyber and AI skills shortages rise</description>
      <pubDate>Thu, 30 Apr 2026 09:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cyber-number-one-global-people/</guid>
    </item>
    <item>
      <title>Malicious npm Dependency Linked to AI Assisted Commit Targets Crypto Wallets</title>
      <link>https://www.infosecurity-magazine.com/news/ai-npm-dependency-targets-crypto/</link>
      <description>Researchers uncover a malicious npm dependency linked to an AI‑assisted code commit that steals sensitive data and exposes crypto wallets</description>
      <pubDate>Wed, 29 Apr 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-npm-dependency-targets-crypto/</guid>
    </item>
    <item>
      <title>Widely Used Browser Extensions Selling User Data</title>
      <link>https://www.infosecurity-magazine.com/news/browser-extensions-sell-user-data/</link>
      <description>Dozens of browser extensions openly sell user data via privacy policy disclosures</description>
      <pubDate>Mon, 27 Apr 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/browser-extensions-sell-user-data/</guid>
    </item>
    <item>
      <title>Npm Supply Chain Malware Attack Targets Developers With Worm-Like Propagation</title>
      <link>https://www.infosecurity-magazine.com/news/npm-supply-chain-worm-canister/</link>
      <description>Malicious npm packages spread via worm-like propagation and steal developer credentials</description>
      <pubDate>Fri, 24 Apr 2026 08:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/npm-supply-chain-worm-canister/</guid>
    </item>
    <item>
      <title>UK Commits £90m for Cybersecurity and Pushes for ‘Resilience Pledge’</title>
      <link>https://www.infosecurity-magazine.com/news/uk-pledges-90m-for-cybersecurity/</link>
      <description>UK unveils £90m cybersecurity funding at CYBERUK to boost SME resilience, promote Cyber Essentials and a new Cyber Resilience Pledge, sparking industry debate</description>
      <pubDate>Wed, 22 Apr 2026 14:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-pledges-90m-for-cybersecurity/</guid>
    </item>
    <item>
      <title>Surge in Silent Subject Phishing Attacks Targets VIP Users</title>
      <link>https://www.infosecurity-magazine.com/news/silent-subject-phishing-campaigns/</link>
      <description>Null subject phishing campaigns bypass filters and target VIPs with QR code and RMM abuse</description>
      <pubDate>Wed, 22 Apr 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/silent-subject-phishing-campaigns/</guid>
    </item>
    <item>
      <title>Trojanized Android App Fuels New Wave of NFC Fraud</title>
      <link>https://www.infosecurity-magazine.com/news/trojanized-android-handle-nfc/</link>
      <description>NGate malware abuses HandyPay app to steal NFC card data and PINs in Brazil</description>
      <pubDate>Tue, 21 Apr 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trojanized-android-handle-nfc/</guid>
    </item>
    <item>
      <title>The Gentlemen Ransomware Expands With Rapid Affiliate Growth</title>
      <link>https://www.infosecurity-magazine.com/news/gentlemen-ransomware-rapid/</link>
      <description>Gentlemen RaaS expands quickly with multi-platform attacks and SystemBC-linked infections</description>
      <pubDate>Tue, 21 Apr 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gentlemen-ransomware-rapid/</guid>
    </item>
    <item>
      <title>Attackers Exploit DVR Command Injection Flaw to Deploy  Mirai-Based Botnet</title>
      <link>https://www.infosecurity-magazine.com/news/mirai-variant-dvr-flaw-iot-botnet/</link>
      <description>FortiGuard Labs has identified a Mirai-based Nexcorium campaign actively exploiting CVE-2024-3721 in TBK DVR devices</description>
      <pubDate>Mon, 20 Apr 2026 13:01:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/mirai-variant-dvr-flaw-iot-botnet/</guid>
    </item>
    <item>
      <title>NIST Drops NVD Enrichment for Pre-March 2026 Vulnerabilities</title>
      <link>https://www.infosecurity-magazine.com/news/nvd-enrichment-premarch-2026/</link>
      <description>NIST’s National Vulnerability Database will now prioritize enriching new and exploited flaws to address the record growth of reported CVEs</description>
      <pubDate>Thu, 16 Apr 2026 12:43:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nvd-enrichment-premarch-2026/</guid>
    </item>
    <item>
      <title>Systemic Flaw in MCP Protocol Could Expose 150 Million Downloads</title>
      <link>https://www.infosecurity-magazine.com/news/systemic-flaw-mcp-expose-150/</link>
      <description>Ox Security claims as many as 200,000 servers are exposed by newly discovered MCP vulnerability </description>
      <pubDate>Thu, 16 Apr 2026 09:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/systemic-flaw-mcp-expose-150/</guid>
    </item>
    <item>
      <title>European Cybersecurity Agency ENISA Seeks Top-Tier Status in CVE Program</title>
      <link>https://www.infosecurity-magazine.com/news/enisa-europe-seeks-top-level-root/</link>
      <description>The EU cybersecurity agency looks to become the third Top-Level Root CVE Numbering Authority, alongside CISA and MITRE</description>
      <pubDate>Wed, 15 Apr 2026 15:31:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/enisa-europe-seeks-top-level-root/</guid>
    </item>
    <item>
      <title>Signed Adware Operation Disables Antivirus Across 23,000 Hosts</title>
      <link>https://www.infosecurity-magazine.com/news/dragon-boss-adware-disables/</link>
      <description>Huntress uncovers adware deploying AV-killing payloads via signed updates across 23,000 endpoints</description>
      <pubDate>Wed, 15 Apr 2026 14:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/dragon-boss-adware-disables/</guid>
    </item>
    <item>
      <title>Critical Nginx-ui MCP Flaw Actively Exploited in the Wild</title>
      <link>https://www.infosecurity-magazine.com/news/nginx-ui-mcp-flaw-actively/</link>
      <description>Critical nginx-ui MCP authentication bypass CVE-2026-33032 actively exploited with CVSS 9.8</description>
      <pubDate>Wed, 15 Apr 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nginx-ui-mcp-flaw-actively/</guid>
    </item>
    <item>
      <title>AI Companies to Play Bigger Role in CVE Program, Says CISA</title>
      <link>https://www.infosecurity-magazine.com/news/ai-companies-to-play-bigger-role/</link>
      <description>At VulnCon, Lindsey Cerkovnik, head of vulnerability management at CISA, said AI companies should play a bigger role in vulnerability disclosures in the future</description>
      <pubDate>Wed, 15 Apr 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-companies-to-play-bigger-role/</guid>
    </item>
    <item>
      <title>CISOs Urged to Innovate with Talent Retention as Job Satisfaction Declines</title>
      <link>https://www.infosecurity-magazine.com/news/cisos-innovate-talent-retention/</link>
      <description>A new IANS report claims just 34% of cybersecurity professionals plan to stay put in the next 12 months</description>
      <pubDate>Tue, 14 Apr 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisos-innovate-talent-retention/</guid>
    </item>
    <item>
      <title>Triad Nexus Expands Global Fraud Operations Despite US Sanctions</title>
      <link>https://www.infosecurity-magazine.com/news/triad-nexus-expands-fraud/</link>
      <description>Triad Nexus scales $200m scams, uses infrastructure laundering, localized fraud and US-access blocks</description>
      <pubDate>Tue, 14 Apr 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/triad-nexus-expands-fraud/</guid>
    </item>
    <item>
      <title>Malicious Chrome Extensions Campaign Exposes User Data</title>
      <link>https://www.infosecurity-magazine.com/news/chrome-extensions-expose-user-data/</link>
      <description>108 malicious Chrome extensions steal sessions, Google data, inject ads via single C2 infrastructure</description>
      <pubDate>Tue, 14 Apr 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chrome-extensions-expose-user-data/</guid>
    </item>
    <item>
      <title>Mailbox Rule Abuse Emerges as Stealthy Post-Compromise Threat</title>
      <link>https://www.infosecurity-magazine.com/news/mailbox-rule-abuse-stealthy-post/</link>
      <description>Attackers are abusing Microsoft 365 mailbox rules to hide activity, exfiltrate data and retain access after account compromise, researchers warn</description>
      <pubDate>Mon, 13 Apr 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/mailbox-rule-abuse-stealthy-post/</guid>
    </item>
    <item>
      <title>Mirax Android Trojan Turns Devices Into Residential Proxy Nodes</title>
      <link>https://www.infosecurity-magazine.com/news/mirax-trojan-devices-proxy-nodes/</link>
      <description>Security researchers warn of Mirax, an emerging Android banking trojan using MaaS, remote access and residential proxies to target European users</description>
      <pubDate>Mon, 13 Apr 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/mirax-trojan-devices-proxy-nodes/</guid>
    </item>
    <item>
      <title>UK Cyber Security Council Launches Associate Cyber Security Professional Title</title>
      <link>https://www.infosecurity-magazine.com/news/associate-cyber-professional-title/</link>
      <description>The UK Cyber Security Council has unveiled a new Associate Cyber Security Professional title aimed at supporting early‑career cybersecurity professionals</description>
      <pubDate>Mon, 13 Apr 2026 09:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/associate-cyber-professional-title/</guid>
    </item>
    <item>
      <title>STX RAT Targets Finance Sector With Advanced Stealth Tactics</title>
      <link>https://www.infosecurity-magazine.com/news/stx-rat-targets-finance-sector/</link>
      <description>STX RAT, a newly identified remote access trojan, attempted deployment in finance, showing advanced C2 and stealthy delivery methods</description>
      <pubDate>Thu, 09 Apr 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/stx-rat-targets-finance-sector/</guid>
    </item>
    <item>
      <title>Cybersecurity M&amp;A Roundup: Big Players Boost AI Security Offerings</title>
      <link>https://www.infosecurity-magazine.com/news-features/cyber-ma-roundup-march-26/</link>
      <description>Investment in start-ups involved with securing AI against cyber threats was a strong focus of cybersecurity M&amp;A activity during March</description>
      <pubDate>Fri, 03 Apr 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news-features/cyber-ma-roundup-march-26/</guid>
    </item>
    <item>
      <title>GitHub Used as Covert Channel in Multi-Stage Malware Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/github-covert-multi-stage-malware/</link>
      <description>LNK files use GitHub C2, embedded decoders and PowerShell for persistence and data exfiltration</description>
      <pubDate>Thu, 02 Apr 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/github-covert-multi-stage-malware/</guid>
    </item>
    <item>
      <title>New Venom Stealer MaaS Platform Automates Continuous Data Theft</title>
      <link>https://www.infosecurity-magazine.com/news/venom-stealer-maas-automates-data/</link>
      <description>Venom Stealer malware-as-a-service automates ClickFix social engineering, credential and crypto exfiltration</description>
      <pubDate>Wed, 01 Apr 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/venom-stealer-maas-automates-data/</guid>
    </item>
    <item>
      <title>Phantom Project Bundles Infostealer, Crypter and RAT For Sale</title>
      <link>https://www.infosecurity-magazine.com/news/phantom-project-infostealer-nov-25/</link>
      <description>Phantom Stealer .NET harvests browser credentials, cookies, cards, sessions, as stealer-as-a-service</description>
      <pubDate>Tue, 31 Mar 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/phantom-project-infostealer-nov-25/</guid>
    </item>
    <item>
      <title>Cybercriminals Exploit Tax Season With New Phishing Tactics</title>
      <link>https://www.infosecurity-magazine.com/news/tax-season-new-phishing-tactics/</link>
      <description>Tax-season phishing floods deliver RMM malware, credential theft, BEC and tax-form scams</description>
      <pubDate>Mon, 30 Mar 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/tax-season-new-phishing-tactics/</guid>
    </item>
    <item>
      <title>EtherRAT Techniques Bypass Security Via Ethereum Smart Contracts</title>
      <link>https://www.infosecurity-magazine.com/news/etherrat-bypass-security-ethereum/</link>
      <description>EtherRAT hides C2 in Ethereum smart contracts via EtherHiding, steals wallets and credentials</description>
      <pubDate>Thu, 26 Mar 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/etherrat-bypass-security-ethereum/</guid>
    </item>
    <item>
      <title>Cloud Phones Linked to Rising Financial Fraud Threat</title>
      <link>https://www.infosecurity-magazine.com/news/cloud-phones-financial-fraud/</link>
      <description>Cloud Android phones fuel financial fraud, evading detection and enabling dropper accounts</description>
      <pubDate>Wed, 25 Mar 2026 16:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cloud-phones-financial-fraud/</guid>
    </item>
    <item>
      <title>TeamPCP Expands Supply Chain Campaign With LiteLLM PyPI Compromise</title>
      <link>https://www.infosecurity-magazine.com/news/teampcp-litellm-pypi-supply-chain/</link>
      <description>Python package LiteLLM compromised with credential-stealing malware linked to TeamPCP threat group</description>
      <pubDate>Wed, 25 Mar 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/teampcp-litellm-pypi-supply-chain/</guid>
    </item>
    <item>
      <title>RSA Conference: UK NCSC Head Urges Industry to Develop Vibe Coding Safeguards</title>
      <link>https://www.infosecurity-magazine.com/news/rsac-uk-ncsc-urges-vibe-coding/</link>
      <description>The head of the UK’s NCSC is calling the cybersecurity industry to “seize the disruptive vibe coding opportunity” to make software more secure</description>
      <pubDate>Tue, 24 Mar 2026 21:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/rsac-uk-ncsc-urges-vibe-coding/</guid>
    </item>
    <item>
      <title>Silver Fox Cyber Campaigns Show Shift Toward Dual Espionage</title>
      <link>https://www.infosecurity-magazine.com/news/silver-fox-cyber-dual-espionage/</link>
      <description>Silver Fox pivots from ValleyRAT tax lures to WhatsApp‑style stealers, blending espionage &amp; phishing</description>
      <pubDate>Tue, 24 Mar 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/silver-fox-cyber-dual-espionage/</guid>
    </item>
    <item>
      <title>New Npm 'Ghost Campaign' Uses Fake Install Logs to Hide Malware</title>
      <link>https://www.infosecurity-magazine.com/news/npm-ghost-campaign-fake-install/</link>
      <description>Ghost npm campaign fakes install logs to steal sudo passwords and drop RATs that loot crypto and data</description>
      <pubDate>Tue, 24 Mar 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/npm-ghost-campaign-fake-install/</guid>
    </item>
    <item>
      <title>Tycoon2FA Phishing Service Resumes Activity Post-Takedown</title>
      <link>https://www.infosecurity-magazine.com/news/tycoon2fa-phishing-service-resumes/</link>
      <description>Tycoon2FA phishing platform resumes activity post-takedown, leveraging AITM techniques to bypass MFA</description>
      <pubDate>Mon, 23 Mar 2026 16:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/tycoon2fa-phishing-service-resumes/</guid>
    </item>
    <item>
      <title>High-Tech Sector Overtakes Finance as Top Target for Cyber-Attacks, Mandiant Reports</title>
      <link>https://www.infosecurity-magazine.com/news/high-tech-top-target-cyberattacks/</link>
      <description>High tech was the most frequently targeted industry in Mandiant investigations in 2025, overtaking financial services which led in 2023 and 2024</description>
      <pubDate>Mon, 23 Mar 2026 15:35:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/high-tech-top-target-cyberattacks/</guid>
    </item>
    <item>
      <title>Trivy Supply Chain Attack Expands With New Compromised Docker Images</title>
      <link>https://www.infosecurity-magazine.com/news/trivy-supply-chain-attack-expands/</link>
      <description>New Trivy Docker images 0.69.5 and 0.69.6 compromised with TeamPCP infostealer, impacting CI/CD scans</description>
      <pubDate>Mon, 23 Mar 2026 15:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trivy-supply-chain-attack-expands/</guid>
    </item>
    <item>
      <title>Ransomware Affiliate Exposes Details of 'The Gentlemen' Operation</title>
      <link>https://www.infosecurity-magazine.com/news/ransomware-affiliate-gentlemen/</link>
      <description>Hastalamuerte leaks The Gentlemen RaaS ops: FortiGate exploits, BYOVD evasion, Qilin split tactics</description>
      <pubDate>Thu, 19 Mar 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ransomware-affiliate-gentlemen/</guid>
    </item>
    <item>
      <title>Financial Brands Targeted in Global Mobile Banking Malware Surge</title>
      <link>https://www.infosecurity-magazine.com/news/financial-brands-mobile-banking/</link>
      <description>Mobile banking malware targets over 1200 financial apps globally, shifting fraud to user devices</description>
      <pubDate>Thu, 19 Mar 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/financial-brands-mobile-banking/</guid>
    </item>
    <item>
      <title>UK Cyber Monitoring Centre Sets Its Sights on US Expansion One Year After Launch</title>
      <link>https://www.infosecurity-magazine.com/news/uk-cyber-monitoring-centre-us/</link>
      <description>The US Cyber Monitoring Center should be operational in 2027, said the UK CMC leadership</description>
      <pubDate>Tue, 17 Mar 2026 10:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-cyber-monitoring-centre-us/</guid>
    </item>
    <item>
      <title>Security Flaw in AWS Bedrock Code Interpreter Raises Alarms</title>
      <link>https://www.infosecurity-magazine.com/news/security-flaw-aws-bedrock/</link>
      <description>DNS-based attack in AWS Bedrock AgentCore lets AI sandboxes exfiltrate cloud data</description>
      <pubDate>Mon, 16 Mar 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/security-flaw-aws-bedrock/</guid>
    </item>
    <item>
      <title>PixRevolution Malware Hijacks Brazil's PIX Transfers in Real Time</title>
      <link>https://www.infosecurity-magazine.com/news/pixrevolution-malware-brazils-pix/</link>
      <description>PixRevolution Android trojan hijacks Brazil’s PIX payments in real time using accessibility abuse</description>
      <pubDate>Thu, 12 Mar 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/pixrevolution-malware-brazils-pix/</guid>
    </item>
    <item>
      <title>Researchers Uncover ‘LeakyLooker’ Vulnerabilities in Google Looker Studio</title>
      <link>https://www.infosecurity-magazine.com/news/google-looker-studios-security-gaps/</link>
      <description>LeakyLooker flaws in Google Looker Studio let attackers run cross-tenant SQL attacks on cloud data</description>
      <pubDate>Wed, 11 Mar 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/google-looker-studios-security-gaps/</guid>
    </item>
    <item>
      <title>BlackSanta EDR-Killer Targets HR Teams in CV-Themed Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/blacksanta-edr-killer-targets-hr/</link>
      <description>BlackSanta malware targets HR staff with fake resumes, kills EDR and steals system data</description>
      <pubDate>Wed, 11 Mar 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/blacksanta-edr-killer-targets-hr/</guid>
    </item>
    <item>
      <title>Only 24% Of organizations Test Identity Recovery Every Six Months</title>
      <link>https://www.infosecurity-magazine.com/news/organizations-test-identity-sec-6/</link>
      <description>Only 24% of organizations test identity disaster recovery plans every 6 months, Quest Software said</description>
      <pubDate>Tue, 10 Mar 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/organizations-test-identity-sec-6/</guid>
    </item>
    <item>
      <title>AI Security Startups Dominate New Cyber Innovation Awards</title>
      <link>https://www.infosecurity-magazine.com/news/ai-security-startups-cyber/</link>
      <description>Over one in five winners of IT-Harvest’s 2026 Cyber 150 are AI security companies</description>
      <pubDate>Mon, 09 Mar 2026 13:25:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-security-startups-cyber/</guid>
    </item>
    <item>
      <title>ContextCrush Flaw Exposes AI Development Tools to Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/contextcrush-ai-development-tools/</link>
      <description>Critical flaw "ContextCrush" in Context7 MCP Server could allow malicious instructions into AI tools</description>
      <pubDate>Thu, 05 Mar 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/contextcrush-ai-development-tools/</guid>
    </item>
    <item>
      <title>Coruna Exploit Kit Targets Older iPhones in Multi-Stage Campaigns</title>
      <link>https://www.infosecurity-magazine.com/news/coruna-exploit-older-iphones/</link>
      <description>Exploit kit "Coruna" targets iPhones running iOS 13.0 to 17.2.1, focusing on financial data theft</description>
      <pubDate>Thu, 05 Mar 2026 12:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/coruna-exploit-older-iphones/</guid>
    </item>
    <item>
      <title>Coalition of Western Countries Launches 6G Cybersecurity Guidelines</title>
      <link>https://www.infosecurity-magazine.com/news/gcot-6g-cybersecurity-guidelines/</link>
      <description>A coalition of seven Western nations has launched guidelines to help integrate security-by-design principles into future 6G standards</description>
      <pubDate>Wed, 04 Mar 2026 16:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gcot-6g-cybersecurity-guidelines/</guid>
    </item>
    <item>
      <title>Multi-Stage "BadPaw" Malware Campaign Targets Ukraine</title>
      <link>https://www.infosecurity-magazine.com/news/badpaw-malware-targets-ukraine/</link>
      <description>Malware campaign uses Ukrainian email service for credibility, deploying "BadPaw" to execute attacks</description>
      <pubDate>Wed, 04 Mar 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/badpaw-malware-targets-ukraine/</guid>
    </item>
    <item>
      <title>Leaked Database Sheds Light on Iranian Crypto Sanctions Evasion</title>
      <link>https://www.infosecurity-magazine.com/news/iranian-crypto-leaked-database/</link>
      <description>Ariomex database reveals potential sanctions evasion and capital transfers tied to Iranian actors</description>
      <pubDate>Tue, 03 Mar 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/iranian-crypto-leaked-database/</guid>
    </item>
    <item>
      <title>Hybrid Middle East Conflict Triggers Surge in Global Cyber Activity</title>
      <link>https://www.infosecurity-magazine.com/news/middle-east-conflict-surge-global/</link>
      <description>Military strikes in the Middle East escalate cyber ops, raising spillover risks globally for firms</description>
      <pubDate>Mon, 02 Mar 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/middle-east-conflict-surge-global/</guid>
    </item>
    <item>
      <title>Cybersecurity M&amp;A Roundup: Firms Focus on AI Agents, as Check Point Announces Three Acquisitions</title>
      <link>https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-feb-26/</link>
      <description>Cybersecurity industry mergers and acquisitions in February continued around a focus on agentic AI</description>
      <pubDate>Mon, 02 Mar 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-feb-26/</guid>
    </item>
    <item>
      <title>Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks Intensify</title>
      <link>https://www.infosecurity-magazine.com/news/32m-phishing-emails-detected-2025/</link>
      <description>2025 saw 32M phishing emails, with identity threats surpassing vulnerabilities</description>
      <pubDate>Thu, 26 Feb 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/32m-phishing-emails-detected-2025/</guid>
    </item>
    <item>
      <title>44% Surge in App Exploits as AI Speeds Up Cyber-Attacks, IBM Finds</title>
      <link>https://www.infosecurity-magazine.com/news/app-exploits-surge-ai-speeds/</link>
      <description>IBM's 2026 X-Force report reveals 44% rise in cyber-attacks on public apps, driven by AI and flaws</description>
      <pubDate>Wed, 25 Feb 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/app-exploits-surge-ai-speeds/</guid>
    </item>
    <item>
      <title>North Korean Lazarus Group Expands Ransomware Activity With Medusa</title>
      <link>https://www.infosecurity-magazine.com/news/north-korean-lazarus-group-medusa/</link>
      <description>Ransomware Medusa linked to North Korean hackers targets US healthcare amid ongoing attacks</description>
      <pubDate>Tue, 24 Feb 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/north-korean-lazarus-group-medusa/</guid>
    </item>
    <item>
      <title>Shai-Hulud-Like Worm Targets Developers via npm and AI Tools</title>
      <link>https://www.infosecurity-magazine.com/news/shai-hulud-like-worm-devs-npm-ai/</link>
      <description>Supply chain worm mimicking Shai-Hulud malware spread via malicious npm packages, targeting AI tools has been identified by security researchers </description>
      <pubDate>Mon, 23 Feb 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/shai-hulud-like-worm-devs-npm-ai/</guid>
    </item>
    <item>
      <title>Remcos RAT Expands Real-Time Surveillance Capabilities</title>
      <link>https://www.infosecurity-magazine.com/news/remcos-rat-expands-real-time/</link>
      <description>New Remcos RAT variant enhances real-time surveillance and evasion techniques to compromise Windows</description>
      <pubDate>Thu, 19 Feb 2026 16:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/remcos-rat-expands-real-time/</guid>
    </item>
    <item>
      <title>Industrial-Scale Fake Coretax Apps Drive $2m Fraud in Indonesia</title>
      <link>https://www.infosecurity-magazine.com/news/fake-coretax-apps-fraud-indonesia/</link>
      <description>Fraud campaign exploiting Indonesia’s Coretax resulted in $1.5m to $2m in losses via malicious apps</description>
      <pubDate>Thu, 19 Feb 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fake-coretax-apps-fraud-indonesia/</guid>
    </item>
    <item>
      <title>Cryptojacking Campaign Exploits Driver to Boost Monero Mining</title>
      <link>https://www.infosecurity-magazine.com/news/cryptojacking-driver-boost-monero/</link>
      <description>Cryptojacking campaign used pirated software to deploy a persistent XMRig miner with stealth tactics</description>
      <pubDate>Wed, 18 Feb 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cryptojacking-driver-boost-monero/</guid>
    </item>
    <item>
      <title>AI Assistants Used as Covert Command-and-Control Relays</title>
      <link>https://www.infosecurity-magazine.com/news/ai-assistants-covert-c2-relays/</link>
      <description>AIs like Grok and Microsoft Copilot can be exploited as covert C2 channels for malware communication</description>
      <pubDate>Wed, 18 Feb 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-assistants-covert-c2-relays/</guid>
    </item>
    <item>
      <title>Vulnerabilities in Password Managers Allow Hackers to View and Change Passwords</title>
      <link>https://www.infosecurity-magazine.com/news/vulnerabilities-password-managers/</link>
      <description>Security researchers have challenged end-to-end encryption claims from popular commercial password managers</description>
      <pubDate>Mon, 16 Feb 2026 17:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/vulnerabilities-password-managers/</guid>
    </item>
    <item>
      <title>OysterLoader Evolves With New C2 Infrastructure and Obfuscation</title>
      <link>https://www.infosecurity-magazine.com/news/oysterloader-new-c2-infrastructure/</link>
      <description>OysterLoader malware evolves into 2026, refining C2 infrastructure, obfuscation &amp; infection stages</description>
      <pubDate>Mon, 16 Feb 2026 16:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/oysterloader-new-c2-infrastructure/</guid>
    </item>
    <item>
      <title>Operation DoppelBrand Weaponizes Trusted Brands For Credential Theft</title>
      <link>https://www.infosecurity-magazine.com/news/operation-doppelbrand-trusted/</link>
      <description>New phishing campaign dubbed Operation DoppelBrand targeted major financial firms like Wells Fargo</description>
      <pubDate>Mon, 16 Feb 2026 15:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/operation-doppelbrand-trusted/</guid>
    </item>
    <item>
      <title>AI Skills Represent Dangerous New Attack Surface, Says TrendAI</title>
      <link>https://www.infosecurity-magazine.com/news/ai-skills-dangerous-new-attack/</link>
      <description>New TrendAI report warns that most security tools can’t protect against attacks on AI skills artifacts</description>
      <pubDate>Thu, 12 Feb 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-skills-dangerous-new-attack/</guid>
    </item>
    <item>
      <title>Phorpiex Phishing Delivers Low-Noise Global Group Ransomware</title>
      <link>https://www.infosecurity-magazine.com/news/phorpiex-phishing-global-group/</link>
      <description>High-volume phishing campaign delivers Phorpiex malware via malicious Windows Shortcut files</description>
      <pubDate>Tue, 10 Feb 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/phorpiex-phishing-global-group/</guid>
    </item>
    <item>
      <title>New Mobile Spyware ZeroDayRAT Targets Android and iOS</title>
      <link>https://www.infosecurity-magazine.com/news/zerodayrat-mobile-spyware-android/</link>
      <description>ZeroDayRAT is a new mobile spyware targeting Android and iOS, offering attackers persistent access</description>
      <pubDate>Tue, 10 Feb 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/zerodayrat-mobile-spyware-android/</guid>
    </item>
    <item>
      <title>VoidLink Malware Exhibits Multi-Cloud Capabilities and AI Code</title>
      <link>https://www.infosecurity-magazine.com/news/voidlink-malware-multi-cloud-ai/</link>
      <description>VoidLink, a Linux-based C2 framework, facilitates credential theft, data exfiltration across clouds</description>
      <pubDate>Mon, 09 Feb 2026 15:25:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/voidlink-malware-multi-cloud-ai/</guid>
    </item>
    <item>
      <title>New Cyber Startup Programme to Debut at Infosecurity Europe 2026 </title>
      <link>https://www.infosecurity-magazine.com/news/cyber-startup-programme/</link>
      <description>Infosecurity Europe 2026 will debut a new Cyber Startup Programme, featuring a dedicated show-floor zone for early-stage cybersecurity companies to showcase innovations, connect with investors and highlight emerging technologies</description>
      <pubDate>Fri, 06 Feb 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cyber-startup-programme/</guid>
    </item>
    <item>
      <title>Global SystemBC Botnet Found Active Across 10,000 Infected Systems</title>
      <link>https://www.infosecurity-magazine.com/news/global-systembc-botnet-10000/</link>
      <description>SystemBC malware linked to 10,000 infected IPs, posing risks to sensitive government infrastructure</description>
      <pubDate>Wed, 04 Feb 2026 16:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/global-systembc-botnet-10000/</guid>
    </item>
    <item>
      <title>New Technical Markers Reveal Expanding ShadowSyndicate Cybercriminal Infrastructure</title>
      <link>https://www.infosecurity-magazine.com/news/shadowsyndicate/</link>
      <description>ShadowSyndicate cluster expands with new SSH fingerprints connecting servers to other ransomware ops</description>
      <pubDate>Wed, 04 Feb 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/shadowsyndicate/</guid>
    </item>
    <item>
      <title>NSA Publishes New Zero Trust Implementation Guidelines</title>
      <link>https://www.infosecurity-magazine.com/news/nsa-zero-trust-implementation/</link>
      <description>NSA released new guidelines to help organizations achieve target-level Zero Trust maturity</description>
      <pubDate>Mon, 02 Feb 2026 16:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nsa-zero-trust-implementation/</guid>
    </item>
    <item>
      <title>Cybersecurity M&amp;A Roundup: CrowdStrike and Palo Alto Networks Lead Investment in AI Security </title>
      <link>https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-jan-26/</link>
      <description>2026 has started with a string of cybersecurity industry mergers &amp; acquisitions as vendors position themselves around agentic AI</description>
      <pubDate>Mon, 02 Feb 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-jan-26/</guid>
    </item>
    <item>
      <title>US Data Breaches Hit Record High but Victim Numbers Decline</title>
      <link>https://www.infosecurity-magazine.com/news/us-data-breaches-record-high/</link>
      <description>Non-profit ITRC says the number of data breaches increased 5% annually to reach a record total in 2025</description>
      <pubDate>Thu, 29 Jan 2026 12:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-data-breaches-record-high/</guid>
    </item>
    <item>
      <title>Number of Cybersecurity Pros Surges 194% in Four Years</title>
      <link>https://www.infosecurity-magazine.com/news/number-cybersecurity-pros-surges/</link>
      <description>Cybersecurity is now the fifth fastest-growing occupation in the UK, says Socura</description>
      <pubDate>Thu, 29 Jan 2026 09:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/number-cybersecurity-pros-surges/</guid>
    </item>
    <item>
      <title>Researchers Uncover 454,000+ Malicious Open Source Packages</title>
      <link>https://www.infosecurity-magazine.com/news/454000-malicious-open-source/</link>
      <description>Sonatype warns that open source threats became industrialized with a surge in malicious packages in 2025</description>
      <pubDate>Wed, 28 Jan 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/454000-malicious-open-source/</guid>
    </item>
    <item>
      <title>Over 80% of Ethical Hackers Now Use AI </title>
      <link>https://www.infosecurity-magazine.com/news/over-80-of-ethical-hackers-now-use/</link>
      <description>Bugcrowd study reveals 82% of security researchers now use AI, a big increase from 2023 figures</description>
      <pubDate>Tue, 27 Jan 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/over-80-of-ethical-hackers-now-use/</guid>
    </item>
    <item>
      <title>CISA Releases List of Post-Quantum Cryptography Product Categories</title>
      <link>https://www.infosecurity-magazine.com/news/cisa-post-quantum-cryptography/</link>
      <description>CISA released initial list of PQC-capable hardware and software to guide companies amid quantum threats</description>
      <pubDate>Mon, 26 Jan 2026 16:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisa-post-quantum-cryptography/</guid>
    </item>
    <item>
      <title>Researchers Uncover “Haxor” SEO Poisoning Marketplace</title>
      <link>https://www.infosecurity-magazine.com/news/researchers-haxor-seo-poisoning/</link>
      <description>Fortra researchers have discovered a new SEO poisoning operation known as “HaxorSEO”</description>
      <pubDate>Mon, 26 Jan 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/researchers-haxor-seo-poisoning/</guid>
    </item>
    <item>
      <title>Critical Appsmith Flaw Enables Account Takeovers</title>
      <link>https://www.infosecurity-magazine.com/news/appsmith-flaw-account-takeovers/</link>
      <description>Critical vulnerability in Appsmith allows account takeover via flawed password reset process</description>
      <pubDate>Thu, 22 Jan 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/appsmith-flaw-account-takeovers/</guid>
    </item>
    <item>
      <title>Phishing and Spoofed Sites Remain Primary Entry Points For Olympics</title>
      <link>https://www.infosecurity-magazine.com/news/phishing-spoofed-sites-olympic/</link>
      <description>Cyber risks for the Milano-Cortina 2026 Winter Games include phishing and spoofed websites as key threat vectors</description>
      <pubDate>Wed, 21 Jan 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/phishing-spoofed-sites-olympic/</guid>
    </item>
    <item>
      <title>Peruvian Loan Scam Harvests Cards and PINs via Fake Applications</title>
      <link>https://www.infosecurity-magazine.com/news/loan-scam-harvests-cards-pins/</link>
      <description>Loan phishing operation in Peru is stealing card info by impersonating financial institutions</description>
      <pubDate>Wed, 21 Jan 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/loan-scam-harvests-cards-pins/</guid>
    </item>
    <item>
      <title>EU Unveils Cybersecurity Overhaul with Proposed Update to Cybersecurity Act</title>
      <link>https://www.infosecurity-magazine.com/news/eu-unveils-cybersecurity-act-2/</link>
      <description>The EU’s Cybersecurity Act 2.0 will aim to address some of the challenges of the current CSA, including the slow rollout of certification schemes</description>
      <pubDate>Wed, 21 Jan 2026 12:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/eu-unveils-cybersecurity-act-2/</guid>
    </item>
    <item>
      <title>Chainlit Security Flaws Highlight Infrastructure Risks in AI Apps</title>
      <link>https://www.infosecurity-magazine.com/news/chainlit-security-flaws-ai-apps/</link>
      <description>2 security vulnerabilities in the Chainlit framework expose risks from web flaws in AI applications</description>
      <pubDate>Tue, 20 Jan 2026 16:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chainlit-security-flaws-ai-apps/</guid>
    </item>
    <item>
      <title>Researchers Uncover PDFSIDER Malware Built for Long-Term, Covert System Access</title>
      <link>https://www.infosecurity-magazine.com/news/pdfsider-anti-vm-checks-hidden/</link>
      <description>New malware PDFSIDER enables covert, long-term access to compromised systems via advanced techniques</description>
      <pubDate>Mon, 19 Jan 2026 16:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/pdfsider-anti-vm-checks-hidden/</guid>
    </item>
    <item>
      <title>CISO Role Reaches “Inflexion Point” With Executive-Level Titles</title>
      <link>https://www.infosecurity-magazine.com/news/ciso-role-inflexion-point/</link>
      <description>IANS Research reveals a growth in executive-level CISO titles, amid resource challenges</description>
      <pubDate>Thu, 15 Jan 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ciso-role-inflexion-point/</guid>
    </item>
    <item>
      <title>Impersonation Fraud Drives Record $17bn in Crypto Losses </title>
      <link>https://www.infosecurity-magazine.com/news/impersonation-fraud-record-17bn/</link>
      <description>Chainalysis estimates $17bn will be lost to crypto scams in 2025 as AI takes hold</description>
      <pubDate>Wed, 14 Jan 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/impersonation-fraud-record-17bn/</guid>
    </item>
    <item>
      <title>Illicit Crypto Activity Hits Record $158bn in 2025</title>
      <link>https://www.infosecurity-magazine.com/news/illicit-crypto-activity-record/</link>
      <description>TRM Labs says illegal crypto flows into digital wallets increased to $158bn in 2025</description>
      <pubDate>Mon, 12 Jan 2026 10:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/illicit-crypto-activity-record/</guid>
    </item>
    <item>
      <title>FBI Warns of North Korean QR Phishing Campaigns</title>
      <link>https://www.infosecurity-magazine.com/news/fbi-warns-north-korean-qr-phishing/</link>
      <description>The FBI says North Korea’s Kimsuky APT group is using QR codes in spear phishing campaigns</description>
      <pubDate>Fri, 09 Jan 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fbi-warns-north-korean-qr-phishing/</guid>
    </item>
    <item>
      <title>China-Linked UAT-7290 Targets Telecom Networks in South Asia</title>
      <link>https://www.infosecurity-magazine.com/news/china-uat-7290-targets-telecoms/</link>
      <description>A long-term cyber-espionage campaign targeting South Asia's telecom firms has been linked to UAT-7290</description>
      <pubDate>Thu, 08 Jan 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/china-uat-7290-targets-telecoms/</guid>
    </item>
    <item>
      <title>Fifth of Breaches Take Two Weeks to Recover From</title>
      <link>https://www.infosecurity-magazine.com/news/fifth-breaches-two-weeks-recover/</link>
      <description>Absolute Security claims that full recovery from endpoint-related downtime can take up to a fortnight for most organizations</description>
      <pubDate>Thu, 08 Jan 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fifth-breaches-two-weeks-recover/</guid>
    </item>
    <item>
      <title>US To Leave Global Forum on Cyber Expertise</title>
      <link>https://www.infosecurity-magazine.com/news/us-leave-global-forum-on-cyber/</link>
      <description>The Trump administration decided to leave 66 international organizations, including the GFCE and the European Centre of Excellence for Countering Hybrid Threats</description>
      <pubDate>Thu, 08 Jan 2026 11:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-leave-global-forum-on-cyber/</guid>
    </item>
    <item>
      <title>The Biggest Cybersecurity Mergers and Acquisitions of 2025</title>
      <link>https://www.infosecurity-magazine.com/news-features/biggest-cybersecurity-mergers/</link>
      <description>Infosecurity explores the biggest cybersecurity mergers and acquisitions of 2025, including two mega-deals that reshaped the industry</description>
      <pubDate>Thu, 25 Dec 2025 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news-features/biggest-cybersecurity-mergers/</guid>
    </item>
    <item>
      <title>NIST, MITRE Partner on $20m AI Centers For Manufacturing and Cybersecurity</title>
      <link>https://www.infosecurity-magazine.com/news/nist-mitre-ai-centers/</link>
      <description>NIST and MITRE are collaboratively launching two centers to advance AI security for US manufacturing and critical infrastructure</description>
      <pubDate>Wed, 24 Dec 2025 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nist-mitre-ai-centers/</guid>
    </item>
    <item>
      <title>ServiceNow to Pay $7.8bn For OT Security Specialist Armis</title>
      <link>https://www.infosecurity-magazine.com/news/servicenow-78bn-ot-security/</link>
      <description>ServiceNow is set to acquire Armis for $7.75bn in a cash-only deal expected to close in the second half of 2026</description>
      <pubDate>Wed, 24 Dec 2025 10:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/servicenow-78bn-ot-security/</guid>
    </item>
    <item>
      <title>Scripted Sparrow Sends Millions of BEC Emails Each Month</title>
      <link>https://www.infosecurity-magazine.com/news/scripted-sparrow-millions-bec-each/</link>
      <description>Fortra has uncovered a prolific BEC group dubbed “Scripted Sparrow” spanning three continents and at least five countries</description>
      <pubDate>Mon, 22 Dec 2025 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/scripted-sparrow-millions-bec-each/</guid>
    </item>
    <item>
      <title>North Korea Steals Over $2bn in Crypto in 2025</title>
      <link>https://www.infosecurity-magazine.com/news/north-korea-steals-over-2bn-crypto/</link>
      <description>Chainalysis warns North Korea continues to steal billions in crypto for its weapons program</description>
      <pubDate>Thu, 18 Dec 2025 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/north-korea-steals-over-2bn-crypto/</guid>
    </item>
    <item>
      <title>New BeaverTail Malware Variant Linked to Lazarus Group</title>
      <link>https://www.infosecurity-magazine.com/news/beavertail-variant-linked-lazarus/</link>
      <description>A new variant of the BeaverTail malware linked to North Korean hackers has been identified targeting cryptocurrency traders and developers</description>
      <pubDate>Thu, 18 Dec 2025 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/beavertail-variant-linked-lazarus/</guid>
    </item>
    <item>
      <title>Amazon Warns Russian GRU Hackers Target Western Firms via Edge Devices</title>
      <link>https://www.infosecurity-magazine.com/news/amazon-russian-gru-hackers-target/</link>
      <description>Amazon researchers believe this campaign is part of a bigger operation spearheaded by Russia’s military intelligence service, the GRU</description>
      <pubDate>Tue, 16 Dec 2025 12:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/amazon-russian-gru-hackers-target/</guid>
    </item>
    <item>
      <title>Top 25 Most Dangerous Software Weaknesses of 2025 Revealed</title>
      <link>https://www.infosecurity-magazine.com/news/top-25-dangerous-software/</link>
      <description>MITRE has released its Top 25 CWE list for 2025, compiled from software and hardware flaws behind almost 40,000 CVEs</description>
      <pubDate>Mon, 15 Dec 2025 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/top-25-dangerous-software/</guid>
    </item>
    <item>
      <title>OpenAI Enhances Defensive Models to Mitigate Cyber-Threats</title>
      <link>https://www.infosecurity-magazine.com/news/openai-enhances-defensive-models/</link>
      <description>OpenAI has reported a surge in performance as GPT-5.1-Codex-Max reaching 76% in capability assessments, and warned of upcoming cyber-risks</description>
      <pubDate>Thu, 11 Dec 2025 16:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/openai-enhances-defensive-models/</guid>
    </item>
    <item>
      <title>Malware Discovered in 19 Visual Studio Code Extensions</title>
      <link>https://www.infosecurity-magazine.com/news/malware-discovered-in-19-vs-code/</link>
      <description>A new campaign involving 19 malicious Visual Studio Code extensions used a legitimate npm package to embed malware in dependency folders</description>
      <pubDate>Thu, 11 Dec 2025 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/malware-discovered-in-19-vs-code/</guid>
    </item>
    <item>
      <title>“Cyber Tax” Warning as Two-Fifths of SMBs Raise Prices After Breach</title>
      <link>https://www.infosecurity-magazine.com/news/twofifths-smbs-raise-prices-after/</link>
      <description>New ITRC research finds 81% of US small businesses suffered a data or security breach in the past year</description>
      <pubDate>Thu, 11 Dec 2025 09:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/twofifths-smbs-raise-prices-after/</guid>
    </item>
    <item>
      <title>Gartner Calls For Pause on AI Browser Use</title>
      <link>https://www.infosecurity-magazine.com/news/gartner-calls-for-pause-ai-browsers/</link>
      <description>Gartner has called for organizations to block today’s AI browsers on security concerns</description>
      <pubDate>Tue, 09 Dec 2025 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gartner-calls-for-pause-ai-browsers/</guid>
    </item>
    <item>
      <title>New GhostFrame Phishing Framework Hits Over One Million Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/ghostframe-phishing-hits-one/</link>
      <description>The GhostFrame phishing framework, using stealthy iframes, was linked to over 1 million attacks</description>
      <pubDate>Thu, 04 Dec 2025 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ghostframe-phishing-hits-one/</guid>
    </item>
    <item>
      <title>Skills Shortages Trump Headcount as Critical Cyber Challenge</title>
      <link>https://www.infosecurity-magazine.com/news/skills-shortages-headcount-2025/</link>
      <description>ISC2 report reveals 59% of global organizations have critical or significant skills shortages</description>
      <pubDate>Thu, 04 Dec 2025 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/skills-shortages-headcount-2025/</guid>
    </item>
    <item>
      <title>French NGO Reporters Without Borders Targeted by Star Blizzard</title>
      <link>https://www.infosecurity-magazine.com/news/star-blizzard-targets-reporters/</link>
      <description>A fresh wave of spear-phishing linked to the Russia-based Star Blizzard group has been detected by Sekoia</description>
      <pubDate>Wed, 03 Dec 2025 16:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/star-blizzard-targets-reporters/</guid>
    </item>
    <item>
      <title>Yearn Finance yETH Pool Hit by $9M Exploit</title>
      <link>https://www.infosecurity-magazine.com/news/yearn-finance-yeth-pool-exploit/</link>
      <description>A critical vulnerability in Yearn Finance's yETH pool allowed an attacker to steal around $9m</description>
      <pubDate>Wed, 03 Dec 2025 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/yearn-finance-yeth-pool-exploit/</guid>
    </item>
    <item>
      <title>UK Ransomware Payment Ban to Come with Exemptions, Security Minster Say</title>
      <link>https://www.infosecurity-magazine.com/news/uk-ransomware-payment-ban/</link>
      <description>The UK government’s proposed ransomware payment ban for public sector and critical infrastructure will come with national security exemptions </description>
      <pubDate>Wed, 03 Dec 2025 13:25:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-ransomware-payment-ban/</guid>
    </item>
    <item>
      <title>ShadyPanda's Seven-Year Campaign Infects 4.3M Chrome and Edge Users</title>
      <link>https://www.infosecurity-magazine.com/news/shadypanda-infects-43m-chrome-edge/</link>
      <description>Infected 4.3 million Chrome and Edge users via extensions; ShadyPanda exploited browser marketplaces</description>
      <pubDate>Tue, 02 Dec 2025 15:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/shadypanda-infects-43m-chrome-edge/</guid>
    </item>
    <item>
      <title>New Android Albiriox Malware Gains Traction in Dark Web Markets</title>
      <link>https://www.infosecurity-magazine.com/news/android-maas-malware-albiriox-dark/</link>
      <description>Android malware Albiriox emerged as MaaS, offering device takeover and real-time fraud capabilities</description>
      <pubDate>Mon, 01 Dec 2025 16:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/android-maas-malware-albiriox-dark/</guid>
    </item>
    <item>
      <title>Malware Manipulates AI Detection in Latest npm Package Breach</title>
      <link>https://www.infosecurity-magazine.com/news/malware-ai-detection-npm-package/</link>
      <description>Malicious npm package targets AI security with misleading prompts, exploiting automated analysis</description>
      <pubDate>Mon, 01 Dec 2025 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/malware-ai-detection-npm-package/</guid>
    </item>
    <item>
      <title>Cybersecurity M&amp;A Roundup: Cyber Giants Strengthen AI Security Offerings</title>
      <link>https://www.infosecurity-magazine.com/news/cyber-deals-november-2025/</link>
      <description>November 2025 saw cybersecurity giants like Palo Alto Networks, Bugcrowd and Zscaler invest in AI-powered security solutions</description>
      <pubDate>Mon, 01 Dec 2025 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cyber-deals-november-2025/</guid>
    </item>
    <item>
      <title>UK Report Proposes Liability For Software Provider Insecurity</title>
      <link>https://www.infosecurity-magazine.com/news/uk-liability-software-providers/</link>
      <description>A new report from the UK Business and Trade Committee has called for accountability of software providers for cyber flaws amid rising attack costs</description>
      <pubDate>Wed, 26 Nov 2025 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-liability-software-providers/</guid>
    </item>
    <item>
      <title>AI and Deepfake-Powered Fraud Skyrockets Amid Identity Fraud Stagnation</title>
      <link>https://www.infosecurity-magazine.com/news/ai-deepfake-fraud-skyrockets/</link>
      <description>In its latest annual identity fraud report, Sumsub observed a “sophistication shift” in global fraud trends</description>
      <pubDate>Tue, 25 Nov 2025 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-deepfake-fraud-skyrockets/</guid>
    </item>
    <item>
      <title>Mounting Cyber-Threats Prompt Calls For Economic Security Bill</title>
      <link>https://www.infosecurity-magazine.com/news/mounting-cyber-threats-economic/</link>
      <description>MPs in the UK want a new economic security regime to tackle cyber and related threats</description>
      <pubDate>Tue, 25 Nov 2025 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/mounting-cyber-threats-economic/</guid>
    </item>
    <item>
      <title>CISA Issues New Guidance on Bulletproof Hosting Threat</title>
      <link>https://www.infosecurity-magazine.com/news/cisa-guidance-bulletproof-hosting/</link>
      <description>CISA launches guide to combat cybercrime via bulletproof hosting, recommending measures for ISPs</description>
      <pubDate>Thu, 20 Nov 2025 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisa-guidance-bulletproof-hosting/</guid>
    </item>
    <item>
      <title>Gartner: 40% of Firms to Be Hit By Shadow AI Security Incidents</title>
      <link>https://www.infosecurity-magazine.com/news/gartner-40-firms-hit-shadow-ai/</link>
      <description>Gartner predicts that two-fifths of organizations will suffer security and compliance incidents due to shadow AI by 2030</description>
      <pubDate>Thu, 20 Nov 2025 10:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gartner-40-firms-hit-shadow-ai/</guid>
    </item>
    <item>
      <title>GenAI and Deepfakes Drive Digital Forgeries and Biometric Fraud </title>
      <link>https://www.infosecurity-magazine.com/news/genai-deepfakes-digital-forgeries/</link>
      <description>Entrust says AI is helping fraudsters open new accounts and bypass biometric checks</description>
      <pubDate>Tue, 18 Nov 2025 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/genai-deepfakes-digital-forgeries/</guid>
    </item>
    <item>
      <title>Half a Million Stolen FTSE 100 Credentials Found on Criminal Sites</title>
      <link>https://www.infosecurity-magazine.com/news/half-million-stolen-ftse-100/</link>
      <description>Socura finds 460,000 compromised credentials belonging to FTSE 100 company employees</description>
      <pubDate>Tue, 18 Nov 2025 09:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/half-million-stolen-ftse-100/</guid>
    </item>
    <item>
      <title>Cyber Readiness Stalls Despite Confidence in Incident Response</title>
      <link>https://www.infosecurity-magazine.com/news/cyber-readiness-stalls-incident/</link>
      <description>New Immersive report finds cyber resilience and decision making are flatlining </description>
      <pubDate>Mon, 17 Nov 2025 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cyber-readiness-stalls-incident/</guid>
    </item>
    <item>
      <title>CISO Pay Increases 7% As Budget Growth Slows</title>
      <link>https://www.infosecurity-magazine.com/news/ciso-pay-increases-7-budget-growth/</link>
      <description>An IANS study finds CISO compensation rose 6.7% on average in 2025 while budget growth halved compared to 2024</description>
      <pubDate>Thu, 13 Nov 2025 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ciso-pay-increases-7-budget-growth/</guid>
    </item>
    <item>
      <title>Improve Collaboration to Hit Back At Rising Fraud, Says techUK</title>
      <link>https://www.infosecurity-magazine.com/news/collaboration-hit-back-rising/</link>
      <description>Industry body techUK calls for real-time intelligence sharing across sectors to combat fraud</description>
      <pubDate>Thu, 13 Nov 2025 10:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/collaboration-hit-back-rising/</guid>
    </item>
    <item>
      <title>Cyber-Insurance Payouts Soar 230% in UK</title>
      <link>https://www.infosecurity-magazine.com/news/cyberinsurance-payouts-soar-230-in/</link>
      <description>UK cyber-insurers paid 230% more to policyholders in 2024 than the year before</description>
      <pubDate>Wed, 12 Nov 2025 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cyberinsurance-payouts-soar-230-in/</guid>
    </item>
    <item>
      <title>NCSC Set to Retire Web Check and Mail Check Tools</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-retire-web-check-mail-check/</link>
      <description>The UK’s National Cyber Security Centre has urged users of its Web Check and Mail Check services to find alternatives</description>
      <pubDate>Mon, 10 Nov 2025 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-retire-web-check-mail-check/</guid>
    </item>
    <item>
      <title>Multi-Turn Attacks Expose Weaknesses in Open-Weight LLM Models</title>
      <link>https://www.infosecurity-magazine.com/news/multi-turn-attacks-llm-models/</link>
      <description>A new Cisco report exposed large language models to multi-turn adversarial attacks with 90% success rates </description>
      <pubDate>Thu, 06 Nov 2025 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/multi-turn-attacks-llm-models/</guid>
    </item>
    <item>
      <title>Hundreds of Malware-Laden Apps Downloaded 42 Million Times From Google Play </title>
      <link>https://www.infosecurity-magazine.com/news/apps-download-41-million-times/</link>
      <description>Zscaler estimates 239 malicious Android apps made it onto the official Play store over the past year</description>
      <pubDate>Wed, 05 Nov 2025 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/apps-download-41-million-times/</guid>
    </item>
    <item>
      <title>Identity Is Now the Top Source of Cloud Risk</title>
      <link>https://www.infosecurity-magazine.com/news/identity-is-now-the-top-cloud-risk/</link>
      <description>ReliaQuest data reveals identity issues were responsible for 44% of cloud security alerts in Q3</description>
      <pubDate>Tue, 04 Nov 2025 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/identity-is-now-the-top-cloud-risk/</guid>
    </item>
    <item>
      <title>Leak Site Ransomware Victims Spike 13% in a Year </title>
      <link>https://www.infosecurity-magazine.com/news/leak-site-ransomware-victims-spike/</link>
      <description>CrowdStrike data reveals a 13% annual increase in the number of European ransomware victims in 2025 </description>
      <pubDate>Mon, 03 Nov 2025 09:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/leak-site-ransomware-victims-spike/</guid>
    </item>
    <item>
      <title>Cybersecurity M&amp;A Roundup: LevelBlue Confirms Third 2025 Acquisition with Cybereason</title>
      <link>https://www.infosecurity-magazine.com/news-features/cyber-ma-roundup-october-2025/</link>
      <description>One of the biggest deals of October 2025 was Veeam buying Securiti AI for $1.725bn</description>
      <pubDate>Fri, 31 Oct 2025 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news-features/cyber-ma-roundup-october-2025/</guid>
    </item>
    <item>
      <title>Proton Claims 300 Million Records Compromised So Far This Year</title>
      <link>https://www.infosecurity-magazine.com/news/proton-300-million-records/</link>
      <description>A new dark web analysis reveals more than 300 million records have been breached in 2025 to date</description>
      <pubDate>Thu, 30 Oct 2025 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/proton-300-million-records/</guid>
    </item>
    <item>
      <title>PHP Servers and IoT Devices Face Growing Cyber-Attack Risks</title>
      <link>https://www.infosecurity-magazine.com/news/php-servers-and-iot-devices-cyber/</link>
      <description>A rise in attacks on PHP servers, IoT devices and cloud gateways is linked to botnets exploiting flaws, according to new research published by Qualys</description>
      <pubDate>Wed, 29 Oct 2025 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/php-servers-and-iot-devices-cyber/</guid>
    </item>
    <item>
      <title>Open Source “b3” Benchmark to Boost LLM Security for Agents</title>
      <link>https://www.infosecurity-magazine.com/news/open-source-b3-benchmark-security/</link>
      <description>The backbone breaker benchmark (b3) has been launched to enhance the security of LLMs within AI agents</description>
      <pubDate>Wed, 29 Oct 2025 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/open-source-b3-benchmark-security/</guid>
    </item>
    <item>
      <title>A Quarter of Scam Victims Have Considered Self-Harm </title>
      <link>https://www.infosecurity-magazine.com/news/quarter-scam-victims-considered/</link>
      <description>ITRC report charts shocking rise of identity fraud victims driven to thoughts of self-harm</description>
      <pubDate>Tue, 28 Oct 2025 12:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/quarter-scam-victims-considered/</guid>
    </item>
    <item>
      <title>Europol Warns of Rising Threat From Caller ID Spoofing Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/europol-warns-id-spoofing-attacks/</link>
      <description>Europol called for action against caller ID spoofing, linking attacks to significant online fraud</description>
      <pubDate>Mon, 27 Oct 2025 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/europol-warns-id-spoofing-attacks/</guid>
    </item>
    <item>
      <title>UK Fraud Cases Surge 17% Annually</title>
      <link>https://www.infosecurity-magazine.com/news/uk-fraud-cases-surge-17-annually/</link>
      <description>UK Finance reveals a 3% increase in the value and 17% increase in the volume of fraud in H1 2025</description>
      <pubDate>Mon, 27 Oct 2025 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-fraud-cases-surge-17-annually/</guid>
    </item>
    <item>
      <title>Ransomware Payouts Surge to $3.6m Amid Evolving Tactics</title>
      <link>https://www.infosecurity-magazine.com/news/ransomware-payouts-surge-dollar36m/</link>
      <description>According to ExtraHop’s latest threat landscape report, average ransomware payments surged 44% to $3.6m in 2025 despite fewer incidents</description>
      <pubDate>Tue, 21 Oct 2025 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ransomware-payouts-surge-dollar36m/</guid>
    </item>
    <item>
      <title>AI-Driven Social Engineering Top Cyber Threat for 2026, ISACA Survey Reveals</title>
      <link>https://www.infosecurity-magazine.com/news/ai-social-engineering-top-cyber/</link>
      <description>Only one in ten IT and cybersecurity professionals feels “very prepared” to manage generative AI risks</description>
      <pubDate>Mon, 20 Oct 2025 14:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-social-engineering-top-cyber/</guid>
    </item>
    <item>
      <title>AI Attacks Surge as Microsoft Process 100 Trillion Signals Daily</title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-process-100-trillion/</link>
      <description>Microsoft systems analyze over 100 trillion daily signals, suggesting dramatically increasing AI-driven cyber-threats</description>
      <pubDate>Thu, 16 Oct 2025 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-process-100-trillion/</guid>
    </item>
    <item>
      <title>Over 23 Million Victims Hit by Data Breaches in Q3 </title>
      <link>https://www.infosecurity-magazine.com/news/over-23-million-victims-data/</link>
      <description>Data from the Identity Theft Resource Center reveals 23 million individuals victimized by breaches in Q3 2025</description>
      <pubDate>Thu, 16 Oct 2025 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/over-23-million-victims-data/</guid>
    </item>
    <item>
      <title>UK Firms Lose Average of £2.9m to AI Risk</title>
      <link>https://www.infosecurity-magazine.com/news/uk-firms-lose-average-29m-ai-risk/</link>
      <description>A new EY report claims unmanaged AI risk is causing millions of pounds’ worth of losses for UK organizations</description>
      <pubDate>Tue, 14 Oct 2025 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-firms-lose-average-29m-ai-risk/</guid>
    </item>
    <item>
      <title>Google: Clop Accessed “Significant Amount” of Data in Oracle EBS Exploit  </title>
      <link>https://www.infosecurity-magazine.com/news/google-clop-data-oracle-exploit/</link>
      <description>GTIG highlighted indicators that Clop is behind the extortion campaign targeting Oracle EBS instances, with its activity likely beginning as early as August 9</description>
      <pubDate>Fri, 10 Oct 2025 11:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/google-clop-data-oracle-exploit/</guid>
    </item>
    <item>
      <title>Pro-Russia Hacktivists “Claim” Attack on Water Utility Honeypot</title>
      <link>https://www.infosecurity-magazine.com/news/russia-hacktivistsattack-water/</link>
      <description>Forescout said that the TwoNet actor was lured into attacking a honeypot disguised as a water treatment utility, providing insights into the group’s tactics </description>
      <pubDate>Fri, 10 Oct 2025 09:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/russia-hacktivistsattack-water/</guid>
    </item>
    <item>
      <title>Researchers Warn of Security Gaps in AI Browsers</title>
      <link>https://www.infosecurity-magazine.com/news/architectural-flaws-ai-browsers/</link>
      <description>A new report from SquareX Labs highlights security weaknesses in AI browsers like Comet, revealing new cyber-risks</description>
      <pubDate>Thu, 09 Oct 2025 14:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/architectural-flaws-ai-browsers/</guid>
    </item>
    <item>
      <title>All SonicWall Cloud Backup Users Have Firewall Configuration Files Stolen</title>
      <link>https://www.infosecurity-magazine.com/news/sonicwall-cloud-firewall/</link>
      <description>SonicWall said that a threat actor has accessed files containing encrypted credentials and configuration data for all customers who have used its cloud backup service</description>
      <pubDate>Thu, 09 Oct 2025 12:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/sonicwall-cloud-firewall/</guid>
    </item>
    <item>
      <title>High Number of Windows 10 Users Remain as End-of-Life Looms</title>
      <link>https://www.infosecurity-magazine.com/news/windows-10-users-end-of-life/</link>
      <description>A new report from TeamViewer found that 40% of global endpoints still run Windows 10, just days before security updates and support ends for the operating system</description>
      <pubDate>Thu, 09 Oct 2025 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/windows-10-users-end-of-life/</guid>
    </item>
    <item>
      <title>Digital Fraud Costs Companies Worldwide 7.7% of Annual Revenue</title>
      <link>https://www.infosecurity-magazine.com/news/digital-fraud-costs-companies/</link>
      <description>According to TransUnion, digital fraud has cost companies $534bn in losses globally with US business hit hardest</description>
      <pubDate>Wed, 08 Oct 2025 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/digital-fraud-costs-companies/</guid>
    </item>
  </channel>
</rss>