https://www.infosecurity-magazine.com/internet-security/ Copyright © 2026 Reed Exhibitions Ltd. All Rights Reserved. https://www.infosecurity-magazine.com/news/zerotokens-phishing-real-time/ ZeroTokens gives phishing operators live control of victim sessions targeting 53 financial brands Tue, 25 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/zerotokens-phishing-real-time/ https://www.infosecurity-magazine.com/news/australia-exploitation-teamcity/ Australian officials are urging TeamCity customers to patch an actively exploited critical flaw, which follows a similar warning from the US government Tue, 25 Aug 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/australia-exploitation-teamcity/ https://www.infosecurity-magazine.com/news/fake-codex-download-google-sites/ Fake Codex pages used Google Sites, sponsored search and ClickFix to target Mac users Mon, 24 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/fake-codex-download-google-sites/ https://www.infosecurity-magazine.com/news/ics-ai-attacks-siemens/ A US government advisory warned that attackers are deploying AI-generated exploitation scripts against exposed Siemens S7 Series PLCs Thu, 20 Aug 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/ics-ai-attacks-siemens/ https://www.infosecurity-magazine.com/interviews/borussia-dortmund-it-chief/ From stadium infrastructure to player contracts, Borussia Dortmund's Head of IT reveals the cybersecurity challenges facing modern football clubs Wed, 19 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/interviews/borussia-dortmund-it-chief/ https://www.infosecurity-magazine.com/news/infostealers-17-billion/ Flashpoint data reveals infostealers were responsible for taking 1.7 billion credentials in the first half of 2026 Mon, 17 Aug 2026 07:30:00 GMT https://www.infosecurity-magazine.com/news/infostealers-17-billion/ https://www.infosecurity-magazine.com/news/new-linux-botnet-evooo1bot-victims/ Evooo1Bot is a newly observed botnet based on the Mirai framework but equipped with advanced features, turning edge devices into persistent proxies Fri, 14 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/new-linux-botnet-evooo1bot-victims/ https://www.infosecurity-magazine.com/opinions/privacy-ai-world-default-feature/ Protecting privacy in AI has to go beyond policies and be built into the system itself Fri, 14 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/opinions/privacy-ai-world-default-feature/ https://www.infosecurity-magazine.com/news/lazarus-post-quantum-key-dream-job/ Lazarus malware used post-quantum key exchange to protect delivery of a Windows zero-day exploit Wed, 12 Aug 2026 13:35:00 GMT https://www.infosecurity-magazine.com/news/lazarus-post-quantum-key-dream-job/ https://www.infosecurity-magazine.com/opinions/middle-east-cyber-spillover/ Western organizations face increased risk from cyber-attack disruption amid ongoing Middle East tensions Wed, 12 Aug 2026 11:15:00 GMT https://www.infosecurity-magazine.com/opinions/middle-east-cyber-spillover/ https://www.infosecurity-magazine.com/news/whatsapp-voting-scam-linked/ WhatsApp scam abused the Linked devices feature to hijack accounts without stealing any passwords Tue, 04 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/whatsapp-voting-scam-linked/ https://www.infosecurity-magazine.com/news/ai-accounts-over-half-cybercrime/ Interpol claims AI is driving a surge in cybercrime in Africa, with related losses doubling Tue, 04 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/ai-accounts-over-half-cybercrime/ https://www.infosecurity-magazine.com/interviews/university-of-arts-london/ University of the Arts London's Keith Joy explains the unique cybersecurity challenges facing higher education and how institutions can secure users without restricting creativity Tue, 04 Aug 2026 09:06:00 GMT https://www.infosecurity-magazine.com/interviews/university-of-arts-london/ https://www.infosecurity-magazine.com/news/koreas-largest-telco-kt-fine-39m/ Korean telco KT has been fined $39m for a year-long breach linked to femtocell compromise Mon, 03 Aug 2026 09:36:00 GMT https://www.infosecurity-magazine.com/news/koreas-largest-telco-kt-fine-39m/ https://www.infosecurity-magazine.com/news/google-patches-370-vulnerabilities/ The new version of Chrome, 151, comes with 370 vulnerability patches, including for seven critical flaws Thu, 30 Jul 2026 09:15:00 GMT https://www.infosecurity-magazine.com/news/google-patches-370-vulnerabilities/ https://www.infosecurity-magazine.com/news/new-ransomware-weekly/ Analysis by Black Kite warns that ransomware ecosystem is becoming bigger and more fragmented Tue, 21 Jul 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/new-ransomware-weekly/ https://www.infosecurity-magazine.com/news/researchers-wordpress-exploit/ A researcher who discovered a critical vulnerability in WordPress has used OpenAI’s latest model to develop an exploit chain Mon, 20 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/researchers-wordpress-exploit/ https://www.infosecurity-magazine.com/opinions/from-fbi-cybercrime-to-barbie-ciso/ Mattel CISO Jill Knesek on what working as a Special Agent at the FBI taught her about cybersecurity leadership Mon, 20 Jul 2026 09:00:00 GMT https://www.infosecurity-magazine.com/opinions/from-fbi-cybercrime-to-barbie-ciso/ https://www.infosecurity-magazine.com/interviews/interview-ferrari-head-of/ The longest tenured and most successful Formula 1 team is no stranger to evolving with technological developments. This is how Ferrari ensures its cybersecurity strategy helps the team push forward Mon, 20 Jul 2026 08:00:00 GMT https://www.infosecurity-magazine.com/interviews/interview-ferrari-head-of/ https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/ Six-month phishing campaign used seasonal eCard lures to plant legitimate RMM tools on victims Wed, 15 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/ https://www.infosecurity-magazine.com/news/macos-malware-apple-crash-reporter/ Researchers at Jamf Threat Labs detail CrashStealer, which steals passwords, cryptocurrency wallets and more Tue, 14 Jul 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/macos-malware-apple-crash-reporter/ https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/ Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA Mon, 13 Jul 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/ https://www.infosecurity-magazine.com/news/ransomware-removes-cybersecurity/ GodDamn ransomware uses remote desktop application to secretly move around networks and drop the malicious PoisonX kernel driver Fri, 10 Jul 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-removes-cybersecurity/ https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/ Zimperium found RedWing, an Android spyware sold as a service via Telegram to target banking apps Wed, 08 Jul 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/ https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/ A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and Canada and harvest user credentials Tue, 07 Jul 2026 15:40:00 GMT https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/ https://www.infosecurity-magazine.com/news/fbi-google-take-down-netnut-proxy/ The NetNut proxy network and the ‘Popa’ botnet are known to have infected devices with variants of Mirai DDoS botnets Fri, 03 Jul 2026 09:35:00 GMT https://www.infosecurity-magazine.com/news/fbi-google-take-down-netnut-proxy/ https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/ The NCSC has shared best practice advice from pen testers which could help improve system resilience Thu, 02 Jul 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/ https://www.infosecurity-magazine.com/news/over-300-uk-firms-hit-ransomware/ Report Fraud data reveals that more than half of 323 UK ransomware victims last year were SMEs Tue, 30 Jun 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/over-300-uk-firms-hit-ransomware/ https://www.infosecurity-magazine.com/news/millenium-rat-telegram-60000/ Group-IB says Millenium RAT, now rewritten in C++, has hit 62,289 devices in 160+ countries Mon, 29 Jun 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/millenium-rat-telegram-60000/ https://www.infosecurity-magazine.com/news/twenty-million-us-ip-connections/ Digital Citizens Alliance report claims that millions of Americans may have unwittingly had IP connections used by cybercriminals Thu, 25 Jun 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/twenty-million-us-ip-connections/ https://www.infosecurity-magazine.com/news/operation-endgame-stealc-amadey/ Operation Endgame seized around 50 domains and nearly 200 active IP-based servers associated with the infostealers Wed, 24 Jun 2026 15:25:00 GMT https://www.infosecurity-magazine.com/news/operation-endgame-stealc-amadey/ https://www.infosecurity-magazine.com/news/iranlinked-muddywater-poses-as/ An NCC Group report warns state-backed hackers are attempting to hide activity by posing as ransomware groups and deploying commercially available malware Wed, 24 Jun 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/iranlinked-muddywater-poses-as/ https://www.infosecurity-magazine.com/news/five-eyes-issues-urgent-call/ The Five Eyes Alliance has published a rare call to action for organizations facing AI threats Tue, 23 Jun 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/five-eyes-issues-urgent-call/ https://www.infosecurity-magazine.com/news/ncsc-fortinet-customers-tackle/ The NCSC has released guidance for Fortinet customers impacted by the FortiBleed threat campaign Mon, 22 Jun 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/ncsc-fortinet-customers-tackle/ https://www.infosecurity-magazine.com/news/gitbait-github-pages-sheetbest/ GitBait phishing kit abuses GitHub Pages and the SheetBest API to steal Mexican banking credentials Wed, 17 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/gitbait-github-pages-sheetbest/ https://www.infosecurity-magazine.com/news/dragonforce-ransomware-hidden/ Command and control traffic exploited a Teams visitor token to make malicious activity look legitimate to defenders Tue, 16 Jun 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/dragonforce-ransomware-hidden/ https://www.infosecurity-magazine.com/news/fbi-warns-courier-cash-pickups/ The FBI claims couriers are being used to circumvent bank transfers in crypto investment schemes Tue, 16 Jun 2026 08:15:00 GMT https://www.infosecurity-magazine.com/news/fbi-warns-courier-cash-pickups/ https://www.infosecurity-magazine.com/news/github-update-npm-supply-chain/ NPM, part of GitHub, announced a new version of the npm package manager with several security improvements, including disabling install scripts Fri, 12 Jun 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/github-update-npm-supply-chain/ https://www.infosecurity-magazine.com/news/fake-software-videos-tiktok-vidar/ Threat actors push fake free-software tutorials on TikTok and Instagram to spread Vidar stealer Wed, 10 Jun 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/fake-software-videos-tiktok-vidar/ https://www.infosecurity-magazine.com/news/google-patch-chrome-vulnerability/ The flaw, CVE-2026-11645, can allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page Tue, 09 Jun 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/google-patch-chrome-vulnerability/ https://www.infosecurity-magazine.com/news/north-korean-hackers-developers/ North Korean actor UNK_DeadDrop targeted developers with fake coding tasks to steal crypto Mon, 08 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/north-korean-hackers-developers/ https://www.infosecurity-magazine.com/news/cybercrime-ai-tools-surge-3800/ Halcyon’s Cynthia Kaiser lifts the lid on the dark web market for AI cybercrime tools Wed, 03 Jun 2026 07:30:00 GMT https://www.infosecurity-magazine.com/news/cybercrime-ai-tools-surge-3800/ https://www.infosecurity-magazine.com/news/purelogs-phishing-purchase-order/ FortiGuard Labs detailed a PureLogs campaign using JavaScript, PowerShell and process hollowing Wed, 27 May 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/purelogs-phishing-purchase-order/ https://www.infosecurity-magazine.com/news/gemini-claude-infostealers-seo/ The infostealer payload in this campaign collect a vast amount of data, from collaboration authentication keys to cryptocurrency wallets Fri, 22 May 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/gemini-claude-infostealers-seo/ https://www.infosecurity-magazine.com/news/github-breach-nx-console-vs-code/ A threat actor compromised an Nx developer and posed as a legitimate maintainer to publish a malicious extension on Visual Studio Marketplace Thu, 21 May 2026 14:45:00 GMT https://www.infosecurity-magazine.com/news/github-breach-nx-console-vs-code/ https://www.infosecurity-magazine.com/news/android-carrier-billing-fraud-four/ Premium Deception campaign uses 250 Android apps to silently sign victims up to paid services Wed, 20 May 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/android-carrier-billing-fraud-four/ https://www.infosecurity-magazine.com/interviews/how-alpines-head-of-it-secures-an/ In Formula 1 speed is of the essence and team members need secure, but swift, access to data at all times. Here’s how BWT Alpine Formula One Team ensures it meets that challenge all season long Thu, 14 May 2026 09:30:00 GMT https://www.infosecurity-magazine.com/interviews/how-alpines-head-of-it-secures-an/ https://www.infosecurity-magazine.com/news/ransomware-over-half-cisos-would/ Survey of cybersecurity leaders suggests that majority would strongly consider paying cybercriminals, if that’s what it took to help restore encrypted systems Wed, 13 May 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/ransomware-over-half-cisos-would/ https://www.infosecurity-magazine.com/news/zara-data-breach-impacts-200000/ ShinyHunters gets away with emails and other data on 200,000 Zara customers Mon, 11 May 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/zara-data-breach-impacts-200000/ https://www.infosecurity-magazine.com/news/australian-cyber-security-centre/ ACSC warns over a campaign targeting organizations which uses ClickFix to deliver Vidar infostealer malware Fri, 08 May 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/australian-cyber-security-centre/ https://www.infosecurity-magazine.com/news/ssa-emails-venomous-helper-phishing/ Venomous#Helper attackers impersonate the US Social Security Administration to deploy signed RMM software and maintain persistent access across US networks Tue, 05 May 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/ssa-emails-venomous-helper-phishing/ https://www.infosecurity-magazine.com/news/ncsc-warns-aifuelled-vulnerability/ The UK's National Cyber Security Centre is urging organizations to prepare for glut of new software updates Tue, 05 May 2026 09:40:00 GMT https://www.infosecurity-magazine.com/news/ncsc-warns-aifuelled-vulnerability/ https://www.infosecurity-magazine.com/opinions/ai-attacks-not-new-but-are-faster/ The fundamentals of compromise have not changed, but with AI, the pace of exploitation has Mon, 04 May 2026 09:00:00 GMT https://www.infosecurity-magazine.com/opinions/ai-attacks-not-new-but-are-faster/ https://www.infosecurity-magazine.com/news/29-billion-compromised-credentials/ KELA claims infostealers remained the primary access vector for attacks in 2025 Wed, 29 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/29-billion-compromised-credentials/ https://www.infosecurity-magazine.com/news/us-sanctions-cambodian-scam-network/ US sanctions target Cambodian scam networks tied to crypto fraud and trafficking Mon, 27 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/us-sanctions-cambodian-scam-network/ https://www.infosecurity-magazine.com/news/cyberattacks-surge-63-annually/ Quorum Cyber report finds higher and further education institutions experienced 63% increase in attacks over a year Thu, 23 Apr 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/cyberattacks-surge-63-annually/ https://www.infosecurity-magazine.com/opinions/rising-risk-landscape-for-critical/ Cyber resilience in critical infrastructure is essential to critical services running. A stronger mindset is needed to protect against attacks Thu, 23 Apr 2026 10:00:00 GMT https://www.infosecurity-magazine.com/opinions/rising-risk-landscape-for-critical/ https://www.infosecurity-magazine.com/news/silent-subject-phishing-campaigns/ Null subject phishing campaigns bypass filters and target VIPs with QR code and RMM abuse Wed, 22 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/silent-subject-phishing-campaigns/ https://www.infosecurity-magazine.com/news/researchers-proxysmart-software-90/ Infrawatch says ProxySmart platform enables SIM farm activity at “industrial scale” Wed, 22 Apr 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/researchers-proxysmart-software-90/ https://www.infosecurity-magazine.com/news/north-korean-blamed-290m-kelpdao/ North Korea’s Lazarus Group is pegged for a $290m crypto theft at KelpDAO Tue, 21 Apr 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/north-korean-blamed-290m-kelpdao/ https://www.infosecurity-magazine.com/news/mirai-variant-dvr-flaw-iot-botnet/ FortiGuard Labs has identified a Mirai-based Nexcorium campaign actively exploiting CVE-2024-3721 in TBK DVR devices Mon, 20 Apr 2026 13:01:00 GMT https://www.infosecurity-magazine.com/news/mirai-variant-dvr-flaw-iot-botnet/ https://www.infosecurity-magazine.com/news/ai-models-rapid-gains/ AI models are making rapid gains in vulnerability research and exploit development, raising new cybersecurity risks, a Forescout study finds Fri, 17 Apr 2026 13:20:00 GMT https://www.infosecurity-magazine.com/news/ai-models-rapid-gains/ https://www.infosecurity-magazine.com/news/ddos-services-hit-by-police/ Coordinated action by FBI, Europol and others seizes infrastructure, makes arrests – and sends warning letters to known DDoS service users Fri, 17 Apr 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/ddos-services-hit-by-police/ https://www.infosecurity-magazine.com/news/chrome-extensions-expose-user-data/ 108 malicious Chrome extensions steal sessions, Google data, inject ads via single C2 infrastructure Tue, 14 Apr 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/chrome-extensions-expose-user-data/ https://www.infosecurity-magazine.com/news/mailbox-rule-abuse-stealthy-post/ Attackers are abusing Microsoft 365 mailbox rules to hide activity, exfiltrate data and retain access after account compromise, researchers warn Mon, 13 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/mailbox-rule-abuse-stealthy-post/ https://www.infosecurity-magazine.com/news/google-chrome-protection/ Chrome’s Device Bound Session Credentials is designed to block infostealers from harvesting session cookie Fri, 10 Apr 2026 11:25:00 GMT https://www.infosecurity-magazine.com/news/google-chrome-protection/ https://www.infosecurity-magazine.com/news/17bn-lost-to-cyber-fraud-warns-fbi/ Cryptocurrency scams alone cost victims over $7 billion, while AI-enabled fraud threats are on the rise, says FBI Tue, 07 Apr 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/17bn-lost-to-cyber-fraud-warns-fbi/ https://www.infosecurity-magazine.com/news/ncsc-alert-hackers-whatsapp-signal/ The UK’s cybersecurity agency offered advice to “high-risk’ individuals” on how to protect against social engineering and cyber-attacks Thu, 02 Apr 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/ncsc-alert-hackers-whatsapp-signal/ https://www.infosecurity-magazine.com/news/venom-stealer-maas-automates-data/ Venom Stealer malware-as-a-service automates ClickFix social engineering, credential and crypto exfiltration Wed, 01 Apr 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/venom-stealer-maas-automates-data/ https://www.infosecurity-magazine.com/news/tax-season-new-phishing-tactics/ Tax-season phishing floods deliver RMM malware, credential theft, BEC and tax-form scams Mon, 30 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/tax-season-new-phishing-tactics/ https://www.infosecurity-magazine.com/news/deepload-malware-clickfix-ai-code/ Researchers at ReliaQuest warn of persistent malware campaign targeting enterprise credentials Mon, 30 Mar 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/deepload-malware-clickfix-ai-code/ https://www.infosecurity-magazine.com/news/ai-top-cyber-priority-defenders-pwc/ PwC Annual Threat Dynamics report says AI-threats are the biggest concern of clients Thu, 26 Mar 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/ai-top-cyber-priority-defenders-pwc/ https://www.infosecurity-magazine.com/news/hackers-exploit-id-industrial-scale/ Cybersecurity company’s annual report issues warning over a “mass-marketed impersonation crisis” over attackers abusing legitimate credentials Wed, 25 Mar 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/hackers-exploit-id-industrial-scale/ https://www.infosecurity-magazine.com/news/silver-fox-cyber-dual-espionage/ Silver Fox pivots from ValleyRAT tax lures to WhatsApp‑style stealers, blending espionage & phishing Tue, 24 Mar 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/silver-fox-cyber-dual-espionage/ https://www.infosecurity-magazine.com/news/vidar-stealer-exploits-github/ The Vidar 2.0 infostealers is deployed through fake free game cheats on GitHub and Reddit Wed, 18 Mar 2026 11:15:00 GMT https://www.infosecurity-magazine.com/news/vidar-stealer-exploits-github/ https://www.infosecurity-magazine.com/news/android-attack-bypasses-payment/ Android’s LSPosed-based attack hijacks payment apps via runtime manipulation and SIM-binding bypass Tue, 17 Mar 2026 16:30:00 GMT https://www.infosecurity-magazine.com/news/android-attack-bypasses-payment/ https://www.infosecurity-magazine.com/news/average-number-daily-api-attacks/ Akamai says 87% of organizations suffered an API-related security incident last year Tue, 17 Mar 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/average-number-daily-api-attacks/ https://www.infosecurity-magazine.com/news-features/what-cisos-should-know-and-do/ Infosecurity spoke to several experts, including OpenClaw’s own security advisor, to explore what CISOs should do to contain the viral AI agent tool’s security vulnerabilities Fri, 13 Mar 2026 14:05:00 GMT https://www.infosecurity-magazine.com/news-features/what-cisos-should-know-and-do/ https://www.infosecurity-magazine.com/news/blacksanta-edr-killer-targets-hr/ BlackSanta malware targets HR staff with fake resumes, kills EDR and steals system data Wed, 11 Mar 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/blacksanta-edr-killer-targets-hr/ https://www.infosecurity-magazine.com/news/major-security-gaps-llm-guardrails/ Palo Alto Networks’ Unit 42 has developed a successful attack to bypass safety guardrails in popular generative AI tools Wed, 11 Mar 2026 13:35:00 GMT https://www.infosecurity-magazine.com/news/major-security-gaps-llm-guardrails/ https://www.infosecurity-magazine.com/news/badpaw-malware-targets-ukraine/ Malware campaign uses Ukrainian email service for credibility, deploying "BadPaw" to execute attacks Wed, 04 Mar 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/badpaw-malware-targets-ukraine/ https://www.infosecurity-magazine.com/news/redalert-israel-spyware-campaign/ Espionage campaign exploits Israel-Iran conflict, distributing a trojanized Red Alert app via SMS Tue, 03 Mar 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/redalert-israel-spyware-campaign/ https://www.infosecurity-magazine.com/news/32m-phishing-emails-detected-2025/ 2025 saw 32M phishing emails, with identity threats surpassing vulnerabilities Thu, 26 Feb 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/32m-phishing-emails-detected-2025/ https://www.infosecurity-magazine.com/news/bitpanda-mfa-phishing-scheme/ Phishing attack mimicking Bitpanda targets users, harvesting credentials and personal information Tue, 24 Feb 2026 16:05:00 GMT https://www.infosecurity-magazine.com/news/bitpanda-mfa-phishing-scheme/ https://www.infosecurity-magazine.com/news/ai-powered-cyberattacks-up/ CrowdStrike Global Threat Report warns how adversaries are leveraging AI to make campaigns more efficient and more effective Tue, 24 Feb 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/ai-powered-cyberattacks-up/ https://www.infosecurity-magazine.com/news/ddos-escalation-frequency-power/ DDoS attack frequency has risen to ‘alarming levels,’ warns Radware report Fri, 20 Feb 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/ddos-escalation-frequency-power/ https://www.infosecurity-magazine.com/news/fake-coretax-apps-fraud-indonesia/ Fraud campaign exploiting Indonesia’s Coretax resulted in $1.5m to $2m in losses via malicious apps Thu, 19 Feb 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/fake-coretax-apps-fraud-indonesia/ https://www.infosecurity-magazine.com/news/apple-rcs-encryption-memory/ iOS 26.4 Beta adds end-to-end encryption for RCS messaging and enhanced Memory Integrity Enforcement Tue, 17 Feb 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/apple-rcs-encryption-memory/ https://www.infosecurity-magazine.com/news-features/why-ransomware-remains/ Ten years ago, ransom demands cost under $1000. Now ransomware attacks cost millions and are more disruptive than ever. Infosecurity explores how we got here and what needs to change Tue, 17 Feb 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news-features/why-ransomware-remains/ https://www.infosecurity-magazine.com/news/sme-cyber-attack-threat-ncsc/ NCSC’s Richard Horne has warned that cybercriminals do not care about business size and called for SMEs to act now to secure their organizations Mon, 16 Feb 2026 16:30:00 GMT https://www.infosecurity-magazine.com/news/sme-cyber-attack-threat-ncsc/ https://www.infosecurity-magazine.com/news/operation-doppelbrand-trusted/ New phishing campaign dubbed Operation DoppelBrand targeted major financial firms like Wells Fargo Mon, 16 Feb 2026 15:45:00 GMT https://www.infosecurity-magazine.com/news/operation-doppelbrand-trusted/ https://www.infosecurity-magazine.com/news/google-patches-new-in-wild-chrome/ A high severity vulnerability in Google Chrome and allows remote attackers to execute code Mon, 16 Feb 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/google-patches-new-in-wild-chrome/ https://www.infosecurity-magazine.com/news/fake-ai-assistants-google-chrome/ Hundreds of thousands of users have downloaded malicious AI extensions masquerading as ChatGPT, Gemini, Grok and others, warn cybersecurity researchers at LayerX Fri, 13 Feb 2026 11:25:00 GMT https://www.infosecurity-magazine.com/news/fake-ai-assistants-google-chrome/ https://www.infosecurity-magazine.com/news/phorpiex-phishing-global-group/ High-volume phishing campaign delivers Phorpiex malware via malicious Windows Shortcut files Tue, 10 Feb 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/phorpiex-phishing-global-group/ https://www.infosecurity-magazine.com/news/zerodayrat-mobile-spyware-android/ ZeroDayRAT is a new mobile spyware targeting Android and iOS, offering attackers persistent access Tue, 10 Feb 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/zerodayrat-mobile-spyware-android/ https://www.infosecurity-magazine.com/news/zeroclick-flaw-claude-dxt/ Security researchers from LayerX identified a new flaw in 50 Claude Desktop Extensions that could lead to unauthorized remote code execution Mon, 09 Feb 2026 17:30:00 GMT https://www.infosecurity-magazine.com/news/zeroclick-flaw-claude-dxt/ https://www.infosecurity-magazine.com/news/social-media-platforms-billions/ Revolut claims social media sites make £3.8bn annually from scam ads targeting European users Mon, 09 Feb 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/social-media-platforms-billions/ https://www.infosecurity-magazine.com/news/researchers-40000-exposed-openclaw/ SecurityScorecard has identified over 40,000 OpenClaw deployments exposed to potential attack Mon, 09 Feb 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/researchers-40000-exposed-openclaw/ https://www.infosecurity-magazine.com/news/google-disrupts-proxy-networks/ Google has taken coordinated action against the massive IPIDEA residential proxy network, enhancing customer protections and disrupting cybercrime operations Thu, 29 Jan 2026 17:15:00 GMT https://www.infosecurity-magazine.com/news/google-disrupts-proxy-networks/ https://www.infosecurity-magazine.com/news/fbi-operation-winter-shield-cyber/ The FBI outlines ten actions which organizations can take to defend networks against cybercriminal and nation-state threats Thu, 29 Jan 2026 16:50:00 GMT https://www.infosecurity-magazine.com/news/fbi-operation-winter-shield-cyber/ https://www.infosecurity-magazine.com/news/ransomware-numbers-rise-despite/ Ransomware victims surged in Q4 2025 despite fewer active extortion groups, with data leaks rising 50%, ReliaQuest researchers report Thu, 29 Jan 2026 13:01:00 GMT https://www.infosecurity-magazine.com/news/ransomware-numbers-rise-despite/ https://www.infosecurity-magazine.com/news/emojis-in-purerats-code/ Researchers discover that PureRAT’s code now contains emojis – indicating it has been written by AI based-on comments ripped from social media. Wed, 28 Jan 2026 12:10:00 GMT https://www.infosecurity-magazine.com/news/emojis-in-purerats-code/ https://www.infosecurity-magazine.com/news/researchers-haxor-seo-poisoning/ Fortra researchers have discovered a new SEO poisoning operation known as “HaxorSEO” Mon, 26 Jan 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/researchers-haxor-seo-poisoning/ https://www.infosecurity-magazine.com/news/phishing-spoofed-sites-olympic/ Cyber risks for the Milano-Cortina 2026 Winter Games include phishing and spoofed websites as key threat vectors Wed, 21 Jan 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/phishing-spoofed-sites-olympic/ https://www.infosecurity-magazine.com/news/voidlink-linux-malware-built-using/ Sophisticated malware previously thought to be the work of a well-resourced cyber-crime group was built by one person - with the aid of AI tools Wed, 21 Jan 2026 12:51:00 GMT https://www.infosecurity-magazine.com/news/voidlink-linux-malware-built-using/ https://www.infosecurity-magazine.com/news/malicious-google-chrome-extension/ Users of widely used HR and ERP platforms targeted with malicious extensions which were available in the Chrome Web Store Mon, 19 Jan 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/malicious-google-chrome-extension/ https://www.infosecurity-magazine.com/news/ice-agent-doxxing-site-ddosed/ DDoS-ers are striking a website linked to a data breach at the Department of Homeland Security Thu, 15 Jan 2026 11:15:00 GMT https://www.infosecurity-magazine.com/news/ice-agent-doxxing-site-ddosed/ https://www.infosecurity-magazine.com/news/hackers-fake-paypal-notices-deploy/ Phishing attacks have been identified using fake PayPal alerts to exploit remote monitoring and management tools Wed, 14 Jan 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/hackers-fake-paypal-notices-deploy/ https://www.infosecurity-magazine.com/news/phishing-scams-exploit-browser/ Cybersecurity researchers issue warning over a surge in attacks designed to trick Facebook users into handing over login credentials Tue, 13 Jan 2026 14:40:00 GMT https://www.infosecurity-magazine.com/news/phishing-scams-exploit-browser/ https://www.infosecurity-magazine.com/news/parliament-security-pros-cyber/ Lawmakers want the security industry to help them scrutinize the Cyber Security and Resilience Bill Tue, 13 Jan 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/parliament-security-pros-cyber/ https://www.infosecurity-magazine.com/news/global-magecart-campaign-six-card/ Silent Push has discovered a new Magecart campaign targeting six major payment network providers that has been running since 2022 Tue, 13 Jan 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/global-magecart-campaign-six-card/ https://www.infosecurity-magazine.com/news/fraud-overtakes-ransomware-as-top/ “Pervasive” threat of phishing, invoice scams and other cyber-enabled fraud is at “record highs”, warns WEF Cybersecurity Outlook 2026 Mon, 12 Jan 2026 14:10:00 GMT https://www.infosecurity-magazine.com/news/fraud-overtakes-ransomware-as-top/ https://www.infosecurity-magazine.com/news/fbi-warns-north-korean-qr-phishing/ The FBI says North Korea’s Kimsuky APT group is using QR codes in spear phishing campaigns Fri, 09 Jan 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/fbi-warns-north-korean-qr-phishing/ https://www.infosecurity-magazine.com/news/new-zeroclick-attack-chatgpt/ Researchers at Radware discovered new prompt injection attacks in ChatGPT agentic features Thu, 08 Jan 2026 16:45:00 GMT https://www.infosecurity-magazine.com/news/new-zeroclick-attack-chatgpt/ https://www.infosecurity-magazine.com/news/china-uat-7290-targets-telecoms/ A long-term cyber-espionage campaign targeting South Asia's telecom firms has been linked to UAT-7290 Thu, 08 Jan 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/china-uat-7290-targets-telecoms/ https://www.infosecurity-magazine.com/news/phishing-exploits-misconfigured/ Misconfigurations abused to make phishing emails look like they come from within the organization Thu, 08 Jan 2026 14:01:00 GMT https://www.infosecurity-magazine.com/news/phishing-exploits-misconfigured/ https://www.infosecurity-magazine.com/news/hackers-disconnect-brightspeed/ A hacking collective claims it has disconnected customers of US ISP Brightspeed Wed, 07 Jan 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/hackers-disconnect-brightspeed/ https://www.infosecurity-magazine.com/news/phaltblyx-clickfix-malware/ Multi-stage malware campaign targets hospitality organizations using social engineering and abuse of MSBuild.exe Tue, 06 Jan 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/phaltblyx-clickfix-malware/ https://www.infosecurity-magazine.com/news/vvs-stealer-advanced-obfuscation/ A new Python-based malware called VVS stealer has been identified, targeting Discord users with stealthy techniques to steal data Mon, 05 Jan 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/vvs-stealer-advanced-obfuscation/ https://www.infosecurity-magazine.com/news/experts-trace-35m-stolen-crypto/ TRM Labs says it has recorded $35m drained from users’ wallets following 2022 LastPass breach Mon, 05 Jan 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/experts-trace-35m-stolen-crypto/ https://www.infosecurity-magazine.com/news/infosecurity-top-10-stories-2025/ Explore Infosecurity Magazine’s most-read cybersecurity stories of 2025, from major vendor shake-ups and zero-day exploits to AI-driven threats and supply chain attacks Thu, 01 Jan 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/infosecurity-top-10-stories-2025/ https://www.infosecurity-magazine.com/news/scams-mena-fake-online-job/ A coordinated wave of fake online job ads targeting the Middle East and North Africa has been uncovered, exploiting remote work trends Wed, 24 Dec 2025 15:30:00 GMT https://www.infosecurity-magazine.com/news/scams-mena-fake-online-job/ https://www.infosecurity-magazine.com/news/la-poste-still-offline-after-major/ French postal service warns of “major network incident” just before Christmas Wed, 24 Dec 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/la-poste-still-offline-after-major/ https://www.infosecurity-magazine.com/news/hundreds-arrests-operation/ Operational Sentinel helps to crack down on cybercrime across 19 African countries in a month-long campaign Tue, 23 Dec 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/hundreds-arrests-operation/ https://www.infosecurity-magazine.com/news/surge-fake-delivery-holidays/ NordVPN has warned that malicious postal service websites have surged by 86% over the past month, targeting holiday delivery tracking Mon, 22 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/surge-fake-delivery-holidays/ https://www.infosecurity-magazine.com/news/nefilim-ransomware-affiliate/ A Ukrainian man has pleaded guilty to charges connecting him to Nefilim ransomware attacks Mon, 22 Dec 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/nefilim-ransomware-affiliate/ https://www.infosecurity-magazine.com/news/scripted-sparrow-millions-bec-each/ Fortra has uncovered a prolific BEC group dubbed “Scripted Sparrow” spanning three continents and at least five countries Mon, 22 Dec 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/scripted-sparrow-millions-bec-each/ https://www.infosecurity-magazine.com/news/oauth-phishing-campaigns/ A surge in phishing attacks exploiting Microsoft’s OAuth device code flow has been identified by Proofpoint Thu, 18 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/oauth-phishing-campaigns/ https://www.infosecurity-magazine.com/news/chinese-ink-dragon-hides-european/ China’s Ink Dragon is using European government networks to hide its espionage activity Wed, 17 Dec 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/chinese-ink-dragon-hides-european/ https://www.infosecurity-magazine.com/news/urban-vpn-proxy-harvesting-ai-chats/ The browser extension Urban VPN Proxy has been reportedly collecting users’ AI chat conversations Tue, 16 Dec 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/urban-vpn-proxy-harvesting-ai-chats/ https://www.infosecurity-magazine.com/news/phishing-messages-social-scams/ Check Point has detected thousands of phishing emails in the past fortnight, offering fake promotions and special deals Tue, 16 Dec 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/phishing-messages-social-scams/ https://www.infosecurity-magazine.com/news/defendant-pleads-guilty-fantasy/ A Minnesota man has pleaded guilty to a credential stuffing scheme that compromised over 60,000 accounts Mon, 15 Dec 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/defendant-pleads-guilty-fantasy/ https://www.infosecurity-magazine.com/news/russian-phishing-phantom-stealer/ A new phishing campaign has been identified, delivering the Phantom information-stealing malware via an ISO attachment Mon, 15 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/russian-phishing-phantom-stealer/ https://www.infosecurity-magazine.com/news/top-25-dangerous-software/ MITRE has released its Top 25 CWE list for 2025, compiled from software and hardware flaws behind almost 40,000 CVEs Mon, 15 Dec 2025 10:45:00 GMT https://www.infosecurity-magazine.com/news/top-25-dangerous-software/ https://www.infosecurity-magazine.com/news/openai-enhances-defensive-models/ OpenAI has reported a surge in performance as GPT-5.1-Codex-Max reaching 76% in capability assessments, and warned of upcoming cyber-risks Thu, 11 Dec 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/openai-enhances-defensive-models/ https://www.infosecurity-magazine.com/news/russia-hackers-target-us-critical/ Pro-Russia hacktivist groups have been observed exploiting exposed virtual network computing connections to breach OT systems Wed, 10 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/russia-hackers-target-us-critical/ https://www.infosecurity-magazine.com/news/gartner-calls-for-pause-ai-browsers/ Gartner has called for organizations to block today’s AI browsers on security concerns Tue, 09 Dec 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/gartner-calls-for-pause-ai-browsers/ https://www.infosecurity-magazine.com/news/barts-health-high-court-ban-oracle/ Barts Health NHS Trust has revealed itself to be the latest victim of Cl0p’s Oracle EBS campaign Mon, 08 Dec 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/barts-health-high-court-ban-oracle/ https://www.infosecurity-magazine.com/news/ghostframe-phishing-hits-one/ The GhostFrame phishing framework, using stealthy iframes, was linked to over 1 million attacks Thu, 04 Dec 2025 14:30:00 GMT https://www.infosecurity-magazine.com/news/ghostframe-phishing-hits-one/ https://www.infosecurity-magazine.com/news/star-blizzard-targets-reporters/ A fresh wave of spear-phishing linked to the Russia-based Star Blizzard group has been detected by Sekoia Wed, 03 Dec 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/star-blizzard-targets-reporters/ https://www.infosecurity-magazine.com/news/disinformation-cyberthreats-global/ A new WEF report reveals that AI-powered threats like disinformation are among executives’ biggest concerns Wed, 03 Dec 2025 11:00:00 GMT https://www.infosecurity-magazine.com/news/disinformation-cyberthreats-global/ https://www.infosecurity-magazine.com/news/bloody-wolf-expands-central-asia/ A new Bloody Wolf campaign exploits legitimate remote-administration software for cyber-attacks on government targets in Central Asia Thu, 27 Nov 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/bloody-wolf-expands-central-asia/ https://www.infosecurity-magazine.com/news/scattered-lapsus-hunters-zendesk/ New phishing domains point to a campaign from the notorious Scattered Lapsus$ Hunters collective Thu, 27 Nov 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/scattered-lapsus-hunters-zendesk/ https://www.infosecurity-magazine.com/news/hashjack-indirect-prompt-injection/ A new vulnerability dubbed “HashJack” could enable attackers to booby trap websites when they interact with AI browsers Wed, 26 Nov 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/hashjack-indirect-prompt-injection/ https://www.infosecurity-magazine.com/news/mod-worlds-first-military-gaming/ The International Defence Esports Games (IDEG) will help sharpen cyber and battlefield skills for allied soldiers Mon, 24 Nov 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/mod-worlds-first-military-gaming/ https://www.infosecurity-magazine.com/news/europol-disrupts-cryptocurrency/ Europe-wide Cyber-Patrol Week targeted IP violations, flagging 69 sites and disrupting $55m in crypto services Wed, 19 Nov 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/europol-disrupts-cryptocurrency/ https://www.infosecurity-magazine.com/news/eternidade-stealer-trojan-brazil/ Trustwave SpiderLabs has observed new banking Trojan Eternidade Stealer targeting Brazil using WhatsApp for propagation and data theft Wed, 19 Nov 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/eternidade-stealer-trojan-brazil/ https://www.infosecurity-magazine.com/news/chinal-operation-wrthug-thousands/ SecurityScorecard has revealed a new Chinese campaign targeting thousands of ASUS routers globally Wed, 19 Nov 2025 10:20:00 GMT https://www.infosecurity-magazine.com/news/chinal-operation-wrthug-thousands/ https://www.infosecurity-magazine.com/news/ai-tuoni-framework-targets-us-real/ A major US real estate firm has been targeted with an advanced intrusion attempt using Tuoni C2, combining social engineering, steganography and in-memory attacks Tue, 18 Nov 2025 14:45:00 GMT https://www.infosecurity-magazine.com/news/ai-tuoni-framework-targets-us-real/ https://www.infosecurity-magazine.com/news/android-devices-targeted-konni-apt/ A new cyber-attack has been observed exploiting Google Find Hub to remotely wipe Android devices, linked to North Korean APTs Tue, 11 Nov 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/android-devices-targeted-konni-apt/ https://www.infosecurity-magazine.com/news/quantum-route-redirect-phishing/ KnowBe4 claims the new Quantum Route Redirect kit is supercharging phishing attacks on Microsoft365 users Tue, 11 Nov 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/quantum-route-redirect-phishing/ https://www.infosecurity-magazine.com/news/china-aligned-uta0388-ai-tools/ Volexity has linked spear phishing operations to China-aligned UTA0388 in new campaigns using advanced tactics and LLMs Mon, 10 Nov 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/china-aligned-uta0388-ai-tools/ https://www.infosecurity-magazine.com/news/nca-campaign-men-crypto-investment/ The UK’s National Crime Agency is warning men under 45 that crypto dreams can soon become a scam nightmare Mon, 10 Nov 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/nca-campaign-men-crypto-investment/ https://www.infosecurity-magazine.com/news/ncsc-retire-web-check-mail-check/ The UK’s National Cyber Security Centre has urged users of its Web Check and Mail Check services to find alternatives Mon, 10 Nov 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/ncsc-retire-web-check-mail-check/ https://www.infosecurity-magazine.com/news/i-paid-twice-phishing-campaign/ Experts have uncovered large-scale phishing exploiting Booking.com, Airbnb and Expedia accounts, targeting hotels and customers Thu, 06 Nov 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/i-paid-twice-phishing-campaign/ https://www.infosecurity-magazine.com/news/multi-turn-attacks-llm-models/ A new Cisco report exposed large language models to multi-turn adversarial attacks with 90% success rates Thu, 06 Nov 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/multi-turn-attacks-llm-models/ https://www.infosecurity-magazine.com/news/hacktivistdriven-ddos-attacks/ ENISA report reveals DDoS accounted for 60% of public sector security incidents last year Thu, 06 Nov 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/hacktivistdriven-ddos-attacks/ https://www.infosecurity-magazine.com/news/aienabled-malware-actively/ Google warns of “just-in-time AI” malware using LLMs to evade detection and generate malicious code on-demand Thu, 06 Nov 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/aienabled-malware-actively/ https://www.infosecurity-magazine.com/news/unksmudgedserpent-targets-academics/ A previously unknown cyber actor UNK_SmudgedSerpent has been observed targeting academics with phishing and malware, merging techniques from Iranian groups Wed, 05 Nov 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/unksmudgedserpent-targets-academics/ https://www.infosecurity-magazine.com/news/sms-fraud-losses-set-to-decline-11/ Juniper Research predicts a $9bn drop in losses to SMS fraud next year Wed, 05 Nov 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/sms-fraud-losses-set-to-decline-11/ https://www.infosecurity-magazine.com/news/cisa-nsa-secure-exchange-servers/ CISA and NSA have released a blueprint to enhance Microsoft Exchange Server security against cyber-attacks Mon, 03 Nov 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/cisa-nsa-secure-exchange-servers/ https://www.infosecurity-magazine.com/news/critical-flaws-elementor-king/ The King Addons for Elementor plugin contains two flaws allowing unauthenticated file uploads and privilege escalation Thu, 30 Oct 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/critical-flaws-elementor-king/ https://www.infosecurity-magazine.com/news/proton-300-million-records/ A new dark web analysis reveals more than 300 million records have been breached in 2025 to date Thu, 30 Oct 2025 11:00:00 GMT https://www.infosecurity-magazine.com/news/proton-300-million-records/ https://www.infosecurity-magazine.com/news/chrome-https-mandatory-2026/ Google Chrome will enhance security with enforced HTTPS connections from version 154, set for release in October 2026 Wed, 29 Oct 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/chrome-https-mandatory-2026/ https://www.infosecurity-magazine.com/news/php-servers-and-iot-devices-cyber/ A rise in attacks on PHP servers, IoT devices and cloud gateways is linked to botnets exploiting flaws, according to new research published by Qualys Wed, 29 Oct 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news/php-servers-and-iot-devices-cyber/ https://www.infosecurity-magazine.com/news/quarter-scam-victims-considered/ ITRC report charts shocking rise of identity fraud victims driven to thoughts of self-harm Tue, 28 Oct 2025 12:45:00 GMT https://www.infosecurity-magazine.com/news/quarter-scam-victims-considered/ https://www.infosecurity-magazine.com/news/critical-wordpress-plugin-bugs/ Wordfence says threat actors are trying to exploit three critical vulnerabilities from 2024 Mon, 27 Oct 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/critical-wordpress-plugin-bugs/ https://www.infosecurity-magazine.com/news/blitz-spear-phishing-ngos-ukraine/ A spear phishing campaign dubbed PhantomCaptcha targeted Ukraine’s war relief efforts and regional government administrations for a single day in October Fri, 24 Oct 2025 13:15:00 GMT https://www.infosecurity-magazine.com/news/blitz-spear-phishing-ngos-ukraine/ https://www.infosecurity-magazine.com/news/pakistani-hacker-group-targets/ A cyber-espionage campaign by Pakistan’s TransparentTribe has been identified, targeting Indian government systems using DeskRAT Thu, 23 Oct 2025 16:30:00 GMT https://www.infosecurity-magazine.com/news/pakistani-hacker-group-targets/ https://www.infosecurity-magazine.com/news/lazarus-groups-operation-dreamjob/ Cyber-attacks by North Korea’s Lazarus Group target European defense firms in drone development Thu, 23 Oct 2025 14:30:00 GMT https://www.infosecurity-magazine.com/news/lazarus-groups-operation-dreamjob/ https://www.infosecurity-magazine.com/news/phantomcaptcha-campaign-targets/ SentinelLABS Researchers have uncovered a new phishing campaign, PhantomCaptcha, targeting aid organizations supporting Ukraine Wed, 22 Oct 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/phantomcaptcha-campaign-targets/ https://www.infosecurity-magazine.com/news/muddywater-compromised-mailboxes/ Group-IB has uncovered a phishing campaign by Iran-linked MuddyWater, exploiting compromised emails for foreign intelligence Wed, 22 Oct 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/muddywater-compromised-mailboxes/ https://www.infosecurity-magazine.com/news/singapore-officials-investment-scam/ Group-IB has uncovered a scam operation impersonating Singapore officials using Google Ads and deepfakes Tue, 21 Oct 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/singapore-officials-investment-scam/ https://www.infosecurity-magazine.com/news/ransomware-payouts-surge-dollar36m/ According to ExtraHop’s latest threat landscape report, average ransomware payments surged 44% to $3.6m in 2025 despite fewer incidents Tue, 21 Oct 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-payouts-surge-dollar36m/ https://www.infosecurity-magazine.com/opinions/ciso-crucible-strength-control/ Deloitte's Peter Gooch discusses how CISOs can overcome the immense strains and challenges of their roles Fri, 17 Oct 2025 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/ciso-crucible-strength-control/ https://www.infosecurity-magazine.com/news/microsoft-process-100-trillion/ Microsoft systems analyze over 100 trillion daily signals, suggesting dramatically increasing AI-driven cyber-threats Thu, 16 Oct 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-process-100-trillion/ https://www.infosecurity-magazine.com/news/over-23-million-victims-data/ Data from the Identity Theft Resource Center reveals 23 million individuals victimized by breaches in Q3 2025 Thu, 16 Oct 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/over-23-million-victims-data/ https://www.infosecurity-magazine.com/news/whisper-2fa-behind-1m-phishing/ Whisper 2FA is now one of the most active PhaaS tools alongside Tycoon and EvilProxy, responsible for one million attacks since July 2025 Wed, 15 Oct 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/whisper-2fa-behind-1m-phishing/ https://www.infosecurity-magazine.com/news/spain-arrests-leader-gxc-team/ Spanish authorities have arrested a 25-year-old Brazilian accused of leading the GXC Team and selling malware and AI tools to cybercriminals Mon, 13 Oct 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/spain-arrests-leader-gxc-team/ https://www.infosecurity-magazine.com/news/fbi-french-police-shutter/ The infamous BreachForums site has been taken offline again to disrupt Scattered Lapsus$ Hunters Mon, 13 Oct 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/fbi-french-police-shutter/ https://www.infosecurity-magazine.com/news/russia-hacktivistsattack-water/ Forescout said that the TwoNet actor was lured into attacking a honeypot disguised as a water treatment utility, providing insights into the group’s tactics Fri, 10 Oct 2025 09:15:00 GMT https://www.infosecurity-magazine.com/news/russia-hacktivistsattack-water/ https://www.infosecurity-magazine.com/news/architectural-flaws-ai-browsers/ A new report from SquareX Labs highlights security weaknesses in AI browsers like Comet, revealing new cyber-risks Thu, 09 Oct 2025 14:15:00 GMT https://www.infosecurity-magazine.com/news/architectural-flaws-ai-browsers/ https://www.infosecurity-magazine.com/news/clayrat-spyware-targets-android/ A new ClayRat spyware campaign has been observed targeting Russian users via fake apps on Telegram and exfiltrating data Thu, 09 Oct 2025 13:30:00 GMT https://www.infosecurity-magazine.com/news/clayrat-spyware-targets-android/ https://www.infosecurity-magazine.com/news/sonicwall-cloud-firewall/ SonicWall said that a threat actor has accessed files containing encrypted credentials and configuration data for all customers who have used its cloud backup service Thu, 09 Oct 2025 12:10:00 GMT https://www.infosecurity-magazine.com/news/sonicwall-cloud-firewall/ https://www.infosecurity-magazine.com/news/windows-10-users-end-of-life/ A new report from TeamViewer found that 40% of global endpoints still run Windows 10, just days before security updates and support ends for the operating system Thu, 09 Oct 2025 09:00:00 GMT https://www.infosecurity-magazine.com/news/windows-10-users-end-of-life/ https://www.infosecurity-magazine.com/news/europol-calls-stronger-data-laws/ Europol’s Cybercrime Conference has warned that cybercriminals are exploiting new technologies faster than law enforcement can adapt Mon, 06 Oct 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/europol-calls-stronger-data-laws/ https://www.infosecurity-magazine.com/news/trinity-chaos-launches-data-leak/ A new TOR data leak site published by the Trinity of Chaos ransomware group unveils 39 firms’ data and threatens Salesforce litigation Mon, 06 Oct 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/trinity-chaos-launches-data-leak/ https://www.infosecurity-magazine.com/news/free-vpn-apps-security-flaws/ A new study by Zimperium has revealed serious risks in free VPN apps, exposing users to privacy threats and security flaws Thu, 02 Oct 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/free-vpn-apps-security-flaws/ https://www.infosecurity-magazine.com/news/phishing-dominates-euwide/ ENISA reveals phishing and vulnerability exploitation accounted for majority of intrusions in past year Thu, 02 Oct 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/phishing-dominates-euwide/ https://www.infosecurity-magazine.com/news/shortcut-credential-lures-deliver/ A new campaign has been observed using malicious Windows shortcuts in credential-themed ZIP files to deploy PowerShell script Wed, 01 Oct 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/shortcut-credential-lures-deliver/ https://www.infosecurity-magazine.com/news/ai-cybersecurity-investment-pwc/ PwC found that AI security has become a top investment priority in cyber budgets over the next 12 months, ahead of cloud and network security Wed, 01 Oct 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/ai-cybersecurity-investment-pwc/ https://www.infosecurity-magazine.com/news/solicitors-house-buyers-payment/ The NCA warns that house buyers could face losses of over £80,000 from a type of BEC called payment diversion fraud Wed, 01 Oct 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/solicitors-house-buyers-payment/ https://www.infosecurity-magazine.com/news/ico-imgurs-uk-prevent-regulatory/ Image-sharing platform Imgur has blocked its services within the UK, following a regulatory notice from the ICO Wed, 01 Oct 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/ico-imgurs-uk-prevent-regulatory/ https://www.infosecurity-magazine.com/news/ai-generated-code-phishing/ Microsoft Threat Intelligence stopped an AI-driven credential phishing campaign using SVG files disguised as PDFs Mon, 29 Sep 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/ai-generated-code-phishing/ https://www.infosecurity-magazine.com/news/sonicwall-ssl-vpn-attacks-escalate/ Akira ransomware attacks on SonicWall SSL VPN appliances are bypassing its MFA for rapid deployment Mon, 29 Sep 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/sonicwall-ssl-vpn-attacks-escalate/ https://www.infosecurity-magazine.com/news/singapore-meta-fines-facebook/ The Singapore police said Facebook is the top platform for online scams in the country Fri, 26 Sep 2025 14:15:00 GMT https://www.infosecurity-magazine.com/news/singapore-meta-fines-facebook/ https://www.infosecurity-magazine.com/news/malicious-ai-agent-server/ The security researchers who discovered the malicious npm package called it the “first malicious MCP in the wild” Thu, 25 Sep 2025 16:30:00 GMT https://www.infosecurity-magazine.com/news/malicious-ai-agent-server/ https://www.infosecurity-magazine.com/news/vietnamese-threat-actor-python/ Vietnamese phishing campaign evolves from Python infostealer to PureRAT trojan Thu, 25 Sep 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/vietnamese-threat-actor-python/ https://www.infosecurity-magazine.com/news/iran-nimbus-manticore-european/ Nimbus Manticore intensified European cyber-espionage, targeting aerospace, telecom, defense sectors Tue, 23 Sep 2025 15:30:00 GMT https://www.infosecurity-magazine.com/news/iran-nimbus-manticore-european/ https://www.infosecurity-magazine.com/news/russian-state-hackers-collaborate/ ESET found that the FSB-affiliated groups, Gamaredon and Turla, are sharing tools to help conduct espionage attacks against Ukrainian organizations Fri, 19 Sep 2025 14:30:00 GMT https://www.infosecurity-magazine.com/news/russian-state-hackers-collaborate/ https://www.infosecurity-magazine.com/news/vulnerability-chatgpt-agent-gmail/ Researchers at Radware found a zero-click flaw in ChatGPT Deep Research agent when connected to Gmail and browsing Fri, 19 Sep 2025 13:30:00 GMT https://www.infosecurity-magazine.com/news/vulnerability-chatgpt-agent-gmail/ https://www.infosecurity-magazine.com/news/us-uk-charge-scattered-spider/ One of the teenage suspects is accused of involvement in at least 120 attacks, resulting in $115m in ransom payments Thu, 18 Sep 2025 17:10:00 GMT https://www.infosecurity-magazine.com/news/us-uk-charge-scattered-spider/ https://www.infosecurity-magazine.com/news/android-apps-leak-sensitive-data/ One third of Android and over half iOS apps shown to be leaking insecure APIs and hardcoded secrets Thu, 18 Sep 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/android-apps-leak-sensitive-data/ https://www.infosecurity-magazine.com/news/vc-insight-partners-notifies/ Insight Partners has released more details of a 2024 ransomware breach impacting thousands of individuals Thu, 18 Sep 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/vc-insight-partners-notifies/ https://www.infosecurity-magazine.com/news/filefix-steganography-multistage/ FileFix campaign hides PowerShell script and encrypted EXEs in JPGs via multilingual phishing Wed, 17 Sep 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/filefix-steganography-multistage/ https://www.infosecurity-magazine.com/news/microsoft-disrupts-phishing-kit/ Microsoft revealed it has seized 338 websites associated with RaccoonO365, a phishing kit which has stolen at least 5000 Microsoft credentials worldwide Wed, 17 Sep 2025 12:15:00 GMT https://www.infosecurity-magazine.com/news/microsoft-disrupts-phishing-kit/ https://www.infosecurity-magazine.com/news/api-threats-surge-40000-incidents/ Thales claims there were over 40,000 API incidents in the first half of 2025 Tue, 16 Sep 2025 10:45:00 GMT https://www.infosecurity-magazine.com/news/api-threats-surge-40000-incidents/ https://www.infosecurity-magazine.com/news/seo-poisoning-targets-china/ SEO poisoning attack has been observed targeting Chinese Windows users via lookalike domains, installing Hiddengh0st and Winos Mon, 15 Sep 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/seo-poisoning-targets-china/ https://www.infosecurity-magazine.com/news/phishing-campaigns-rmm-tools/ Threat actors are using multiple lures to trick users into installing RMM tools Mon, 15 Sep 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/phishing-campaigns-rmm-tools/ https://www.infosecurity-magazine.com/news/axios-user-agent-automate-phishing/ ReliaQuest warns that phishing campaigns abusing the Axios user agent have surged 241% in three months Tue, 09 Sep 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news/axios-user-agent-automate-phishing/ https://www.infosecurity-magazine.com/news/chinese-espionage-impersonates-us/ A House select committee said Chinese actors impersonated Representative John Moolenaar to steal information that could be used to influence trade talks Tue, 09 Sep 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/chinese-espionage-impersonates-us/ https://www.infosecurity-magazine.com/news/rat-targets-windows-users-stealth/ Phishing campaign unveiled MostereRAT, targeting Windows systems with advanced evasion techniques Mon, 08 Sep 2025 15:30:00 GMT https://www.infosecurity-magazine.com/news/rat-targets-windows-users-stealth/ https://www.infosecurity-magazine.com/news/macos-stealer-cracked-apps-bypass/ Trend Micro observed the attackers using terminal-based installation methods for the AMOS malware, luring macOS users into installing cracked versions of apps Fri, 05 Sep 2025 12:30:00 GMT https://www.infosecurity-magazine.com/news/macos-stealer-cracked-apps-bypass/ https://www.infosecurity-magazine.com/news/ghostredirector-new-china-threat/ A newly identified hacking group named GhostRedirector has compromised 65 Windows servers using previously unknown tools Thu, 04 Sep 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/ghostredirector-new-china-threat/ https://www.infosecurity-magazine.com/news/north-korea-exploit-threat-intel/ North Korean hackers have been observed exploiting cyber threat intelligence platforms in a campaign targeting job seekers with malware-laced lures Thu, 04 Sep 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/north-korea-exploit-threat-intel/ https://www.infosecurity-magazine.com/news/sitecore-patches-exploited/ Google Cloud’s Mandiant successfully disrupted an active ViewState deserialization attack affecting Sitecore deployments Thu, 04 Sep 2025 13:30:00 GMT https://www.infosecurity-magazine.com/news/sitecore-patches-exploited/ https://www.infosecurity-magazine.com/news/cloudflare-victimized-in-salesloft/ Cloudflare has notified customers that hackers may have accessed their data as part of the Salesloft Drift campaign Wed, 03 Sep 2025 11:45:00 GMT https://www.infosecurity-magazine.com/news/cloudflare-victimized-in-salesloft/ https://www.infosecurity-magazine.com/news/tycoon-phishing-kit-hide-malicious/ Barracuda observed new methods to disguise phishing links in Tycoon phishing attacks, which are designed to bypass automated email security systems Wed, 03 Sep 2025 11:30:00 GMT https://www.infosecurity-magazine.com/news/tycoon-phishing-kit-hide-malicious/ https://www.infosecurity-magazine.com/news/whatsapp-patches-zeroday-zeroclick/ WhatsApp has fixed a zero-day vulnerability linked to a sophisticated cyber-attack Mon, 01 Sep 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/whatsapp-patches-zeroday-zeroclick/ https://www.infosecurity-magazine.com/news/fake-support-attacks-hit-microsoft/ Fake IT support lures are being used to trick employees into installing remote‑access tools via Microsoft Teams Thu, 28 Aug 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/fake-support-attacks-hit-microsoft/ https://www.infosecurity-magazine.com/news/crypto-freeze-47m-romance-baiting/ Chainalysis, OKX, Binance and Tether have managed to stop nearly $50m reaching romance baiting fraudsters Thu, 28 Aug 2025 10:00:00 GMT https://www.infosecurity-magazine.com/news/crypto-freeze-47m-romance-baiting/ https://www.infosecurity-magazine.com/news/ransomware-deletes-data-backups/ Microsoft observed Storm-0501 pivot to the victim’s cloud environment to exfiltrate data rapidly and prevent the victim’s recovery Thu, 28 Aug 2025 09:05:00 GMT https://www.infosecurity-magazine.com/news/ransomware-deletes-data-backups/ https://www.infosecurity-magazine.com/news-features/legacy-it-strategic-priority-cisos/ Warnings about Windows 10's end-of-life date in October highlight the significant cyber risks posed by growing reliance on legacy IT Wed, 27 Aug 2025 11:30:00 GMT https://www.infosecurity-magazine.com/news-features/legacy-it-strategic-priority-cisos/ https://www.infosecurity-magazine.com/news/phishing-upcrypter-deploy-rat/ A global phishing campaign has been identified using personalized emails and fake websites to deliver malware via UpCrypter Tue, 26 Aug 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/phishing-upcrypter-deploy-rat/ https://www.infosecurity-magazine.com/news/fake-macos-spread-infostealer/ A variant of the Atomic macOS Stealer (AMOS) targets macOS users via fake support sites in malvertising campaign Mon, 25 Aug 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/fake-macos-spread-infostealer/ https://www.infosecurity-magazine.com/opinions/quantum-countdown-encryption-crisis/ Security leaders must ensure the board is aware that the quantum risk isn't theoretical, it's happening now Mon, 25 Aug 2025 12:00:00 GMT https://www.infosecurity-magazine.com/opinions/quantum-countdown-encryption-crisis/ https://www.infosecurity-magazine.com/news/microsoft-products-quantum-safe/ Microsoft has set out a roadmap to complete transition to PQC in all its products and services by 2033, with roll out beginning by 2029 Fri, 22 Aug 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/microsoft-products-quantum-safe/ https://www.infosecurity-magazine.com/news/orange-data-breach-sim-swapping/ Orange Belgium revealed that a threat actor has compromised 850,000 customer accounts, with SIM card numbers among the data accessed Thu, 21 Aug 2025 11:30:00 GMT https://www.infosecurity-magazine.com/news/orange-data-breach-sim-swapping/ https://www.infosecurity-magazine.com/news/mule-operators-meta-advanced-fraud/ A new report has mapped the tactical evolution of mule operators in the META region from VPNs to advanced fraud networks Wed, 20 Aug 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/mule-operators-meta-advanced-fraud/ https://www.infosecurity-magazine.com/news/hackers-qr-codes-new-quishing/ Researchers discovered two new phishing techniques where attackers split malicious QR codes or embed them into legitimate ones Wed, 20 Aug 2025 13:45:00 GMT https://www.infosecurity-magazine.com/news/hackers-qr-codes-new-quishing/ https://www.infosecurity-magazine.com/opinions/new-generation-security-talent/ DeVry University's Elise Awwad urges coordinated action to train new cyber professionals Wed, 20 Aug 2025 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/new-generation-security-talent/ https://www.infosecurity-magazine.com/news/warlock-ransomware-sharepoint/ Trend Micro highlighted a sophisticated post-compromise attack chain to deploy the Warlock ransomware in unpatched SharePoint on-prem environments Wed, 20 Aug 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/warlock-ransomware-sharepoint/ https://www.infosecurity-magazine.com/news/experts-warn-executives-celebrity/ The Better Business Bureau is urging business owners and influencers not to fall for a new type of podcast scam Wed, 20 Aug 2025 11:15:00 GMT https://www.infosecurity-magazine.com/news/experts-warn-executives-celebrity/ https://www.infosecurity-magazine.com/news/attacker-patches-vulnerability/ Red Canary observed the novel tactic in a cluster of activity targeting a legacy vulnerability to access cloud-based Linux systems Tue, 19 Aug 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/attacker-patches-vulnerability/ https://www.infosecurity-magazine.com/news/chrome-vpn-extension-spyware/ Researchers detected that FreeVPN.One, a longstanding Chrome Web Store VPN extension, recently turned into spyware Tue, 19 Aug 2025 12:45:00 GMT https://www.infosecurity-magazine.com/news/chrome-vpn-extension-spyware/ https://www.infosecurity-magazine.com/news/man-jailed-20-months-millions-of/ Al-Tahery Al-Mashriky has been sentenced to 20 months behind bars for hacktism-related offenses Mon, 18 Aug 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/man-jailed-20-months-millions-of/ https://www.infosecurity-magazine.com/news/authorized-push-payment-national/ A RUSI report warned that money mules are exploiting inadequate security controls in smaller payment service providers to move fraudulent transactions about Fri, 15 Aug 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/authorized-push-payment-national/ https://www.infosecurity-magazine.com/news/malvertising-powershell-malware/ An ongoing malware campaign has been observed using malvertising to deliver PS1Bot, a PowerShell-based framework Thu, 14 Aug 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/malvertising-powershell-malware/ https://www.infosecurity-magazine.com/news/law-enforcement-government-emails/ Abnormal AI said gaining access to such accounts provides opportunities for sophisticated fraud schemes that impersonate officials Thu, 14 Aug 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news/law-enforcement-government-emails/ https://www.infosecurity-magazine.com/news/chatgpt5-bypassed-using-story/ A new technique has bypassed GPT-5’s safety systems via narrative-driven steering to elicit harmful output Tue, 12 Aug 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/chatgpt5-bypassed-using-story/ https://www.infosecurity-magazine.com/news/home-office-phishing-uk/ The sophisticated campaign aims to steal credentials of sponsor license holders to facilitate immigration fraud, extortion and other monetization schemes Tue, 12 Aug 2025 15:15:00 GMT https://www.infosecurity-magazine.com/news/home-office-phishing-uk/ https://www.infosecurity-magazine.com/news/cybercriminals-low-cost-initial/ Rapid7 found that threat actors are able to purchase low-cost initial access broker services, with many packages offering a variety of options Tue, 12 Aug 2025 14:30:00 GMT https://www.infosecurity-magazine.com/news/cybercriminals-low-cost-initial/ https://www.infosecurity-magazine.com/news/microsoft-exchange-vulnerability/ Microsoft Exchange customers have been urged to apply fixes set out in a hybrid deployment security update published in April Thu, 07 Aug 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-exchange-vulnerability/ https://www.infosecurity-magazine.com/news/chinese-smishing-us-payment-cards/ SecAlliance highlighted the evolution in smishing campaigns orchestrated by Chinese syndicates, which exploit digital wallet tokenization Tue, 05 Aug 2025 16:30:00 GMT https://www.infosecurity-magazine.com/news/chinese-smishing-us-payment-cards/ https://www.infosecurity-magazine.com/news/web-ai-usage-shifts-internet/ Web traffic to AI sites surged 50% from Feb 2024 to Jan 2025, driven by browser-based GenAI tools Mon, 04 Aug 2025 14:15:00 GMT https://www.infosecurity-magazine.com/news/web-ai-usage-shifts-internet/ https://www.infosecurity-magazine.com/news/pwn2own-1m-zeroclick-whatsapp/ The Pwn2Own competition is offering a $1m reward to any teams able to unearth a WhatsApp code execution exploit Mon, 04 Aug 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/pwn2own-1m-zeroclick-whatsapp/ https://www.infosecurity-magazine.com/news/secret-blizzard-moscow-embassies/ Microsoft has observed Russian state actor Secret Blizzard using an AiTM position to gain initial access, assisted by official domestic intercept systems Fri, 01 Aug 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/secret-blizzard-moscow-embassies/ https://www.infosecurity-magazine.com/news/ransomware-attacks-escalate/ Semperis found that executives were physically threatened in 40% of ransomware incidents, in a bid to pressure victims to pay demands Thu, 31 Jul 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-attacks-escalate/ https://www.infosecurity-magazine.com/news/data-breach-costs-fall/ IBM found that the global average cost of a data breach has fallen by 9% compared to 2024, driven by improved detection and containment Wed, 30 Jul 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/data-breach-costs-fall/ https://www.infosecurity-magazine.com/news/fbi-seizes-crypto-chaos-ransomware/ The federal government has applied for forfeiture of the funds, which were seized by FBI Dallas in April 2025 Tue, 29 Jul 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/fbi-seizes-crypto-chaos-ransomware/