https://www.infosecurity-magazine.com/managed-services/ Copyright © 2026 Reed Exhibitions Ltd. All Rights Reserved. https://www.infosecurity-magazine.com/news/fake-codex-download-google-sites/ Fake Codex pages used Google Sites, sponsored search and ClickFix to target Mac users Mon, 24 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/fake-codex-download-google-sites/ https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/ Doubloon Dredger abused Notion and malicious PDFs to harvest Microsoft authentication tokens Mon, 24 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/ https://www.infosecurity-magazine.com/news/north-korean-rust-supply-chain/ Cybersecurity researchers have linked a malicious backdoor in compromised Rust packages to previous North Korean supply chain attacks Fri, 21 Aug 2026 12:40:00 GMT https://www.infosecurity-magazine.com/news/north-korean-rust-supply-chain/ https://www.infosecurity-magazine.com/news/ncsc-stronger-controls-agentic-ai/ NCSC urged sandboxing, oversight and tight access controls for autonomous AI agents Thu, 20 Aug 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/ncsc-stronger-controls-agentic-ai/ https://www.infosecurity-magazine.com/news/linux-foundations-akrites-go-live/ The Linux Foundation's Akrites initiative will become operational in September, when it will begin accepting AI-powered vulnerability reports for open-source projects Wed, 19 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/linux-foundations-akrites-go-live/ https://www.infosecurity-magazine.com/interviews/borussia-dortmund-it-chief/ From stadium infrastructure to player contracts, Borussia Dortmund's Head of IT reveals the cybersecurity challenges facing modern football clubs Wed, 19 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/interviews/borussia-dortmund-it-chief/ https://www.infosecurity-magazine.com/news/enterprise-apps-critical-high/ Enterprise software creation has accelerated as vulnerability levels rise, Sonatype finds Tue, 18 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/enterprise-apps-critical-high/ https://www.infosecurity-magazine.com/news/nasa-ground-control-software-flaw/ Critical AIT-GUI flaws expose spacecraft commands and scripts to unauthenticated attackers Tue, 18 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/nasa-ground-control-software-flaw/ https://www.infosecurity-magazine.com/news/unisoc-modem-flaw-rce-calls/ UNISOC modem flaw enabled kernel-level code execution through video calls Mon, 17 Aug 2026 15:45:00 GMT https://www.infosecurity-magazine.com/news/unisoc-modem-flaw-rce-calls/ https://www.infosecurity-magazine.com/news/wordpress-plugin-flaw-40000-sites/ Critical User Profile Builder flaw let unauthenticated attackers access administrator accounts Mon, 17 Aug 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/wordpress-plugin-flaw-40000-sites/ https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/ Attackers exploited a critical-severity vCenter flaw five days after Broadcom disclosed it Thu, 13 Aug 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/ https://www.infosecurity-magazine.com/news/lazarus-post-quantum-key-dream-job/ Lazarus malware used post-quantum key exchange to protect delivery of a Windows zero-day exploit Wed, 12 Aug 2026 13:35:00 GMT https://www.infosecurity-magazine.com/news/lazarus-post-quantum-key-dream-job/ https://www.infosecurity-magazine.com/news/npm-packages-ethereum-wallet-c2/ Six npm packages queried an Ethereum wallet to locate C2 infrastructure Tue, 11 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/npm-packages-ethereum-wallet-c2/ https://www.infosecurity-magazine.com/news/cursor-security-bug-command/ Cursor fixed a pre-trust code execution path in three days then closed the report as informative Tue, 11 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/cursor-security-bug-command/ https://www.infosecurity-magazine.com/news/logistics-ceva-data-breach/ Supply chain attack and data breach at Ceva Logistics appears to have a large blast radius Tue, 11 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/logistics-ceva-data-breach/ https://www.infosecurity-magazine.com/news/rovoblast-atlassian-rovo-url/ Atlassian fixed a flaw letting one crafted link make its Rovo AI assistant exfiltrate company data Mon, 10 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/rovoblast-atlassian-rovo-url/ https://www.infosecurity-magazine.com/news/bdthemes-wordpress-poisoned-api/ Poisoned JSON feed let attackers backdoor WordPress sites without changing any plugin files Mon, 10 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/bdthemes-wordpress-poisoned-api/ https://www.infosecurity-magazine.com/news/khunt-toolkit-oracle-database-sql/ Attackers used SQL injection to compile a post-exploitation toolkit inside an Oracle database Thu, 06 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/khunt-toolkit-oracle-database-sql/ https://www.infosecurity-magazine.com/news/teampcp-shadowray-ta-natalstatus/ Oligo Security has linked TeamPCP to ShadowRay 2.0 and to cryptojacking infrastructure dating back to 2020 Thu, 06 Aug 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/teampcp-shadowray-ta-natalstatus/ https://www.infosecurity-magazine.com/news/canadian-hacker-guilty-snowflake/ A Canadian hacker has admitted involvement in the widespread compromise of 165 Snowflake customer accounts used to steal data and extort victims Thu, 06 Aug 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/canadian-hacker-guilty-snowflake/ https://www.infosecurity-magazine.com/news/open-vsx-evil-twin-extensions-git/ 77 counterfeit Open VSX extensions beaconed to one domain, 19 harvesting git and CI identity Wed, 05 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/open-vsx-evil-twin-extensions-git/ https://www.infosecurity-magazine.com/news/paperclip-ai-vulnerabilities-rce/ 3 Paperclip flaws exposed data & allowed unauthenticated command execution in two deployment modes Wed, 05 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/paperclip-ai-vulnerabilities-rce/ https://www.infosecurity-magazine.com/news/talos-attackers-split-tasks-evade/ Talos read attacker prompt logs and found guardrails fell to task splitting and ownership claims Tue, 04 Aug 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/talos-attackers-split-tasks-evade/ https://www.infosecurity-magazine.com/interviews/university-of-arts-london/ University of the Arts London's Keith Joy explains the unique cybersecurity challenges facing higher education and how institutions can secure users without restricting creativity Tue, 04 Aug 2026 09:06:00 GMT https://www.infosecurity-magazine.com/interviews/university-of-arts-london/ https://www.infosecurity-magazine.com/news-features/how-cybersecurity-vendors-prepare/ Infosecurity has contacted over a dozen cybersecurity vendors to examine how they are integrating NIST-approved quantum-safe algorithms into their roadmaps Mon, 03 Aug 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news-features/how-cybersecurity-vendors-prepare/ https://www.infosecurity-magazine.com/news/aws-north-korea-axios-npm-supply/ AWS has linked North Korea to the axios campaign to other attacks on npm libraries Fri, 31 Jul 2026 09:50:00 GMT https://www.infosecurity-magazine.com/news/aws-north-korea-axios-npm-supply/ https://www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/ Cryptomining crew abandoned root to impersonate low-privileged Linux users and evade SOC alerts Thu, 30 Jul 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/ https://www.infosecurity-magazine.com/news/logokit-phishing-real-time/ LogoKit now builds per-victim phishing pages using live screenshots of the target's real website Wed, 29 Jul 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/logokit-phishing-real-time/ https://www.infosecurity-magazine.com/news/hugging-face-diffusers-trust/ Three CVEs in Hugging Face diffusers let a malicious model repo run code on any machine that loads it Tue, 28 Jul 2026 15:15:00 GMT https://www.infosecurity-magazine.com/news/hugging-face-diffusers-trust/ https://www.infosecurity-magazine.com/news/ai-linux-kernel-zero-day-net-sched/ AI-assisted research uncovered Linux kernel use-after-free allowing root escalation Tue, 28 Jul 2026 14:45:00 GMT https://www.infosecurity-magazine.com/news/ai-linux-kernel-zero-day-net-sched/ https://www.infosecurity-magazine.com/news/ubuntu-snap-confine-local-root-cve/ New Ubuntu snap-confine race condition lets local users escalate to root on default installs Wed, 22 Jul 2026 10:50:00 GMT https://www.infosecurity-magazine.com/news/ubuntu-snap-confine-local-root-cve/ https://www.infosecurity-magazine.com/news/trim-jailbroken-claude-ai-pentest/ Russian-speaking actor Trim built a commercial offensive AI pentest tool on jailbroken Claude models Tue, 21 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/trim-jailbroken-claude-ai-pentest/ https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/ Six-month phishing campaign used seasonal eCard lures to plant legitimate RMM tools on victims Wed, 15 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/ https://www.infosecurity-magazine.com/news/uefi-shims-secure-boot-bypass/ Eleven forgotten Microsoft-signed UEFI shims can bypass Secure Boot on almost any machine Wed, 15 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/uefi-shims-secure-boot-bypass/ https://www.infosecurity-magazine.com/news/chinese-indian-espionage-pakistani/ Chinese and Indian spies converged on the same Balochistan police force, SentinelLabs found Mon, 13 Jul 2026 14:45:00 GMT https://www.infosecurity-magazine.com/news/chinese-indian-espionage-pakistani/ https://www.infosecurity-magazine.com/news/vibe-coded-malware-ai-powershell/ Huntress found a threat actor using vibe-coded PowerShell to map an Active Directory network Thu, 09 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/vibe-coded-malware-ai-powershell/ https://www.infosecurity-magazine.com/news/ghostapproval-flaw-ai-coding/ Wiz discovered GhostApproval, a symlink flaw in six major AI coding assistants that bypasses approval Thu, 09 Jul 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/ghostapproval-flaw-ai-coding/ https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/ Cisco Talos said China-linked APT UAT-7810 is growing its proxy relay network with new malware Wed, 08 Jul 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/ https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/ A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and Canada and harvest user credentials Tue, 07 Jul 2026 15:40:00 GMT https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/ https://www.infosecurity-magazine.com/interviews/google-cloud-new-ciso-chris-betz/ In his very first interview since assuming the CISO title at Google Cloud, Cris Betz shares his vision for the role AI will play in defending global enterprises Tue, 07 Jul 2026 08:30:00 GMT https://www.infosecurity-magazine.com/interviews/google-cloud-new-ciso-chris-betz/ https://www.infosecurity-magazine.com/news/indirect-prompt-injection-web/ Zscaler found sites hiding prompt-injection text to manipulate AI agents into crypto payments Mon, 06 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/indirect-prompt-injection-web/ https://www.infosecurity-magazine.com/news/opera-gx-flaw-gx-mods-css/ Opera GX flaw let sites automatically install mods to steal data from other pages, now patched Mon, 06 Jul 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/opera-gx-flaw-gx-mods-css/ https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-june-2026/ Industry Mergers and Acquisitions for June saw firms continue to position themselves to make offerings in an evolving threat landscape Fri, 03 Jul 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-june-2026/ https://www.infosecurity-magazine.com/news/researcher-exploitarium-exploits/ Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities first Thu, 02 Jul 2026 12:51:00 GMT https://www.infosecurity-magazine.com/news/researcher-exploitarium-exploits/ https://www.infosecurity-magazine.com/news/nissan-oracle-peoplesoft-zero-day/ Nissan says employees' data was stolen via the Oracle PeopleSoft zero-day campaign Tue, 30 Jun 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/nissan-oracle-peoplesoft-zero-day/ https://www.infosecurity-magazine.com/news/simplehelp-rmm-vulnerability/ Attackers exploited a critical SimpleHelp RMM bug to deploy TaskWeaver and Djinn Stealer malware Tue, 30 Jun 2026 15:34:00 GMT https://www.infosecurity-magazine.com/news/simplehelp-rmm-vulnerability/ https://www.infosecurity-magazine.com/news/openai-gpt-5-6-sol-limited-preview/ OpenAI is previewing its GPT-5.6 Sol model to a vetted few at the US government's request Mon, 29 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/openai-gpt-5-6-sol-limited-preview/ https://www.infosecurity-magazine.com/opinions/ethical-ai-operational-discipline/ Safety requirements for AI in cybersecurity cannot be limited to proselytizing about good intents, it must demonstrate control, containment, and cleanup Mon, 29 Jun 2026 09:00:00 GMT https://www.infosecurity-magazine.com/opinions/ethical-ai-operational-discipline/ https://www.infosecurity-magazine.com/news/cisa-sase-tic-3-0-zero-trust/ New CISA guidance shows federal agencies how to use SASE to move from legacy TIC 2.0 to zero trust Thu, 25 Jun 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/cisa-sase-tic-3-0-zero-trust/ https://www.infosecurity-magazine.com/news/macos-xpc-flaw-disable-edr-mdm/ macos-xpc-flaw-disable-edr-mdm-standard-user-xm-cyber Thu, 25 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/macos-xpc-flaw-disable-edr-mdm/ https://www.infosecurity-magazine.com/news/bioshocking-ai-browser-prompt/ LayerX tricked AI browsers including ChatGPT Atlas and Comet into bypassing their guardrails Wed, 24 Jun 2026 16:05:00 GMT https://www.infosecurity-magazine.com/news/bioshocking-ai-browser-prompt/ https://www.infosecurity-magazine.com/news/operation-endgame-stealc-amadey/ Operation Endgame seized around 50 domains and nearly 200 active IP-based servers associated with the infostealers Wed, 24 Jun 2026 15:25:00 GMT https://www.infosecurity-magazine.com/news/operation-endgame-stealc-amadey/ https://www.infosecurity-magazine.com/news/macos-gaslight-rust-backdoor/ SentinelLabs found a North Korea-linked macOS backdoor using prompt injection on AI triage tools Wed, 24 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/macos-gaslight-rust-backdoor/ https://www.infosecurity-magazine.com/interviews/interview-shopify-ciso-andrew/ Millions of online stores, from global brands to independent retailers, rely on Shopify’s platform to sell their products. This is how the company deploys zero trust, bug bounties, AI and more to keep itself and its customers safe from evolving hacker threats Wed, 24 Jun 2026 08:00:00 GMT https://www.infosecurity-magazine.com/interviews/interview-shopify-ciso-andrew/ https://www.infosecurity-magazine.com/news/lookalike-npm-package-postcss/ JFrog found an npm package impersonating postcss-selector-parser to drop a multi-stage Windows RAT Tue, 23 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/lookalike-npm-package-postcss/ https://www.infosecurity-magazine.com/news/openai-daybreak-gpt-5-5-cyber/ OpenAI expanded Daybreak with a full GPT-5.5-Cyber release to help defenders patch software flaws Tue, 23 Jun 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/openai-daybreak-gpt-5-5-cyber/ https://www.infosecurity-magazine.com/news/apple-bootrom-exploit-a12-a13/ Apple BootROM exploit exposes unpatchable USB flaw on A12 and A13 devices Mon, 22 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/apple-bootrom-exploit-a12-a13/ https://www.infosecurity-magazine.com/news/operation-escaneo-cloudsek-latam/ CloudSEK maps Operation Escaneo, a campaign hitting Latin American infrastructure via perimeter bugs Thu, 18 Jun 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/operation-escaneo-cloudsek-latam/ https://www.infosecurity-magazine.com/news/north-korea-it-worker-fraud-ai/ Nisos infiltrated a North Korean IT-worker fraud cell running on AI interviews and a US laptop farm Wed, 17 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/north-korea-it-worker-fraud-ai/ https://www.infosecurity-magazine.com/news/chainguard-bny-open-source-athena/ Athena is a new an industry coalition to fix the vulnerabilities frontier AI models find before attackers can exploit them Tue, 16 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/chainguard-bny-open-source-athena/ https://www.infosecurity-magazine.com/news/wordpress-plugin-supply-chain/ Tampered OptinMonster and sister plugins plant hidden backdoors on 1.2 million WordPress sites Mon, 15 Jun 2026 17:00:00 GMT https://www.infosecurity-magazine.com/news/wordpress-plugin-supply-chain/ https://www.infosecurity-magazine.com/news/anubis-ransomware-adriatic-port/ How the Anubis ransomware group stole and leaked an Italian Adriatic port authority's data Mon, 15 Jun 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/anubis-ransomware-adriatic-port/ https://www.infosecurity-magazine.com/news/github-update-npm-supply-chain/ NPM, part of GitHub, announced a new version of the npm package manager with several security improvements, including disabling install scripts Fri, 12 Jun 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/github-update-npm-supply-chain/ https://www.infosecurity-magazine.com/news/cisa-orders-agencies-to-patch-by/ New CISA directive tells federal agencies to patch by real-world risk, not CVSS severity scores Thu, 11 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cisa-orders-agencies-to-patch-by/ https://www.infosecurity-magazine.com/news/fake-ai-guides-dev-tools-spread/ Fake AI guides hide a multi-stage chain that drops AsyncRAT, with signs of AI-assisted coding Thu, 11 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/fake-ai-guides-dev-tools-spread/ https://www.infosecurity-magazine.com/news/ai-coding-adoption-governance-lags/ Most dev teams use AI coding assistants but only 30% have full governance in place Tue, 09 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/ai-coding-adoption-governance-lags/ https://www.infosecurity-magazine.com/news/north-korean-hackers-developers/ North Korean actor UNK_DeadDrop targeted developers with fake coding tasks to steal crypto Mon, 08 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/north-korean-hackers-developers/ https://www.infosecurity-magazine.com/news/chatgpt-lockdown-mode-active/ OpenAI brings Lockdown Mode and Active Sessions to ChatGPT to curb prompt injection data theft Mon, 08 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/chatgpt-lockdown-mode-active/ https://www.infosecurity-magazine.com/news/infosec-europe-prompt-injection/ At Infosecurity Europe 2026, OWASP’s Ariel Fogel warned that prompt injection remains an “unresolved problem” within generative AI architecture Mon, 08 Jun 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/infosec-europe-prompt-injection/ https://www.infosecurity-magazine.com/news/everest-forms-pro-rce-actively/ Critical Everest Forms Pro RCE flaw exploited to create rogue WordPress admin accounts Thu, 04 Jun 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/everest-forms-pro-rce-actively/ https://www.infosecurity-magazine.com/news/trump-eo-voluntary-frontier-ai/ Trump's executive order invites voluntary pre-release review of frontier AI models Wed, 03 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/trump-eo-voluntary-frontier-ai/ https://www.infosecurity-magazine.com/news/patch-responsibility-ai-infosec/ The emergence of AI models capable to autonomously find and fix vulnerabilities at scale is having a significant impact on patching management, experts say Wed, 03 Jun 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/patch-responsibility-ai-infosec/ https://www.infosecurity-magazine.com/news/bayer-reinvents-security-awareness/ Bayer’s security awareness training now focuses on psychological approaches rather than technical methods for detecting social engineering Tue, 02 Jun 2026 13:45:00 GMT https://www.infosecurity-magazine.com/news/bayer-reinvents-security-awareness/ https://www.infosecurity-magazine.com/news/ai-edr-evasion-tooling/ A threat actor used AI coding tools to build and test EDR evasion malware, Sophos finds Tue, 02 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/ai-edr-evasion-tooling/ https://www.infosecurity-magazine.com/news/red-hat-npm-scope-backdoored/ Attackers backdoored 32 packages in Red Hat's official npm scope to steal cloud and CI secrets Tue, 02 Jun 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/red-hat-npm-scope-backdoored/ https://www.infosecurity-magazine.com/news/flowise-mcp-rce-poc/ Obsidian publishes PoC for a 1-click Flowise RCE that can fully compromise self-hosted servers Mon, 01 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/flowise-mcp-rce-poc/ https://www.infosecurity-magazine.com/news/ai-soc-still-need-analysts/ Top cybersecurity vendors said AI won't replace entry-level – only routine ticket-taking and triage Mon, 01 Jun 2026 11:45:00 GMT https://www.infosecurity-magazine.com/news/ai-soc-still-need-analysts/ https://www.infosecurity-magazine.com/news/cycos-expands-uk-smes-ciisec/ From a research-driven pilot, the Cybersecurity Communities of Support (CyCOS) is about to be handed over to CIISec Fri, 29 May 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/cycos-expands-uk-smes-ciisec/ https://www.infosecurity-magazine.com/opinions/beginning-of-the-end-human-pen/ There’s nothing inherently wrong with human pen testers, but there are many drawbacks. AI pen testing could change everything. Fri, 29 May 2026 10:00:00 GMT https://www.infosecurity-magazine.com/opinions/beginning-of-the-end-human-pen/ https://www.infosecurity-magazine.com/news/ai-npm-malware-leaks-github-token/ Sloppy AI-generated npm infostealer leaked its own GitHub token, exposing the operator Fri, 29 May 2026 08:10:00 GMT https://www.infosecurity-magazine.com/news/ai-npm-malware-leaks-github-token/ https://www.infosecurity-magazine.com/news/attackers-beyond-typosquatting/ Most malicious open source packages now mimic real code rather than rely on typosquatting Thu, 28 May 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/attackers-beyond-typosquatting/ https://www.infosecurity-magazine.com/news/jinx-0164-crypto-developers-macos/ New actor Jinx-0164 hit crypto developers with fake recruiter lures and macOS malware Thu, 28 May 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/jinx-0164-crypto-developers-macos/ https://www.infosecurity-magazine.com/news/gchq-keast-butler-cyber-action-ai/ GCHQ director urges urgent business cyber action as AI and quantum reshape the threat Thu, 28 May 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/gchq-keast-butler-cyber-action-ai/ https://www.infosecurity-magazine.com/news/crowdstrike-google-takedown/ Operators of the malicious Glassworm botnet have been targeting software developers since at least early 2025 Wed, 27 May 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/crowdstrike-google-takedown/ https://www.infosecurity-magazine.com/news/uk-firms-cyber-spending-ai-risks/ UK firms plan higher cyber spending as AI adoption raises security concerns Wed, 27 May 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/uk-firms-cyber-spending-ai-risks/ https://www.infosecurity-magazine.com/news/cert-in-12-hour-patch-deadline-ai/ CERT-In urges 12-hour patching of exposed flaws as AI compresses exploitation timelines Tue, 26 May 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/cert-in-12-hour-patch-deadline-ai/ https://www.infosecurity-magazine.com/news/github-breach-nx-console-vs-code/ A threat actor compromised an Nx developer and posed as a legitimate maintainer to publish a malicious extension on Visual Studio Marketplace Thu, 21 May 2026 14:45:00 GMT https://www.infosecurity-magazine.com/news/github-breach-nx-console-vs-code/ https://www.infosecurity-magazine.com/news/threequarters-knowingly-ship/ AI risks threaten to permeate supply chains through unvetted code and unaudited suppliers Thu, 21 May 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/threequarters-knowingly-ship/ https://www.infosecurity-magazine.com/news/linux-kernel-ptrace-flaw-ssh-keys/ Qualys finds nine-year-old Linux ptrace flaw exposing SSH keys and password hashes locally Thu, 21 May 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/linux-kernel-ptrace-flaw-ssh-keys/ https://www.infosecurity-magazine.com/news/grafana-labs-code-breach-tanstack/ Grafana Labs has confirmed a recent data breach was caused by the TanStack supply chain attack Thu, 21 May 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/grafana-labs-code-breach-tanstack/ https://www.infosecurity-magazine.com/news/android-carrier-billing-fraud-four/ Premium Deception campaign uses 250 Android apps to silently sign victims up to paid services Wed, 20 May 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/android-carrier-billing-fraud-four/ https://www.infosecurity-magazine.com/news/antv-npm-mini-shai-hulud-largest/ Mini Shai-Hulud worm hits Alibaba AntV ecosystem in largest npm supply chain wave to date Wed, 20 May 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/antv-npm-mini-shai-hulud-largest/ https://www.infosecurity-magazine.com/news/github-confirms-breach-vs-code/ The prolific threat group TeamPCP has claimed a hack into GitHub’s internal repositories Wed, 20 May 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/github-confirms-breach-vs-code/ https://www.infosecurity-magazine.com/news/verizon-dbir-exploits-top-access/ Verizon DBIR finds 31% of data breaches began with software flaws last year Wed, 20 May 2026 08:40:00 GMT https://www.infosecurity-magazine.com/news/verizon-dbir-exploits-top-access/ https://www.infosecurity-magazine.com/news/mustang-panda-fdmtp-backdoor-apj/ Mustang Panda campaign deploys updated FDMTP backdoor against Asia-Pacific and Japan networks Thu, 14 May 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/mustang-panda-fdmtp-backdoor-apj/ https://www.infosecurity-magazine.com/news/fragnesia-linux-kernel-lpe-root/ New Fragnesia kernel flaw lets unprivileged local users escalate to root on Linux systems Thu, 14 May 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/fragnesia-linux-kernel-lpe-root/ https://www.infosecurity-magazine.com/news/canvas-cybercriminals-agreement/ Instructure says it reached an agreement with ShinyHunters over the Canvas breach data Wed, 13 May 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/canvas-cybercriminals-agreement/ https://www.infosecurity-magazine.com/news/avada-builder-flaws-one-million/ Avada Builder flaws allowed file read and SQL injection on one million WordPress sites Wed, 13 May 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/avada-builder-flaws-one-million/ https://www.infosecurity-magazine.com/news/mini-shai-hulud-tanstack-npm/ Mini Shai-Hulud compromises TanStack npm packages and spreads across PyPI Tue, 12 May 2026 14:45:00 GMT https://www.infosecurity-magazine.com/news/mini-shai-hulud-tanstack-npm/ https://www.infosecurity-magazine.com/news/apple-google-rcs-end-to-end/ Apple begins rolling out end-to-end encrypted RCS messaging between iPhone and Android in iOS 26.5 Tue, 12 May 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/apple-google-rcs-end-to-end/ https://www.infosecurity-magazine.com/news/fake-claude-code-installer/ Ontinue uncovers fake Claude Code installer pushing PowerShell stealer abusing Chrome's IElevator2 Mon, 11 May 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/fake-claude-code-installer/ https://www.infosecurity-magazine.com/news/cline-kanban-websocket-hijack-ai/ Oasis Security finds critical Cline kanban WebSocket flaw exposing AI coding agents to hijack Thu, 07 May 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/cline-kanban-websocket-hijack-ai/ https://www.infosecurity-magazine.com/news/cloudz-rat-pheno-phone-link-otp/ Cisco Talos uncovers CloudZ RAT and Pheno plugin abusing Microsoft Phone Link to intercept SMS OTPs Wed, 06 May 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cloudz-rat-pheno-phone-link-otp/ https://www.infosecurity-magazine.com/news/cisa-ci-fortify-isolation-recovery/ CISA’s CI Fortify initiative aim for critical infrastructure operators to build isolation & recovery Wed, 06 May 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/cisa-ci-fortify-isolation-recovery/ https://www.infosecurity-magazine.com/news/ssa-emails-venomous-helper-phishing/ Venomous#Helper attackers impersonate the US Social Security Administration to deploy signed RMM software and maintain persistent access across US networks Tue, 05 May 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/ssa-emails-venomous-helper-phishing/ https://www.infosecurity-magazine.com/news/trellix-reveals-unauthorized/ Security vendor Trellix has suffered a breach involving unauthorized access Tue, 05 May 2026 08:55:00 GMT https://www.infosecurity-magazine.com/news/trellix-reveals-unauthorized/ https://www.infosecurity-magazine.com/news/zero-trust-guidance-operational/ A new CISA‑led guide explains how zero‑trust security can be applied to operational technology, balancing cyber defence with safety and system availability Thu, 30 Apr 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/zero-trust-guidance-operational/ https://www.infosecurity-magazine.com/news/cursor-extension-flaw-exposes-api/ Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX Wed, 29 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cursor-extension-flaw-exposes-api/ https://www.infosecurity-magazine.com/news/ai-npm-dependency-targets-crypto/ Researchers uncover a malicious npm dependency linked to an AI‑assisted code commit that steals sensitive data and exposes crypto wallets Wed, 29 Apr 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/ai-npm-dependency-targets-crypto/ https://www.infosecurity-magazine.com/news/29-billion-compromised-credentials/ KELA claims infostealers remained the primary access vector for attacks in 2025 Wed, 29 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/29-billion-compromised-credentials/ https://www.infosecurity-magazine.com/news/medtronic-data-breach-shinyhunters/ Medtronic confirms IT breach as ShinyHunters claims millions of records accesseda Tue, 28 Apr 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/medtronic-data-breach-shinyhunters/ https://www.infosecurity-magazine.com/news/chinese-national-extradited-silk/ Extradition links alleged MSS-directed hacker to Silk Typhoon and COVID-19 espionage Tue, 28 Apr 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/chinese-national-extradited-silk/ https://www.infosecurity-magazine.com/news/no-metrics-better-bad-metrics-soc/ The National Cyber Security Centre has warned against measuring SOCs with ticket-based metrics Tue, 28 Apr 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/no-metrics-better-bad-metrics-soc/ https://www.infosecurity-magazine.com/news/npm-supply-chain-worm-canister/ Malicious npm packages spread via worm-like propagation and steal developer credentials Fri, 24 Apr 2026 08:10:00 GMT https://www.infosecurity-magazine.com/news/npm-supply-chain-worm-canister/ https://www.infosecurity-magazine.com/news/apple-ios-notification-bug-deleted/ Apple patches iOS flaw that retained deleted notifications, exposing message data Thu, 23 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/apple-ios-notification-bug-deleted/ https://www.infosecurity-magazine.com/news/macos-lotl-techniques-enterprise/ macOS LOTL techniques bypass detection using native tools and metadata abuse Wed, 22 Apr 2026 16:30:00 GMT https://www.infosecurity-magazine.com/news/macos-lotl-techniques-enterprise/ https://www.infosecurity-magazine.com/news/ncsc-silentglass-a-plugin-stop/ The UK’s cybersecurity agency said the devices will be available for purchase by organizations around the world Wed, 22 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/ncsc-silentglass-a-plugin-stop/ https://www.infosecurity-magazine.com/news/uk-pledges-90m-for-cybersecurity/ UK unveils £90m cybersecurity funding at CYBERUK to boost SME resilience, promote Cyber Essentials and a new Cyber Resilience Pledge, sparking industry debate Wed, 22 Apr 2026 14:10:00 GMT https://www.infosecurity-magazine.com/news/uk-pledges-90m-for-cybersecurity/ https://www.infosecurity-magazine.com/news/silent-subject-phishing-campaigns/ Null subject phishing campaigns bypass filters and target VIPs with QR code and RMM abuse Wed, 22 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/silent-subject-phishing-campaigns/ https://www.infosecurity-magazine.com/news/zionsiphon-malware-water/ ZionSiphon malware targets OT water systems with sabotage and ICS scanning capabilities Mon, 20 Apr 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/zionsiphon-malware-water/ https://www.infosecurity-magazine.com/news/mirai-variant-dvr-flaw-iot-botnet/ FortiGuard Labs has identified a Mirai-based Nexcorium campaign actively exploiting CVE-2024-3721 in TBK DVR devices Mon, 20 Apr 2026 13:01:00 GMT https://www.infosecurity-magazine.com/news/mirai-variant-dvr-flaw-iot-botnet/ https://www.infosecurity-magazine.com/news/ncsc-plan-boost-nhs-cyber/ The National Cyber Security Centre has shared an update of its resilience-building efforts for the NHS Mon, 20 Apr 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/ncsc-plan-boost-nhs-cyber/ https://www.infosecurity-magazine.com/news/cookeville-medical-center-data/ Tennessee's CRMC notifies over 337,000 patients of Rhysida ransomware breach exposing sensitive data Thu, 16 Apr 2026 15:01:00 GMT https://www.infosecurity-magazine.com/news/cookeville-medical-center-data/ https://www.infosecurity-magazine.com/interviews/cdw-walt-powell-field-ciso/ CDW lead field CISO Walt Powell urges modern security leaders to master risk quantification to secure the board buy-in and budgets needed to tackle emerging AI and post-quantum threats Thu, 16 Apr 2026 12:05:00 GMT https://www.infosecurity-magazine.com/interviews/cdw-walt-powell-field-ciso/ https://www.infosecurity-magazine.com/news/systemic-flaw-mcp-expose-150/ Ox Security claims as many as 200,000 servers are exposed by newly discovered MCP vulnerability Thu, 16 Apr 2026 09:40:00 GMT https://www.infosecurity-magazine.com/news/systemic-flaw-mcp-expose-150/ https://www.infosecurity-magazine.com/news/nginx-ui-mcp-flaw-actively/ Critical nginx-ui MCP authentication bypass CVE-2026-33032 actively exploited with CVSS 9.8 Wed, 15 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/nginx-ui-mcp-flaw-actively/ https://www.infosecurity-magazine.com/news/ai-companies-to-play-bigger-role/ At VulnCon, Lindsey Cerkovnik, head of vulnerability management at CISA, said AI companies should play a bigger role in vulnerability disclosures in the future Wed, 15 Apr 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/ai-companies-to-play-bigger-role/ https://www.infosecurity-magazine.com/news/triad-nexus-expands-fraud/ Triad Nexus scales $200m scams, uses infrastructure laundering, localized fraud and US-access blocks Tue, 14 Apr 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/triad-nexus-expands-fraud/ https://www.infosecurity-magazine.com/news/chrome-extensions-expose-user-data/ 108 malicious Chrome extensions steal sessions, Google data, inject ads via single C2 infrastructure Tue, 14 Apr 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/chrome-extensions-expose-user-data/ https://www.infosecurity-magazine.com/news/mailbox-rule-abuse-stealthy-post/ Attackers are abusing Microsoft 365 mailbox rules to hide activity, exfiltrate data and retain access after account compromise, researchers warn Mon, 13 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/mailbox-rule-abuse-stealthy-post/ https://www.infosecurity-magazine.com/news/google-api-keys-access-gemini/ Google API key flaw exposes mobile apps to Gemini AI access, private files and billing risks Wed, 08 Apr 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/google-api-keys-access-gemini/ https://www.infosecurity-magazine.com/news/flaw-ninja-forms-wordpress/ Ninja Forms File Upload RCE via unauthenticated arbitrary file upload; update to 3.3.27 immediately Wed, 08 Apr 2026 15:10:00 GMT https://www.infosecurity-magazine.com/news/flaw-ninja-forms-wordpress/ https://www.infosecurity-magazine.com/news/gpu-based-rowhammer-attack/ GPUBreach uses GPU Rowhammer on GDDR6 to flip bits, corrupt page tables and escalate to system root Tue, 07 Apr 2026 15:05:00 GMT https://www.infosecurity-magazine.com/news/gpu-based-rowhammer-attack/ https://www.infosecurity-magazine.com/news/grafanaghost-silent-data/ GrafanaGhost chains AI prompt injection and URL flaws to exfiltrate sensitive Grafana data Tue, 07 Apr 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/grafanaghost-silent-data/ https://www.infosecurity-magazine.com/news/apple-ios-18-updates-darksword/ iOS/iPadOS 18.7.7 updates expanded to protect older devices from DarkSword web exploit kit Thu, 02 Apr 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/apple-ios-18-updates-darksword/ https://www.infosecurity-magazine.com/news/github-covert-multi-stage-malware/ LNK files use GitHub C2, embedded decoders and PowerShell for persistence and data exfiltration Thu, 02 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/github-covert-multi-stage-malware/ https://www.infosecurity-magazine.com/news/google-android-dev-verification/ Android requires dev identity verification for sideloaded apps; phased global rollout from September Wed, 01 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/google-android-dev-verification/ https://www.infosecurity-magazine.com/news/hackers-hijack-axios-npm-package/ Threat actors hijacked the popular npm package axios to spread RAT malware after compromising an open‑source maintainer’s account, researchers warn Wed, 01 Apr 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/hackers-hijack-axios-npm-package/ https://www.infosecurity-magazine.com/news/teampcp-exploit-stolen-supply/ TeamPCP is exploring ways to monetize the secrets harvested during supply chain attacks, with identified ties to the Lapsus$ and Vect ransomware gangs Tue, 31 Mar 2026 12:15:00 GMT https://www.infosecurity-magazine.com/news/teampcp-exploit-stolen-supply/ https://www.infosecurity-magazine.com/news/tax-season-new-phishing-tactics/ Tax-season phishing floods deliver RMM malware, credential theft, BEC and tax-form scams Mon, 30 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/tax-season-new-phishing-tactics/ https://www.infosecurity-magazine.com/news/lloyds-glitch-exposed-500000/ Lloyds app glitch exposed up to 447,936 customers’ transactions and personal data during update Mon, 30 Mar 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/lloyds-glitch-exposed-500000/ https://www.infosecurity-magazine.com/news/teampcp-targets-telnyx-pypi-package/ Socket and Endor Labs discovered a new TeamPCP campaign leading to the delivery of credential-stealing malware Fri, 27 Mar 2026 15:06:00 GMT https://www.infosecurity-magazine.com/news/teampcp-targets-telnyx-pypi-package/ https://www.infosecurity-magazine.com/news/critical-oracle-weblogic-rce/ Attackers rapidly exploited a critical Oracle WebLogic RCE flaw the same day exploit code was released, according to a CloudSEK honeypot study Thu, 26 Mar 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/critical-oracle-weblogic-rce/ https://www.infosecurity-magazine.com/opinions/supply-chain-cyber-leadership/ In an increasingly interconnected business environment, third-party resilience is no longer optional. Wed, 25 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/opinions/supply-chain-cyber-leadership/ https://www.infosecurity-magazine.com/news/teampcp-litellm-pypi-supply-chain/ Python package LiteLLM compromised with credential-stealing malware linked to TeamPCP threat group Wed, 25 Mar 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/teampcp-litellm-pypi-supply-chain/ https://www.infosecurity-magazine.com/news/citrix-patch-netscaler/ A critical vulnerability in Citrix’s NetScaler products allows unauthenticated remote attackers to leak information from the appliance's memory Tue, 24 Mar 2026 15:15:00 GMT https://www.infosecurity-magazine.com/news/citrix-patch-netscaler/ https://www.infosecurity-magazine.com/news/npm-ghost-campaign-fake-install/ Ghost npm campaign fakes install logs to steal sudo passwords and drop RATs that loot crypto and data Tue, 24 Mar 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/npm-ghost-campaign-fake-install/ https://www.infosecurity-magazine.com/news/high-tech-top-target-cyberattacks/ High tech was the most frequently targeted industry in Mandiant investigations in 2025, overtaking financial services which led in 2023 and 2024 Mon, 23 Mar 2026 15:35:00 GMT https://www.infosecurity-magazine.com/news/high-tech-top-target-cyberattacks/ https://www.infosecurity-magazine.com/news/trivy-supply-chain-attack-expands/ New Trivy Docker images 0.69.5 and 0.69.6 compromised with TeamPCP infostealer, impacting CI/CD scans Mon, 23 Mar 2026 15:05:00 GMT https://www.infosecurity-magazine.com/news/trivy-supply-chain-attack-expands/ https://www.infosecurity-magazine.com/news/ransomware-affiliate-gentlemen/ Hastalamuerte leaks The Gentlemen RaaS ops: FortiGate exploits, BYOVD evasion, Qilin split tactics Thu, 19 Mar 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-affiliate-gentlemen/ https://www.infosecurity-magazine.com/news/financial-brands-mobile-banking/ Mobile banking malware targets over 1200 financial apps globally, shifting fraud to user devices Thu, 19 Mar 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/financial-brands-mobile-banking/ https://www.infosecurity-magazine.com/news/fca-updates-incident-thirdparty/ The UK’s financial regulator has issued new rules to make incident and third-party reporting clearer Thu, 19 Mar 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/fca-updates-incident-thirdparty/ https://www.infosecurity-magazine.com/news/ubuntu-flaw-enables-root-access/ CVE-2026-3888 Ubuntu snap flaw lets local users escalate to root via timing-based exploit Wed, 18 Mar 2026 15:45:00 GMT https://www.infosecurity-magazine.com/news/ubuntu-flaw-enables-root-access/ https://www.infosecurity-magazine.com/news/vidar-stealer-exploits-github/ The Vidar 2.0 infostealers is deployed through fake free game cheats on GitHub and Reddit Wed, 18 Mar 2026 11:15:00 GMT https://www.infosecurity-magazine.com/news/vidar-stealer-exploits-github/ https://www.infosecurity-magazine.com/news/android-attack-bypasses-payment/ Android’s LSPosed-based attack hijacks payment apps via runtime manipulation and SIM-binding bypass Tue, 17 Mar 2026 16:30:00 GMT https://www.infosecurity-magazine.com/news/android-attack-bypasses-payment/ https://www.infosecurity-magazine.com/news/cursor-jack-attack-path-ai/ CursorJack shows how malicious MCP deeplinks in Cursor IDE can trigger user-approved code execution Tue, 17 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cursor-jack-attack-path-ai/ https://www.infosecurity-magazine.com/news/crackarmor-linux-privilege/ CrackArmor AppArmor flaws let local Linux users gain root, break containers and enable DoS attacks Mon, 16 Mar 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/crackarmor-linux-privilege/ https://www.infosecurity-magazine.com/news/security-flaw-aws-bedrock/ DNS-based attack in AWS Bedrock AgentCore lets AI sandboxes exfiltrate cloud data Mon, 16 Mar 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/security-flaw-aws-bedrock/ https://www.infosecurity-magazine.com/news-features/what-cisos-should-know-and-do/ Infosecurity spoke to several experts, including OpenClaw’s own security advisor, to explore what CISOs should do to contain the viral AI agent tool’s security vulnerabilities Fri, 13 Mar 2026 14:05:00 GMT https://www.infosecurity-magazine.com/news-features/what-cisos-should-know-and-do/ https://www.infosecurity-magazine.com/news/pixrevolution-malware-brazils-pix/ PixRevolution Android trojan hijacks Brazil’s PIX payments in real time using accessibility abuse Thu, 12 Mar 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/pixrevolution-malware-brazils-pix/ https://www.infosecurity-magazine.com/news/critical-zeroclick-flaw-n8n-pillar/ The critical vulnerability affecting both cloud and self-hosted n8n instances requires no authentication or even n8n account to be exploited Thu, 12 Mar 2026 15:28:00 GMT https://www.infosecurity-magazine.com/news/critical-zeroclick-flaw-n8n-pillar/ https://www.infosecurity-magazine.com/news/cisa-cisco-sd-wan-flaws-directive/ CISA issued urgent directive as attackers exploit Cisco SD-WAN flaw granting admin access to networks Thu, 12 Mar 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/cisa-cisco-sd-wan-flaws-directive/ https://www.infosecurity-magazine.com/news/google-looker-studios-security-gaps/ LeakyLooker flaws in Google Looker Studio let attackers run cross-tenant SQL attacks on cloud data Wed, 11 Mar 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/google-looker-studios-security-gaps/ https://www.infosecurity-magazine.com/news/blacksanta-edr-killer-targets-hr/ BlackSanta malware targets HR staff with fake resumes, kills EDR and steals system data Wed, 11 Mar 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/blacksanta-edr-killer-targets-hr/ https://www.infosecurity-magazine.com/news/organizations-test-identity-sec-6/ Only 24% of organizations test identity disaster recovery plans every 6 months, Quest Software said Tue, 10 Mar 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/organizations-test-identity-sec-6/ https://www.infosecurity-magazine.com/news/ericsson-breach-exposes-data-15k/ Ericsson data breach affects 15k employees/customers after third-party service provider compromise Tue, 10 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/ericsson-breach-exposes-data-15k/ https://www.infosecurity-magazine.com/news/elastic-cloud-siem-manage-stolen/ Huntress researchers uncover campaign exploiting vulnerabilities to steal data using Elastic Cloud as a data hub Mon, 09 Mar 2026 15:45:00 GMT https://www.infosecurity-magazine.com/news/elastic-cloud-siem-manage-stolen/ https://www.infosecurity-magazine.com/news/usa-unveils-new-cyber-strategy/ US national cyber strategy focuses on stronger defenses, countering threats, fostering innovation Mon, 09 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/usa-unveils-new-cyber-strategy/ https://www.infosecurity-magazine.com/news/ai-security-startups-cyber/ Over one in five winners of IT-Harvest’s 2026 Cyber 150 are AI security companies Mon, 09 Mar 2026 13:25:00 GMT https://www.infosecurity-magazine.com/news/ai-security-startups-cyber/ https://www.infosecurity-magazine.com/news/zero-day-enterprise-record-high/ Almost a quarter of the zero days detected by Google in 2025 targeted security and networking appliances Fri, 06 Mar 2026 12:29:00 GMT https://www.infosecurity-magazine.com/news/zero-day-enterprise-record-high/ https://www.infosecurity-magazine.com/news/contextcrush-ai-development-tools/ Critical flaw "ContextCrush" in Context7 MCP Server could allow malicious instructions into AI tools Thu, 05 Mar 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/contextcrush-ai-development-tools/ https://www.infosecurity-magazine.com/news/coruna-exploit-older-iphones/ Exploit kit "Coruna" targets iPhones running iOS 13.0 to 17.2.1, focusing on financial data theft Thu, 05 Mar 2026 12:15:00 GMT https://www.infosecurity-magazine.com/news/coruna-exploit-older-iphones/ https://www.infosecurity-magazine.com/news/iran-attacks-surveillance-cameras/ Increased attempts to compromise surveillance cameras linked to Iran during Middle East conflict Wed, 04 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/iran-attacks-surveillance-cameras/ https://www.infosecurity-magazine.com/news/iranian-crypto-leaked-database/ Ariomex database reveals potential sanctions evasion and capital transfers tied to Iranian actors Tue, 03 Mar 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/iranian-crypto-leaked-database/ https://www.infosecurity-magazine.com/news/shadow-layer-organizations-supply/ Black Kite reveals 26,000 unnamed corporate victims linked to 136 third-party breaches Tue, 03 Mar 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/shadow-layer-organizations-supply/ https://www.infosecurity-magazine.com/news/middle-east-conflict-surge-global/ Military strikes in the Middle East escalate cyber ops, raising spillover risks globally for firms Mon, 02 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/middle-east-conflict-surge-global/ https://www.infosecurity-magazine.com/news/clawjacked-bug-covert-ai-agent/ Oasis Security reveals how a new ClawJacked vulnerability could allow attackers to silently take over a victim’s OpenClaw agent Mon, 02 Mar 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/clawjacked-bug-covert-ai-agent/ https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-feb-26/ Cybersecurity industry mergers and acquisitions in February continued around a focus on agentic AI Mon, 02 Mar 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-feb-26/ https://www.infosecurity-magazine.com/news/32m-phishing-emails-detected-2025/ 2025 saw 32M phishing emails, with identity threats surpassing vulnerabilities Thu, 26 Feb 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/32m-phishing-emails-detected-2025/ https://www.infosecurity-magazine.com/news/exploitable-vulnerabilities-in-87/ Datadog report reveals two-fifths of services are affected by exploitable bugs Thu, 26 Feb 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/exploitable-vulnerabilities-in-87/ https://www.infosecurity-magazine.com/news/app-exploits-surge-ai-speeds/ IBM's 2026 X-Force report reveals 44% rise in cyber-attacks on public apps, driven by AI and flaws Wed, 25 Feb 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/app-exploits-surge-ai-speeds/ https://www.infosecurity-magazine.com/news/malicious-nuget-package-stripe-devs/ Malicious NuGet package mimicking Stripe's library targeted developers Wed, 25 Feb 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/malicious-nuget-package-stripe-devs/ https://www.infosecurity-magazine.com/news/shai-hulud-like-worm-devs-npm-ai/ Supply chain worm mimicking Shai-Hulud malware spread via malicious npm packages, targeting AI tools has been identified by security researchers Mon, 23 Feb 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/shai-hulud-like-worm-devs-npm-ai/ https://www.infosecurity-magazine.com/news/remcos-rat-expands-real-time/ New Remcos RAT variant enhances real-time surveillance and evasion techniques to compromise Windows Thu, 19 Feb 2026 16:30:00 GMT https://www.infosecurity-magazine.com/news/remcos-rat-expands-real-time/ https://www.infosecurity-magazine.com/news/fake-coretax-apps-fraud-indonesia/ Fraud campaign exploiting Indonesia’s Coretax resulted in $1.5m to $2m in losses via malicious apps Thu, 19 Feb 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/fake-coretax-apps-fraud-indonesia/ https://www.infosecurity-magazine.com/news/ai-assistants-covert-c2-relays/ AIs like Grok and Microsoft Copilot can be exploited as covert C2 channels for malware communication Wed, 18 Feb 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/ai-assistants-covert-c2-relays/ https://www.infosecurity-magazine.com/interviews/national-gas-cto-darren-curley-it/ In conversation with Infosecurity, National Gas CTO Darren Curley explains why more security solutions don’t always mean better protection Wed, 18 Feb 2026 13:00:00 GMT https://www.infosecurity-magazine.com/interviews/national-gas-cto-darren-curley-it/ https://www.infosecurity-magazine.com/news/oysterloader-new-c2-infrastructure/ OysterLoader malware evolves into 2026, refining C2 infrastructure, obfuscation & infection stages Mon, 16 Feb 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/oysterloader-new-c2-infrastructure/ https://www.infosecurity-magazine.com/news/operation-doppelbrand-trusted/ New phishing campaign dubbed Operation DoppelBrand targeted major financial firms like Wells Fargo Mon, 16 Feb 2026 15:45:00 GMT https://www.infosecurity-magazine.com/news/operation-doppelbrand-trusted/ https://www.infosecurity-magazine.com/opinions/safeguarding-solar-through-smarter/ Solar energy has been recognised by EU Institutions as critical infrastructure. This is what the industry must do to better protect itself from cyber threats. Fri, 13 Feb 2026 10:00:00 GMT https://www.infosecurity-magazine.com/opinions/safeguarding-solar-through-smarter/ https://www.infosecurity-magazine.com/news/phorpiex-phishing-global-group/ High-volume phishing campaign delivers Phorpiex malware via malicious Windows Shortcut files Tue, 10 Feb 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/phorpiex-phishing-global-group/ https://www.infosecurity-magazine.com/news/voidlink-malware-multi-cloud-ai/ VoidLink, a Linux-based C2 framework, facilitates credential theft, data exfiltration across clouds Mon, 09 Feb 2026 15:25:00 GMT https://www.infosecurity-magazine.com/news/voidlink-malware-multi-cloud-ai/ https://www.infosecurity-magazine.com/news/shadowsyndicate/ ShadowSyndicate cluster expands with new SSH fingerprints connecting servers to other ransomware ops Wed, 04 Feb 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/shadowsyndicate/ https://www.infosecurity-magazine.com/news/wordpress-sql-injection-flaw-40000/ 40,000 WordPress sites are vulnerable to SQL injection in Quiz and Survey Master plugin Tue, 03 Feb 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/wordpress-sql-injection-flaw-40000/ https://www.infosecurity-magazine.com/news/dockerdash-weakness-dockers-ask/ DockerDash vulnerability allows RCE and data exfiltration via unverified metadata in Ask Gordon Tue, 03 Feb 2026 15:15:00 GMT https://www.infosecurity-magazine.com/news/dockerdash-weakness-dockers-ask/ https://www.infosecurity-magazine.com/news/nsa-zero-trust-implementation/ NSA released new guidelines to help organizations achieve target-level Zero Trust maturity Mon, 02 Feb 2026 16:05:00 GMT https://www.infosecurity-magazine.com/news/nsa-zero-trust-implementation/ https://www.infosecurity-magazine.com/news/notepad-update-hijacked/ A supply chain attack on Notepad++ update process was linked to compromised hosting infrastructure Mon, 02 Feb 2026 15:15:00 GMT https://www.infosecurity-magazine.com/news/notepad-update-hijacked/ https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-jan-26/ 2026 has started with a string of cybersecurity industry mergers & acquisitions as vendors position themselves around agentic AI Mon, 02 Feb 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news-features/cybersecurity-ma-roundup-jan-26/ https://www.infosecurity-magazine.com/opinions/precision-playbook-software-supply/ Adversaries are adopting a more precise approach to supply chain compromise. Organizations need to rethink what “secure software” really means. Fri, 30 Jan 2026 10:00:00 GMT https://www.infosecurity-magazine.com/opinions/precision-playbook-software-supply/ https://www.infosecurity-magazine.com/news/12-openssl-flaws/ A recent update has fixed 12 vulnerabilities in OpenSSL, some existing in the codebase for years Wed, 28 Jan 2026 16:45:00 GMT https://www.infosecurity-magazine.com/news/12-openssl-flaws/ https://www.infosecurity-magazine.com/news/n8n-sandbox-flaws-allow-rce/ Two critical security flaws in n8n have exposed sandboxing vulnerabilities, enabling remote code execution for attackers Wed, 28 Jan 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/n8n-sandbox-flaws-allow-rce/ https://www.infosecurity-magazine.com/news-features/data-privacy-day-ai-rise-protect/ As AI tools like ChatGPT and Microsoft 365 Copilot surge in the workplace, Data Privacy Day 2026 highlights urgent data protection risks. Discover how employee AI use could leak sensitive information Wed, 28 Jan 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news-features/data-privacy-day-ai-rise-protect/ https://www.infosecurity-magazine.com/news/worldleaks-ransomware-14tb-nike/ Nike is investigating after the World Leaks ransomware group posted a 1.4TB data dump Tue, 27 Jan 2026 09:45:00 GMT https://www.infosecurity-magazine.com/news/worldleaks-ransomware-14tb-nike/ https://www.infosecurity-magazine.com/news/nhs-open-letter-demands-improved/ Open letter by NHS technology leaders outlines plans to identify risks to software supply chain security across health and social care system Fri, 23 Jan 2026 14:38:00 GMT https://www.infosecurity-magazine.com/news/nhs-open-letter-demands-improved/ https://www.infosecurity-magazine.com/news/appsmith-flaw-account-takeovers/ Critical vulnerability in Appsmith allows account takeover via flawed password reset process Thu, 22 Jan 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/appsmith-flaw-account-takeovers/ https://www.infosecurity-magazine.com/news/realhomes-crm-plugin-flaw/ Security flaw in RealHomes CRM plugin allowed file uploads; patches released for 30,000+ sites Thu, 22 Jan 2026 15:10:00 GMT https://www.infosecurity-magazine.com/news/realhomes-crm-plugin-flaw/ https://www.infosecurity-magazine.com/news/phishing-spoofed-sites-olympic/ Cyber risks for the Milano-Cortina 2026 Winter Games include phishing and spoofed websites as key threat vectors Wed, 21 Jan 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/phishing-spoofed-sites-olympic/ https://www.infosecurity-magazine.com/news/chainlit-security-flaws-ai-apps/ 2 security vulnerabilities in the Chainlit framework expose risks from web flaws in AI applications Tue, 20 Jan 2026 16:30:00 GMT https://www.infosecurity-magazine.com/news/chainlit-security-flaws-ai-apps/ https://www.infosecurity-magazine.com/news/prompt-injection-bugs-anthropic/ Three vulnerabilities in Anthropic's Git server for the MCP can be exploited via prompt injection Tue, 20 Jan 2026 15:01:00 GMT https://www.infosecurity-magazine.com/news/prompt-injection-bugs-anthropic/ https://www.infosecurity-magazine.com/news/hackers-shun-encryption-in-favour/ While ‘traditional’ ransomware attacks remain stable, some gangs are shifting towards exploiting zero-days and supply chains to go straight to stealing data Thu, 15 Jan 2026 15:45:00 GMT https://www.infosecurity-magazine.com/news/hackers-shun-encryption-in-favour/ https://www.infosecurity-magazine.com/news/cyber-threat-actors-ramp-up-ics/ Hacktivists and cybercriminals have intensified their efforts to exploit vulnerabilities in industrial systems, according to a Cyble report Thu, 15 Jan 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cyber-threat-actors-ramp-up-ics/ https://www.infosecurity-magazine.com/news/codebuild-flaw-aws-console-risk/ A critical AWS CodeBuild misconfiguration has exposed core repositories to potential attack Thu, 15 Jan 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/codebuild-flaw-aws-console-risk/ https://www.infosecurity-magazine.com/news/cisa-flags-exploited-gogs-flaw-no/ A high-severity security flaw in the Gogs Git service is being actively exploited, leading to remote code execution Tue, 13 Jan 2026 16:45:00 GMT https://www.infosecurity-magazine.com/news/cisa-flags-exploited-gogs-flaw-no/ https://www.infosecurity-magazine.com/news/china-uat-7290-targets-telecoms/ A long-term cyber-espionage campaign targeting South Asia's telecom firms has been linked to UAT-7290 Thu, 08 Jan 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/china-uat-7290-targets-telecoms/ https://www.infosecurity-magazine.com/news/uk-launches-new-cyber-unit/ UK government’s new Cyber Action plan looks to provide more ‘hands-on’ support for protecting against and responding to security incidents Tue, 06 Jan 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/uk-launches-new-cyber-unit/ https://www.infosecurity-magazine.com/opinions/geopolitics-supply-chains-shadow/ Whether the catalyst is geopolitical friction, attacks on global shipping routes, or the unchecked growth of shadow AI, the common thread is exposure management Fri, 02 Jan 2026 11:00:00 GMT https://www.infosecurity-magazine.com/opinions/geopolitics-supply-chains-shadow/ https://www.infosecurity-magazine.com/news-features/five-flaws-exploited-2025-software/ Infosecurity has selected five of the most significant vulnerability exploitation campaigns of 2025 that led to major software supply chain incidents Mon, 29 Dec 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news-features/five-flaws-exploited-2025-software/ https://www.infosecurity-magazine.com/news-features/biggest-cybersecurity-mergers/ Infosecurity explores the biggest cybersecurity mergers and acquisitions of 2025, including two mega-deals that reshaped the industry Thu, 25 Dec 2025 09:00:00 GMT https://www.infosecurity-magazine.com/news-features/biggest-cybersecurity-mergers/ https://www.infosecurity-magazine.com/news/servicenow-78bn-ot-security/ ServiceNow is set to acquire Armis for $7.75bn in a cash-only deal expected to close in the second half of 2026 Wed, 24 Dec 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/servicenow-78bn-ot-security/ https://www.infosecurity-magazine.com/news/nissan-thousands-impacted-by-red/ Nissan has revealed that over 20,000 customers have had personal information compromised in a third-party data breach Tue, 23 Dec 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/nissan-thousands-impacted-by-red/ https://www.infosecurity-magazine.com/news/oauth-phishing-campaigns/ A surge in phishing attacks exploiting Microsoft’s OAuth device code flow has been identified by Proofpoint Thu, 18 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/oauth-phishing-campaigns/ https://www.infosecurity-magazine.com/news/motors-wordpress-flaw-takeover/ A critical flaw in the Motors WordPress theme affecting more than 20,000 installations allows low-privileged users to gain full control of websites Wed, 17 Dec 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/motors-wordpress-flaw-takeover/ https://www.infosecurity-magazine.com/news/jumpcloud-windows-agent-flaw/ A flaw in JumpCloud Remote Assist for Windows has exposed managed endpoints to local privilege escalation and denial-of-service attacks Tue, 16 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/jumpcloud-windows-agent-flaw/ https://www.infosecurity-magazine.com/news-features/top-10-cyberattacks-of-2025/ Discover the most significant cyber-attacks of 2025 in Infosecurity Magazine’s expert roundup Tue, 16 Dec 2025 13:00:00 GMT https://www.infosecurity-magazine.com/news-features/top-10-cyberattacks-of-2025/ https://www.infosecurity-magazine.com/news/ncsc-playbook-cyber-essentials/ The UK’s National Cyber Security Centre has called on businesses to apply Cyber Essentials to suppliers Mon, 15 Dec 2025 10:00:00 GMT https://www.infosecurity-magazine.com/news/ncsc-playbook-cyber-essentials/ https://www.infosecurity-magazine.com/news/malware-discovered-in-19-vs-code/ A new campaign involving 19 malicious Visual Studio Code extensions used a legitimate npm package to embed malware in dependency folders Thu, 11 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/malware-discovered-in-19-vs-code/ https://www.infosecurity-magazine.com/news/log4shell-downloaded-40-million/ Sonatype has claimed that 13% of Log4j versions downloaded this year were vulnerable to the legacy critical Log4Shell bug Wed, 10 Dec 2025 11:00:00 GMT https://www.infosecurity-magazine.com/news/log4shell-downloaded-40-million/ https://www.infosecurity-magazine.com/news/react2shell-exploit-campaigns/ Sysdig has found sophisticated malicious campaigns exploiting React2Shell that delivered EtherRAT and suggested North Korean hackers’ involvement Tue, 09 Dec 2025 17:15:00 GMT https://www.infosecurity-magazine.com/news/react2shell-exploit-campaigns/ https://www.infosecurity-magazine.com/news/malicious-vs-code-extensions/ Two malicious Visual Studio Code extensions, Bitcoin Black and Codo AI, have been observed harvesting sensitive user data Tue, 09 Dec 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/malicious-vs-code-extensions/ https://www.infosecurity-magazine.com/news/marquis-software-breach/ A data breach at Marquis Software Solutions due to a firewall flaw has affected over 780,000 people across the US Mon, 08 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/marquis-software-breach/ https://www.infosecurity-magazine.com/news/barts-health-high-court-ban-oracle/ Barts Health NHS Trust has revealed itself to be the latest victim of Cl0p’s Oracle EBS campaign Mon, 08 Dec 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/barts-health-high-court-ban-oracle/ https://www.infosecurity-magazine.com/news/us-guidance-secure-ai-ot/ Cybersecurity agencies have issued guidance for securely integrating AI into OT systems Thu, 04 Dec 2025 16:30:00 GMT https://www.infosecurity-magazine.com/news/us-guidance-secure-ai-ot/ https://www.infosecurity-magazine.com/news/picklescan-flaws-expose-ai-supply/ 3 critical zero-day flaws in PickleScan, affecting Python and PyTorch, allowed undetected attacks Tue, 02 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/picklescan-flaws-expose-ai-supply/ https://www.infosecurity-magazine.com/news/shadypanda-infects-43m-chrome-edge/ Infected 4.3 million Chrome and Edge users via extensions; ShadyPanda exploited browser marketplaces Tue, 02 Dec 2025 15:10:00 GMT https://www.infosecurity-magazine.com/news/shadypanda-infects-43m-chrome-edge/ https://www.infosecurity-magazine.com/news/malware-ai-detection-npm-package/ Malicious npm package targets AI security with misleading prompts, exploiting automated analysis Mon, 01 Dec 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/malware-ai-detection-npm-package/ https://www.infosecurity-magazine.com/news/openai-warns-mixpanel-data-breach/ The breach may have exposed OpenAI API customers’ data Thu, 27 Nov 2025 11:15:00 GMT https://www.infosecurity-magazine.com/news/openai-warns-mixpanel-data-breach/ https://www.infosecurity-magazine.com/news/scattered-lapsus-hunters-zendesk/ New phishing domains point to a campaign from the notorious Scattered Lapsus$ Hunters collective Thu, 27 Nov 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/scattered-lapsus-hunters-zendesk/ https://www.infosecurity-magazine.com/news/uk-liability-software-providers/ A new report from the UK Business and Trade Committee has called for accountability of software providers for cyber flaws amid rising attack costs Wed, 26 Nov 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/uk-liability-software-providers/ https://www.infosecurity-magazine.com/news/new-shaihulud-worm-trouble-npm/ A new version of the Shai-Hulud worm has infected hundreds of npm packages and caused disruption to global CI/CD workflows Tue, 25 Nov 2025 10:00:00 GMT https://www.infosecurity-magazine.com/news/new-shaihulud-worm-trouble-npm/ https://www.infosecurity-magazine.com/news/flaws-expose-risks-fluent-bit/ Critical flaws in Fluent Bit threaten telemetry across platforms according to an advisory published by Oligo Security researchers Mon, 24 Nov 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/flaws-expose-risks-fluent-bit/ https://www.infosecurity-magazine.com/news/iberia-airlines-supply-chain-data/ Spanish airline Iberia has begun emailing its customers about a supplier data breach Mon, 24 Nov 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/iberia-airlines-supply-chain-data/ https://www.infosecurity-magazine.com/news/new-gainsight-supply-chain-hack/ Salesforce believes there has been unauthorized access to its customers’ data through the Gainsight app’s connection to its platform Fri, 21 Nov 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/new-gainsight-supply-chain-hack/ https://www.infosecurity-magazine.com/news/cisa-guidance-bulletproof-hosting/ CISA launches guide to combat cybercrime via bulletproof hosting, recommending measures for ISPs Thu, 20 Nov 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/cisa-guidance-bulletproof-hosting/ https://www.infosecurity-magazine.com/news/supply-chain-breaches-impact/ Despite a growing maturity of third-party risk management programs, supply chain attacks impacted more organizations in 2025 than in previous years Thu, 20 Nov 2025 14:15:00 GMT https://www.infosecurity-magazine.com/news/supply-chain-breaches-impact/ https://www.infosecurity-magazine.com/news/npm-malware-campaign-redirects/ A new malware campaign has been observed built on seven npm packages and using cloaking techniques and fake CAPTCHAs, operated by threat actor dino_reborn Tue, 18 Nov 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/npm-malware-campaign-redirects/ https://www.infosecurity-magazine.com/news/europol-takedown-extremist-gaming/ Europol’s Referral Action Day removed extremist links across gaming and gaming-adjacent platforms, targeting radical content Mon, 17 Nov 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/europol-takedown-extremist-gaming/ https://www.infosecurity-magazine.com/news/indonesianfoods-npm-worm-44000/ A new npm worm dubbed “IndonesianFoods” has doubled the number of known malicious packages Thu, 13 Nov 2025 15:15:00 GMT https://www.infosecurity-magazine.com/news/indonesianfoods-npm-worm-44000/ https://www.infosecurity-magazine.com/news/globallogic-latest-cl0p-victim/ GlobalLogic has notified 10,000 employees their data was stolen in the Oracle EBS campaign Wed, 12 Nov 2025 15:30:00 GMT https://www.infosecurity-magazine.com/news/globallogic-latest-cl0p-victim/ https://www.infosecurity-magazine.com/news/government-cyber-security/ The UK government is overhauling cybersecurity laws for the first time since 2018 with the Cyber Security and Resilience Bill Wed, 12 Nov 2025 09:40:00 GMT https://www.infosecurity-magazine.com/news/government-cyber-security/ https://www.infosecurity-magazine.com/news/hackers-exploit-critical-flaw/ Threat actors were exploiting vulnerable versions of Triofox after a patched version was released, said Google Cloud researchers Tue, 11 Nov 2025 12:30:00 GMT https://www.infosecurity-magazine.com/news/hackers-exploit-critical-flaw/