https://www.infosecurity-magazine.com/news/ Copyright © 2026 Reed Exhibitions Ltd. All Rights Reserved. https://www.infosecurity-magazine.com/news/wikimedia-confirms-platforms-rogue/ Wikimedia says OpenAI agents performed unauthorized actions on its platforms, including edits to wikis Fri, 09 Oct 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/wikimedia-confirms-platforms-rogue/ https://www.infosecurity-magazine.com/news/q3-new-record-ransomware/ Comparitech observed 2627 claimed ransomware attacks in Q3, with critical sectors like finance, technology, education and healthcare experiencing significant increases Fri, 09 Oct 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/q3-new-record-ransomware/ https://www.infosecurity-magazine.com/news/uk-allies-threat-china-integrity/ The UK, US and allies have issued an alert detailing malicious activity linked to China’s Integrity Technology Group Fri, 09 Oct 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/uk-allies-threat-china-integrity/ https://www.infosecurity-magazine.com/news/ai-training-critical-as-governance/ As AI adoption accelerates, ISACA is expanding its certification portfolio with a governance-focused credential designed to help professionals manage AI securely Fri, 09 Oct 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/ai-training-critical-as-governance/ https://www.infosecurity-magazine.com/news/ai-firms-pledge-data-protection/ Ten leading AI firms have committed to make data protection improvements following a call for evidence by the UK’s Information Commissioner's Office Fri, 09 Oct 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/ai-firms-pledge-data-protection/ https://www.infosecurity-magazine.com/news/attackers-hijack-cctlds-obtain/ Attackers compromised .gh, .sl and .as registries to obtain unauthorized HTTPS certificates Thu, 08 Oct 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/attackers-hijack-cctlds-obtain/ https://www.infosecurity-magazine.com/news/asos-data-breach-stolen-employee/ The ASOS hack comes from the compromise of agentic marketing platform Simon AI, said the attackers Thu, 08 Oct 2026 13:36:00 GMT https://www.infosecurity-magazine.com/news/asos-data-breach-stolen-employee/ https://www.infosecurity-magazine.com/news/russia-aligned-uac-0099-evolves/ Russia-aligned UAC-0099 has steadily upgraded its MATCHBOIL downloader since 2024 Thu, 08 Oct 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/russia-aligned-uac-0099-evolves/ https://www.infosecurity-magazine.com/news/chinese-hacker-ai-korean-banks/ CrowdStrike revealed that a Chinese-speaking hacker deployed agentic pentesting tool ARTEX and Claude to help breach data from South Korean financial firms Thu, 08 Oct 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/chinese-hacker-ai-korean-banks/ https://www.infosecurity-magazine.com/news/critical-vulnerability-atlassian/ A critical vulnerability affecting eight Atlassian products, including Jira and Confluence, is being exploited in the wild, said VulnCheck Thu, 08 Oct 2026 10:05:00 GMT https://www.infosecurity-magazine.com/news/critical-vulnerability-atlassian/ https://www.infosecurity-magazine.com/news/europol-us-gao-alarm-quantum/ Europol and US Government Accountability Office urge faster transition to post-quantum cryptography Thu, 08 Oct 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/europol-us-gao-alarm-quantum/ https://www.infosecurity-magazine.com/news/fbi-secret-service-fortibleed/ The FBI and Secret Service are warning Fortigate admins that their systems are still being targeted Thu, 08 Oct 2026 08:40:00 GMT https://www.infosecurity-magazine.com/news/fbi-secret-service-fortibleed/ https://www.infosecurity-magazine.com/news/ot-coalition-cisa-mandate-federal/ OTCC urged CISA to mandate baseline security requirements for federal operational technology Wed, 07 Oct 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/ot-coalition-cisa-mandate-federal/ https://www.infosecurity-magazine.com/news/attackers-hide-ai-prompt/ Barracuda finds phishing emails designed to manipulate both human users and AI assistants Wed, 07 Oct 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/attackers-hide-ai-prompt/ https://www.infosecurity-magazine.com/news/telegram-accoun-asos-tied-gaming/ A Group-IB researcher has found the Telegram account linked to the unauthorized ASOS customer notification previously engaged in gaming-item trading Wed, 07 Oct 2026 11:57:00 GMT https://www.infosecurity-magazine.com/news/telegram-accoun-asos-tied-gaming/ https://www.infosecurity-magazine.com/news/cybersecurity-pros-rely-passwords/ A Yubico survey identified a significant gap between awareness and adoption of secure methods of authentication in enterprises Wed, 07 Oct 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-pros-rely-passwords/ https://www.infosecurity-magazine.com/news/pwn2own-hackers-32-zeroday/ Ethical hackers have already found 32 zero days in various products at Pwn2Own Ireland Wed, 07 Oct 2026 09:25:00 GMT https://www.infosecurity-magazine.com/news/pwn2own-hackers-32-zeroday/ https://www.infosecurity-magazine.com/news/danish-cpr-breach-supply-chain-risk/ A breach of 8.8 million citizens on the Danish Central Register of Persons (CPR) occurred via third-party access Wed, 07 Oct 2026 08:20:00 GMT https://www.infosecurity-magazine.com/news/danish-cpr-breach-supply-chain-risk/ https://www.infosecurity-magazine.com/news/clickfix-vbscript-browser-cache/ ClickFix sites stage a VBScript payload in the browser cache to bypass the Run dialog's length limit Tue, 06 Oct 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/clickfix-vbscript-browser-cache/ https://www.infosecurity-magazine.com/news/nikkei-employee-cloud-account/ Nikkei says two employee cloud accounts were accessed, with one used to send 9,000 phishing emails Tue, 06 Oct 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/nikkei-employee-cloud-account/ https://www.infosecurity-magazine.com/news/red-hat-lightwell-remediates-400/ The IBM subsidiary has also announced its Lightwell Clearinghouse is now available to all customers Tue, 06 Oct 2026 13:01:00 GMT https://www.infosecurity-magazine.com/news/red-hat-lightwell-remediates-400/ https://www.infosecurity-magazine.com/news/medical-devices-pqc-transition/ Forescout found that just 6% of Internet of Medical Things (IoMT) and 16% of medical OT are capable of supporting post quantum cryptography Tue, 06 Oct 2026 12:20:00 GMT https://www.infosecurity-magazine.com/news/medical-devices-pqc-transition/ https://www.infosecurity-magazine.com/news/asos-customers-message-suspected/ ASOS customers have received a seemingly legitimate push notifications claiming the retailer’s IT systems have been breached through a Snowflake breach Tue, 06 Oct 2026 11:41:00 GMT https://www.infosecurity-magazine.com/news/asos-customers-message-suspected/ https://www.infosecurity-magazine.com/news/police-urge-passkey-surge/ Report Fraud says cybercrime revenue stemming from account takeover increased 417% annually Tue, 06 Oct 2026 09:15:00 GMT https://www.infosecurity-magazine.com/news/police-urge-passkey-surge/ https://www.infosecurity-magazine.com/news/affiliate-doublecrosses-raas/ An affiliate of The Gentlemen RaaS group ran a parallel leak site during extortion of two dozen victims Tue, 06 Oct 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/affiliate-doublecrosses-raas/ https://www.infosecurity-magazine.com/news/clingstun-backdoor-unpatched-iot/ ClingSTUN exploits known IoT flaws and abuses public STUN servers to keep proxy access to devices Mon, 05 Oct 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/clingstun-backdoor-unpatched-iot/ https://www.infosecurity-magazine.com/news/smtp-linux-backdoors-network-edge/ Rapid7 has uncovered new BPFDoor, BPF Rekoobe and AVERAT malware variants targeting telecom and network-edge appliances in South Korea and Taiwan Mon, 05 Oct 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/smtp-linux-backdoors-network-edge/ https://www.infosecurity-magazine.com/news/citrix-netscaler-zero-day/ The memory buffer vulnerability can result in denial of service to customers, with CISA warning it poses “significant risks” to the federal government Mon, 05 Oct 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/citrix-netscaler-zero-day/ https://www.infosecurity-magazine.com/news/google-suspends-opensource-bug/ Google has paused its Open Source Vulnerability Rewards Program due to a flood of AI submissions Mon, 05 Oct 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/google-suspends-opensource-bug/ https://www.infosecurity-magazine.com/news/uk-schools-recovering-faster/ Ofqual study finds growing number of UK schools are bouncing back “immediately” from cyber-attacks Mon, 05 Oct 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/uk-schools-recovering-faster/ https://www.infosecurity-magazine.com/news/frontline-education-breach-k12/ A breach at school software provider Frontline Education has exposed employee data Mon, 05 Oct 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/frontline-education-breach-k12/ https://www.infosecurity-magazine.com/news/microsoft-ai-attack-time-minutes/ Microsoft has warned that threat actors have gained the advantage over defenders by using AI to enhance the speed and scale of attacks Fri, 02 Oct 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/microsoft-ai-attack-time-minutes/ https://www.infosecurity-magazine.com/news/police-target-killsec-ransomware/ Investigators have disrupted the operations of ransomware group KillSec and arrested several key suspects Fri, 02 Oct 2026 09:20:00 GMT https://www.infosecurity-magazine.com/news/police-target-killsec-ransomware/ https://www.infosecurity-magazine.com/news/zerodays-dutch-institute/ The Dutch Institute for Vulnerability Disclosure reveals agentic AI-powered attack using Zammad zero-days Fri, 02 Oct 2026 08:25:00 GMT https://www.infosecurity-magazine.com/news/zerodays-dutch-institute/ https://www.infosecurity-magazine.com/news/critical-cisco-catalyst-sdwan/ Vulnerability in Cisco Catalyst SD-WAN Manager allows an unauthenticated, remote attacker to access systems with admin privileges Thu, 01 Oct 2026 14:17:00 GMT https://www.infosecurity-magazine.com/news/critical-cisco-catalyst-sdwan/ https://www.infosecurity-magazine.com/news/ta419-impersonates-ai-experts-us/ TA419 posed as AI policymakers and economists to phish US AI policy experts' Microsoft 365 accounts Thu, 01 Oct 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/ta419-impersonates-ai-experts-us/ https://www.infosecurity-magazine.com/news/cloudsyncd-macos-backdoor-fake/ CloudSyncD uses a fake Zoom installer to phish Mac passwords and launch a two-stage backdoor Thu, 01 Oct 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/cloudsyncd-macos-backdoor-fake/ https://www.infosecurity-magazine.com/news/mitigating-adversarial-ai-top/ PwC finds global security leaders are most concerned about attacks on AI systems Thu, 01 Oct 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/mitigating-adversarial-ai-top/ https://www.infosecurity-magazine.com/news/mi5-alerts-academics-chinese/ MI5 has issued a rare warning to UK academics contributing to the China General Technology Research Institute Thu, 01 Oct 2026 07:37:00 GMT https://www.infosecurity-magazine.com/news/mi5-alerts-academics-chinese/ https://www.infosecurity-magazine.com/news/ai-found-vulnerabilities-rce/ AI-discovered vulnerabilities are more likely to enable RCE, as disclosures and exploitation rise Wed, 30 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/ai-found-vulnerabilities-rce/ https://www.infosecurity-magazine.com/news/trump-ai-giants-super-intelligence/ Trump and six AI firms sign a voluntary accord on internal controls, audits and board oversight Wed, 30 Sep 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/trump-ai-giants-super-intelligence/ https://www.infosecurity-magazine.com/news/ai-boosts-soc-analyst-capacity/ Swimlane finds that AI is reducing repetitive work for SOC teams but some feel their careers may suffer Wed, 30 Sep 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/ai-boosts-soc-analyst-capacity/ https://www.infosecurity-magazine.com/news/chatgpt-feature-abuse-to-deliver/ Cybersecurity researchers at Huntress identify campaign to deliver potent trojan which targets users searching for ChatGPT via Google Wed, 30 Sep 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/chatgpt-feature-abuse-to-deliver/ https://www.infosecurity-magazine.com/news/apple-patches-coregraphics-zero/ Apple has patched CVE-2026-86950, a zero-day bug in the iOS CoreGraphics engine Wed, 30 Sep 2026 08:45:00 GMT https://www.infosecurity-magazine.com/news/apple-patches-coregraphics-zero/ https://www.infosecurity-magazine.com/news/rathat-c2-panel-malware-as-a/ RatHat's C2 panel now builds malware and ranks victims with AI across nearly 100 deployments Tue, 29 Sep 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/rathat-c2-panel-malware-as-a/ https://www.infosecurity-magazine.com/news/aws-agentcore-sdk-flaws-ai/ AWS AgentCore SDK flaws could let attackers run commands in AI sandboxes and reach AWS credentials Tue, 29 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/aws-agentcore-sdk-flaws-ai/ https://www.infosecurity-magazine.com/news/microsoft-needymantis-malware/ Microsoft Threat Intelligence warns that NeedyMantis threat actor from China has targeted organizations across a range of industries Tue, 29 Sep 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/microsoft-needymantis-malware/ https://www.infosecurity-magazine.com/news/japanese-railway-operators-cyber/ Tokyo Metro and Keio have revealed separate cyber-attacks Tue, 29 Sep 2026 09:45:00 GMT https://www.infosecurity-magazine.com/news/japanese-railway-operators-cyber/ https://www.infosecurity-magazine.com/news/kiteworks-customers-restart/ Kiteworks has lifted a temporary shutdown recommendation which was issued on the back of federal intelligence Tue, 29 Sep 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/kiteworks-customers-restart/ https://www.infosecurity-magazine.com/news/bitget-restarts-withdrawals-387-5m/ Bitget has restarted Bitcoin withdrawals after a $387.5m breach of its hot and warm wallets Mon, 28 Sep 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/bitget-restarts-withdrawals-387-5m/ https://www.infosecurity-magazine.com/news/nvidia-open-platform-secure/ NVIDIA has launched a platform pairing runtime controls with hardware monitoring for AI agents Mon, 28 Sep 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/nvidia-open-platform-secure/ https://www.infosecurity-magazine.com/news/deepfakes-costly-reality-for/ A quarter of victims of deepfake attacks have lost over $1m. CISOs worry that boardrooms don’t understand the threat Mon, 28 Sep 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/deepfakes-costly-reality-for/ https://www.infosecurity-magazine.com/news/mcp-creating-major-governance-gaps/ Ox Security found security shortcomings in analysis of over 15,000 MCP servers Mon, 28 Sep 2026 09:45:00 GMT https://www.infosecurity-magazine.com/news/mcp-creating-major-governance-gaps/ https://www.infosecurity-magazine.com/news/citrix-patches-critical-zero-days/ Citrix has confirmed exploitation of two critical zero-day RCE bugs Mon, 28 Sep 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/citrix-patches-critical-zero-days/ https://www.infosecurity-magazine.com/news/vulnerabilities-salesforce-ai/ The ‘SalesBleed’ set of weaknesses in Salesforce’s Agentforce agents exposed CRM data to attackers via prompt injection and DNS exfiltration Fri, 25 Sep 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/vulnerabilities-salesforce-ai/ https://www.infosecurity-magazine.com/news/cisa-election-security-midterms/ The CISA plan provides guidance and resources for election officials to secure systems such as voter registration databases and voting machines Fri, 25 Sep 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/cisa-election-security-midterms/ https://www.infosecurity-magazine.com/news/banking-trojan-remote-control/ The newly-discovered trojan abuses the Android Accessibility Service to gain control over victim devices and collect sensitive banking credentials Fri, 25 Sep 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/banking-trojan-remote-control/ https://www.infosecurity-magazine.com/news/aliexpress-phishing-flagged-early/ EfficientIP says it flagged AliExpress phishing domains before they were registered Fri, 25 Sep 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/aliexpress-phishing-flagged-early/ https://www.infosecurity-magazine.com/news/ransomware-gang-uses-backup/ Ransom notes by n0n ransomware claim to take double extortion to a new level of danger for victims Thu, 24 Sep 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-gang-uses-backup/ https://www.infosecurity-magazine.com/news/cisa-quality-era-global-cve-program/ CISA has set out a new framework to improve CVE data quality as vulnerability volumes rise Thu, 24 Sep 2026 12:50:00 GMT https://www.infosecurity-magazine.com/news/cisa-quality-era-global-cve-program/ https://www.infosecurity-magazine.com/news/uk-government-service-led-cyber/ Whitehall is shifting from mandatory cyber controls to service-led governance following a critical audit exposing failures of its 2022 cyber strategy Thu, 24 Sep 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/uk-government-service-led-cyber/ https://www.infosecurity-magazine.com/news/openai-hacks-australian-medicare/ Australian PM Anthony Albanese criticized OpenAI’s response to the incident, which occurred in June 2026 Thu, 24 Sep 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/openai-hacks-australian-medicare/ https://www.infosecurity-magazine.com/news/75-organizations-microsoft-365/ ShareGate study claims to reveal a governance ‘crisis’ as AI usage grows Thu, 24 Sep 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/75-organizations-microsoft-365/ https://www.infosecurity-magazine.com/news/data-top-bottleneck-barrier-threat/ SANS Institute report claims data rather than skills is now the main hurdle for threat hunters Thu, 24 Sep 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/data-top-bottleneck-barrier-threat/ https://www.infosecurity-magazine.com/news/hundreds-leaked-github-app-keys/ GitGuardian finds 474 leaked GitHub App keys still authenticating, including keys with admin access Wed, 23 Sep 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/hundreds-leaked-github-app-keys/ https://www.infosecurity-magazine.com/news/x47c-botnet-ai-api-draining-18/ Qrator found a Windows botnet advertised with AI API draining, credential theft and SOCKS5 proxying Wed, 23 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/x47c-botnet-ai-api-draining-18/ https://www.infosecurity-magazine.com/news/ransomware-attacks-reach-record/ A total of 1073 firms fell victim to ransomware attacks globally in August, with the industrial sector the most affected, according to new NCC data Wed, 23 Sep 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-attacks-reach-record/ https://www.infosecurity-magazine.com/news/shinyhunters-fbi-hack-peoplesoft/ Infamous threat group ShinyHunters claims to have personal information on thousands of FBI employees Wed, 23 Sep 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/shinyhunters-fbi-hack-peoplesoft/ https://www.infosecurity-magazine.com/news/eu-auditors-slam-blocs-cyberinfo/ The EU Court of Auditors has criticized EU shortcomings in responding to major cyber incidents Wed, 23 Sep 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/eu-auditors-slam-blocs-cyberinfo/ https://www.infosecurity-magazine.com/news/north-korean-waterplum-30000/ WaterPlum compromised 30,000 devices and took funds or credentials from 7000 crypto wallets Tue, 22 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/north-korean-waterplum-30000/ https://www.infosecurity-magazine.com/news/orgs-lack-ai-incident-response/ A new report by ISACA found that 71% of orgs have not run AI incident response exercises as teams face rising pressure Tue, 22 Sep 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/orgs-lack-ai-incident-response/ https://www.infosecurity-magazine.com/news/segmentation-failures-expanding/ Forescout warns that incomplete network segmentation is widening the potential blast radius of attacks Tue, 22 Sep 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/segmentation-failures-expanding/ https://www.infosecurity-magazine.com/news/ai-drives-surge-in-bot-and-api/ Akamai report warns of increase in bot traffic, API threats, chatbot leaks and other AI-related threats Tue, 22 Sep 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/ai-drives-surge-in-bot-and-api/ https://www.infosecurity-magazine.com/news/update-incident-response/ Gartner warns that CISOs must update incident response playbooks as AI-powered deepfakes make social engineering attacks more convincing and harder to detect Tue, 22 Sep 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/update-incident-response/ https://www.infosecurity-magazine.com/news/google-hit-with-403m-gdpr-fine/ The Irish DPC found that Google users were unaware that their location was being used to influence them with ads Mon, 21 Sep 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/google-hit-with-403m-gdpr-fine/ https://www.infosecurity-magazine.com/news/exvicy-clickfix-framework/ Sekoia said Exvicy, a new ClickFix MaaS framework, reused code from rival service ErrTraffic Mon, 21 Sep 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/exvicy-clickfix-framework/ https://www.infosecurity-magazine.com/news/attackers-abuse-npm-trusted/ CloudSEK linked GHAPPIER to a compromised npm package with valid trusted-publishing provenance Mon, 21 Sep 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/attackers-abuse-npm-trusted/ https://www.infosecurity-magazine.com/news/shinyhunters-claim-hack-of-clop/ ShinyHunters has claimed responsibility for hacking the Clop ransomware group, defacing its leak site and alleging theft of key operational data Mon, 21 Sep 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/shinyhunters-claim-hack-of-clop/ https://www.infosecurity-magazine.com/news/experts-gyazos-breach-490-million/ A breach at image-sharing service Gyazo on September 11 affected over 23 million customers Mon, 21 Sep 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/experts-gyazos-breach-490-million/ https://www.infosecurity-magazine.com/news/revolut-customers-targeted-wave/ Following a major data breach, Revolut customers are being sent convincing phishing messages Mon, 21 Sep 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/revolut-customers-targeted-wave/ https://www.infosecurity-magazine.com/news/settra-ransomware-retail/ Huntress researchers highlighted a new ransomware variant, named Settra, and the post-compromise techniques used in two recent attacks Fri, 18 Sep 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/settra-ransomware-retail/ https://www.infosecurity-magazine.com/news/cisa-upgrades-vulnerability/ The US cybersecurity agency is moving to a new vulnerability coordination platform called VINCE-NT Fri, 18 Sep 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/cisa-upgrades-vulnerability/ https://www.infosecurity-magazine.com/news/manufacturing-22-ransomware-victims/ Black Kite has found that manufacturing remained the most targeted sector for ransomware attacks, and saw a big jump in incidents in H1 2026 Fri, 18 Sep 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/manufacturing-22-ransomware-victims/ https://www.infosecurity-magazine.com/news/famoussparrow-sparrowocky-latin/ ESET said FamousSparrow has replaced SparrowDoor with SparroWocky Thu, 17 Sep 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/famoussparrow-sparrowocky-latin/ https://www.infosecurity-magazine.com/news/cisa-critical-infrastructure-cyber/ CISA released guidance on using cyber decoys to detect & disrupt malicious activity inside networks Thu, 17 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/cisa-critical-infrastructure-cyber/ https://www.infosecurity-magazine.com/news/rathat-android-malware-ai-steal/ Researchers at Zimperium have uncovered a new Android malware strain, dubbed RatHat, with spyware and backdoor capabilities Thu, 17 Sep 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/rathat-android-malware-ai-steal/ https://www.infosecurity-magazine.com/news/cyber-essentials-has-record-year/ New government figures reveal a 20% annual increase in certifications Thu, 17 Sep 2026 12:15:00 GMT https://www.infosecurity-magazine.com/news/cyber-essentials-has-record-year/ https://www.infosecurity-magazine.com/news/cisco-active-exploitation-critical/ Cisco urged ISE customers to apply a software update, as well as check for signs of exploitation Thu, 17 Sep 2026 11:15:00 GMT https://www.infosecurity-magazine.com/news/cisco-active-exploitation-critical/ https://www.infosecurity-magazine.com/news/ai-agent-carries-out-multistage/ Spanish data protection agency AEPD reveals the country’s first AI-powered data breach Thu, 17 Sep 2026 08:25:00 GMT https://www.infosecurity-magazine.com/news/ai-agent-carries-out-multistage/ https://www.infosecurity-magazine.com/news/woocommerce-wholesale-lead-capture/ Attackers are exploiting a critical flaw in a third-party WooCommerce plugin to upload PHP webshells Wed, 16 Sep 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/woocommerce-wholesale-lead-capture/ https://www.infosecurity-magazine.com/news/cisa-nist-cloud-identity-token/ CISA and NIST issued final guidance to help protect cloud identity tokens and assertions Wed, 16 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/cisa-nist-cloud-identity-token/ https://www.infosecurity-magazine.com/news/cyberattacks-cost-organizations/ Hiscox highlighted the huge financial and operational costs of cyber-attacks, with the average cost of an incident at $52,000 Wed, 16 Sep 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/cyberattacks-cost-organizations/ https://www.infosecurity-magazine.com/news/zeroday-tplink-cameras/ OPSWAT researchers find two zero-days in TP-Link cameras Wed, 16 Sep 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/zeroday-tplink-cameras/ https://www.infosecurity-magazine.com/news/cyber-vendors-mitre-uk-testing/ A group of cyber threat detection providers, including CrowdStrike, Palo Alto Networks and Sophos, have joined SE Labs’ PIVOT program Wed, 16 Sep 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/cyber-vendors-mitre-uk-testing/ https://www.infosecurity-magazine.com/news/ncsc-allies-warn-iranian-chosen/ The UK’s National Cyber Security Centre says Iranian Chosen Brick spyware is designed to snoop on dissidents Wed, 16 Sep 2026 08:25:00 GMT https://www.infosecurity-magazine.com/news/ncsc-allies-warn-iranian-chosen/ https://www.infosecurity-magazine.com/news/fraudulent-hires-credentials/ A new report highlights the vast growth in fraudulent candidates, presenting significant insider threat challenges to organizations Tue, 15 Sep 2026 15:15:00 GMT https://www.infosecurity-magazine.com/news/fraudulent-hires-credentials/ https://www.infosecurity-magazine.com/news/four-of-800-clients-hit-ransomware/ Fenix24 found only four of more than 800 clients came close to stated ransomware recovery targets of 24-48 hours Tue, 15 Sep 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/four-of-800-clients-hit-ransomware/ https://www.infosecurity-magazine.com/news/black-axe-members-extradited-us/ Alleged Black Axe leaders extradited to the US over romance scams, BEC and money laundering claims Tue, 15 Sep 2026 13:45:00 GMT https://www.infosecurity-magazine.com/news/black-axe-members-extradited-us/ https://www.infosecurity-magazine.com/news/ai-top-priority-new-spend-cyber/ IANS finds AI is dominating net-new budgets even as overall funding for the function is flat Tue, 15 Sep 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/ai-top-priority-new-spend-cyber/ https://www.infosecurity-magazine.com/news/microsoft-releases-emergency-patch/ Microsoft has been forced to issue an out-of-band fix for several issues stemming from this month’s Patch Tuesday Tue, 15 Sep 2026 08:40:00 GMT https://www.infosecurity-magazine.com/news/microsoft-releases-emergency-patch/ https://www.infosecurity-magazine.com/news/malicious-twitch-extension-oauth/ Socket has discovered a Twitch browser extension forwarding users' OAuth tokens to a Russian bot service Mon, 14 Sep 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/malicious-twitch-extension-oauth/ https://www.infosecurity-magazine.com/news/human-attacker-machine-speed/ A human attacker exploited a Marimo RCE and reached an SSH bastion in eight seconds Mon, 14 Sep 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/human-attacker-machine-speed/ https://www.infosecurity-magazine.com/news/defense-cyber-spending-attacks/ MarketsandMarkets has projected the cyber warfare market to double by 2031, amid growing demand for defensive and offensive cyber capabilities in the military Mon, 14 Sep 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/defense-cyber-spending-attacks/ https://www.infosecurity-magazine.com/news/revolut-data-breach-fake-government/ An unauthorized party used a legitimate government email domain to fraudulently request Revolut customer data Mon, 14 Sep 2026 11:20:00 GMT https://www.infosecurity-magazine.com/news/revolut-data-breach-fake-government/ https://www.infosecurity-magazine.com/news/hackers-exploit-maximum-severity/ CISA warns that threat actors are exploiting a vulnerability with a CVSS score of 10.0 Mon, 14 Sep 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/hackers-exploit-maximum-severity/ https://www.infosecurity-magazine.com/news/openai-agent-swarm-hacks-rubygems/ Researchers confirm that OpenAI agents uploaded hundreds of malicious packages to RubyGems Mon, 14 Sep 2026 08:50:00 GMT https://www.infosecurity-magazine.com/news/openai-agent-swarm-hacks-rubygems/ https://www.infosecurity-magazine.com/news/hackers-us-business-hours-m365/ KnowBe4 researchers observed a new phishing campaign leveraging Microsoft 365’s Direct Send to send malicious emails Fri, 11 Sep 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/hackers-us-business-hours-m365/ https://www.infosecurity-magazine.com/news/organizations-skip-permissions-ai/ A new Syskit study has shown that only 43% of organizations with AI agents deployed in Microsoft 365 environments completed a permission review before doing so Fri, 11 Sep 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/organizations-skip-permissions-ai/ https://www.infosecurity-magazine.com/news/cisa-updates-insider-threat-guide/ CISA has updated its insider threat guide with new advice on remote work, AI and risk detection Thu, 10 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/cisa-updates-insider-threat-guide/ https://www.infosecurity-magazine.com/news/mantaxotax-android-malware/ MantaxOtax Android malware combines ransomware with extensive spyware capabilities Thu, 10 Sep 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/mantaxotax-android-malware/ https://www.infosecurity-magazine.com/news/fbi-cyber-strategy-disrupting/ The new document appears to be part of a broader shift by the US government towards the proactive disruption of cyber threat actors Thu, 10 Sep 2026 12:15:00 GMT https://www.infosecurity-magazine.com/news/fbi-cyber-strategy-disrupting/ https://www.infosecurity-magazine.com/news/anthropic-another-cybersecurity/ Anthropic has found a fourth case of its model accessing third-party systems without authorization Thu, 10 Sep 2026 08:45:00 GMT https://www.infosecurity-magazine.com/news/anthropic-another-cybersecurity/ https://www.infosecurity-magazine.com/news/ofac-sanctions-chinese-scam/ The US Treasury has placed sanctions on notorious Chinese cybercrime marketplace Xinbi Guarantee Thu, 10 Sep 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/ofac-sanctions-chinese-scam/ https://www.infosecurity-magazine.com/news/wechat-zeroclick-worm-hijack/ The hacking tool, built using a combination of AI models, is effective against Android and iOS devices Wed, 09 Sep 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/wechat-zeroclick-worm-hijack/ https://www.infosecurity-magazine.com/news/gigabud-android-app-cloning-fraud/ Gigabud clones banking apps into a work profile to break the link between malware alerts and fraud Wed, 09 Sep 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/gigabud-android-app-cloning-fraud/ https://www.infosecurity-magazine.com/news/clickfix-browser-cryptocurrency/ ClickFix campaign uses browser-injected JavaScript and Google Sheets to steal cryptocurrency Wed, 09 Sep 2026 13:45:00 GMT https://www.infosecurity-magazine.com/news/clickfix-browser-cryptocurrency/ https://www.infosecurity-magazine.com/news/nhis-number-one-corporate-entry/ SpyCloud claims non-human identities are the most likely route into the enterprise Wed, 09 Sep 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/nhis-number-one-corporate-entry/ https://www.infosecurity-magazine.com/news/microsoft-patch-tuesday-record/ The update contained 119 critical flaws and two zero days, with security teams needing to prioritize updates Wed, 09 Sep 2026 09:40:00 GMT https://www.infosecurity-magazine.com/news/microsoft-patch-tuesday-record/ https://www.infosecurity-magazine.com/news/sap-patches-maximum-severity/ Onapsis urges SAP customers to patch “Overpass” vulnerability, which has a CVSS score of 10.0 Wed, 09 Sep 2026 08:15:00 GMT https://www.infosecurity-magazine.com/news/sap-patches-maximum-severity/ https://www.infosecurity-magazine.com/news/france-new-government-cyber/ After a major cyber-attack targeted France's national tax authority, the Prime Minister called for the establishment of a new dedicated cyber incident response capability Tue, 08 Sep 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/france-new-government-cyber/ https://www.infosecurity-magazine.com/news/grindr-settles-uk-data-privacy/ Grindr settled UK claims over alleged unlawful processing of sensitive user data Tue, 08 Sep 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/grindr-settles-uk-data-privacy/ https://www.infosecurity-magazine.com/news/ai-coding-tools-threat-actors/ Google warned that the rapid integration of AI-assisted coding tools has significantly expanded software supply chain risks Tue, 08 Sep 2026 12:02:00 GMT https://www.infosecurity-magazine.com/news/ai-coding-tools-threat-actors/ https://www.infosecurity-magazine.com/news/thost9-android-rat-packed-loader/ THost9 hides its payload and uses ADB to spread across exposed Android devices and containers Tue, 08 Sep 2026 11:15:00 GMT https://www.infosecurity-magazine.com/news/thost9-android-rat-packed-loader/ https://www.infosecurity-magazine.com/news/bigbear-2-phaas-5000-microsoft/ CloudSEK has uncovered BigBear 2.0, a new phishing-as-a-service operation targeting Microsoft 365 Tue, 08 Sep 2026 09:45:00 GMT https://www.infosecurity-magazine.com/news/bigbear-2-phaas-5000-microsoft/ https://www.infosecurity-magazine.com/news/trezor-supply-chain-breach-impacts/ Crypto wallet-maker Trezor says a data breach at supplier ShipMonk is far worse than originally thought Tue, 08 Sep 2026 09:08:00 GMT https://www.infosecurity-magazine.com/news/trezor-supply-chain-breach-impacts/ https://www.infosecurity-magazine.com/news/ncsc-warns-shadow-ai-security-risks/ NCSC warns unapproved AI tools can expose corporate data and create new security risks Mon, 07 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/ncsc-warns-shadow-ai-security-risks/ https://www.infosecurity-magazine.com/news/nable-hotfix-critical-rce/ The vulnerability, CVE-2026-86218, was allocated a maximum-severity rating by the software provider itself Mon, 07 Sep 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/nable-hotfix-critical-rce/ https://www.infosecurity-magazine.com/news/rhysida-berlin-data-extortion/ The ransomware group’s published dataset reportedly includes Berlin state employee data, as well as highly sensitive emergency plans Mon, 07 Sep 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/rhysida-berlin-data-extortion/ https://www.infosecurity-magazine.com/news/north-korea-lazarus-six-cyber/ Sekoia and Kudelski Security have observed that North Korea's Lazarus umbrella is split into six distinct clusters, focused on espionage, financial theft and sanctions evasion Mon, 07 Sep 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/north-korea-lazarus-six-cyber/ https://www.infosecurity-magazine.com/news/multiple-class-action-lawsuits/ Several victims of a recent breach of driver’s license information have sued the company they believe responsible Mon, 07 Sep 2026 09:10:00 GMT https://www.infosecurity-magazine.com/news/multiple-class-action-lawsuits/ https://www.infosecurity-magazine.com/news/crowdstrike-privilege-escalation/ A security researcher has posted a zero-day exploit in CrowdStrike which could allow hackers to escalate privileges Mon, 07 Sep 2026 08:28:00 GMT https://www.infosecurity-magazine.com/news/crowdstrike-privilege-escalation/ https://www.infosecurity-magazine.com/news/openai-pledges-ai-tools-essential/ OpenAI has committed to subsidizing access to Daybreak, helping defenders deploy its AI models in its existing cybersecurity infrastructure Fri, 04 Sep 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/openai-pledges-ai-tools-essential/ https://www.infosecurity-magazine.com/news/g7-urges-quantum-safe-cyber-rules/ The G7 has published a call to action, urging governments to launch national strategies dedicated to the post-quantum encryption transition Fri, 04 Sep 2026 09:25:00 GMT https://www.infosecurity-magazine.com/news/g7-urges-quantum-safe-cyber-rules/ https://www.infosecurity-magazine.com/news/pegasus-zero-click-exploit/ Pegasus infected a Serbian student activist's iPhone through an iMessage zero-click exploit Thu, 03 Sep 2026 15:25:00 GMT https://www.infosecurity-magazine.com/news/pegasus-zero-click-exploit/ https://www.infosecurity-magazine.com/news/outsider-phishing-kit-survives/ Outsider phishing kit generated 700 new pages after a Google-led disruption Thu, 03 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/outsider-phishing-kit-survives/ https://www.infosecurity-magazine.com/news/crest-first-cohort-ai-pentesting/ CREST’s new AI-enabled penetration testing accreditation welcomes its first 10 providers Thu, 03 Sep 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/crest-first-cohort-ai-pentesting/ https://www.infosecurity-magazine.com/news/us-canada-court-breach-thomson/ Thomson Reuters has disclosed a cyber incident affecting its C-Track court management software, potentially exposing court records in Canada and the US Thu, 03 Sep 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/us-canada-court-breach-thomson/ https://www.infosecurity-magazine.com/news/fbi-probes-breach-153-million/ The FBI is investigating how scans of over 153 million driver’s licenses are being sold on the dark web Thu, 03 Sep 2026 09:33:00 GMT https://www.infosecurity-magazine.com/news/fbi-probes-breach-153-million/ https://www.infosecurity-magazine.com/news/international-operation-disrupts/ US-led action sinkholes machines caught up in Sality botnet Thu, 03 Sep 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/international-operation-disrupts/ https://www.infosecurity-magazine.com/news/russian-man-extradited-malware/ Russian man extradited to US over malware campaign that targeted 80,000 freelance users Wed, 02 Sep 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/russian-man-extradited-malware/ https://www.infosecurity-magazine.com/news/gambling-goblin-brazilian/ Gambling Goblin compromised Brazilian government sites to drive gambling traffic through SEO fraud Wed, 02 Sep 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/gambling-goblin-brazilian/ https://www.infosecurity-magazine.com/news/nutex-patient-data-stolen/ The US healthcare provider confirmed that sensitive patient and employee data, alongside financial and business information, were exfiltrated by a third party Wed, 02 Sep 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/nutex-patient-data-stolen/ https://www.infosecurity-magazine.com/news/hackers-chain-sonicwall-zeroday/ SonicWall has urged customers to patch two new zero-day vulnerabilities being exploited in the wild Wed, 02 Sep 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/hackers-chain-sonicwall-zeroday/ https://www.infosecurity-magazine.com/news/fulcrumsec-manchester-airport/ Threat group FulcrumSec claims MAG breach and leaks 550GB of data online Wed, 02 Sep 2026 08:15:00 GMT https://www.infosecurity-magazine.com/news/fulcrumsec-manchester-airport/ https://www.infosecurity-magazine.com/news/attackers-steal-metr-api-key/ Attackers used a stolen METR API key for three weeks, consuming model credits worth $600,000 Tue, 01 Sep 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/attackers-steal-metr-api-key/ https://www.infosecurity-magazine.com/news/65-percent-enterprises-ai-agents/ EMA survey finds 65% of enterprises have seen AI agents act beyond intended scope Tue, 01 Sep 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/65-percent-enterprises-ai-agents/ https://www.infosecurity-magazine.com/news/white-house-texas-protect-water/ Project Watershed 250 will see water providers in Texas provided with federal and private sector cybersecurity resources amid rising nation-state threats Tue, 01 Sep 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/white-house-texas-protect-water/ https://www.infosecurity-magazine.com/news/financial-stability-board-alarm/ The Financial Stability Board has warned G20 banking leaders about the cyber risks of frontier AI Tue, 01 Sep 2026 09:20:00 GMT https://www.infosecurity-magazine.com/news/financial-stability-board-alarm/ https://www.infosecurity-magazine.com/news/healthcare-mckesson-investigates/ ShinyHunters claims to have stolen 284 million records from McKesson Tue, 01 Sep 2026 08:25:00 GMT https://www.infosecurity-magazine.com/news/healthcare-mckesson-investigates/ https://www.infosecurity-magazine.com/news/fake-voicemail-svg-files-bypass/ A large-scale phishing campaign used fake voicemail SVG attachments to bypass email defenses, targeting 5527 organizations with over 26,000 malicious messages Fri, 28 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/fake-voicemail-svg-files-bypass/ https://www.infosecurity-magazine.com/news/window-ai-attacks-narrowing-tech/ More than 100 companies, including OpenAI, Anthropic, Google and Microsoft, have urged collective action to unlock the power of AI to protect critical public services Fri, 28 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/window-ai-attacks-narrowing-tech/ https://www.infosecurity-magazine.com/news/abuse-cursor-agent-ransomware/ Aurora ransomware operators are abusing SpaceX’s Cursor Agent AI tool to conduct tasks such as reconnaissance and exploitation activities Fri, 28 Aug 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/abuse-cursor-agent-ransomware/ https://www.infosecurity-magazine.com/news/manchester-airports-data-breach/ Customer data linked to bookings and airport Wi-Fi registrations at Manchester, Stansted and East Midlands airports has been accessed by an unauthorized third party Thu, 27 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/manchester-airports-data-breach/ https://www.infosecurity-magazine.com/news/chinese-qtfy-us-infrastructure-fbi/ The FBI advisory set out QTFY’s distributed hacking ecosystem, allowing it to exploit vulnerabilities at scale and obfuscate its activities Thu, 27 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/chinese-qtfy-us-infrastructure-fbi/ https://www.infosecurity-magazine.com/news/cisa-kev-microsoft-citrix/ CISA added six new bugs to its Known Exploited Vulnerabilities catalog on August 26, showing signs of active exploitation in the wild Thu, 27 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/cisa-kev-microsoft-citrix/ https://www.infosecurity-magazine.com/news/boston-scientific-global/ MedTech giant Boston Scientific has revealed IT outages following a cyber incident Thu, 27 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/boston-scientific-global/ https://www.infosecurity-magazine.com/news/openai-hugging-face-warning-shot/ OpenAI reveals that unauthorized message boards were at the heart of the recent Hugging Face breach Thu, 27 Aug 2026 09:15:00 GMT https://www.infosecurity-magazine.com/news/openai-hugging-face-warning-shot/ https://www.infosecurity-magazine.com/news/tortoiseshell-new-backdoor-ssh/ Group-IB uncovered new Tortoiseshell infrastructure, including a backdoor and SSH tunneling tool Wed, 26 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/tortoiseshell-new-backdoor-ssh/ https://www.infosecurity-magazine.com/news/interpol-operation-jackal-iv/ Interpol operation leads to 58 arrests and identifies 263 suspects across 22 countries Wed, 26 Aug 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/interpol-operation-jackal-iv/ https://www.infosecurity-magazine.com/news/four-in-five-ai-tools-no-it/ Reco report reveals growing shadow AI problem and surge in vulnerability disclosures Wed, 26 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/four-in-five-ai-tools-no-it/ https://www.infosecurity-magazine.com/news/cyber-insurance-losses-increase/ Chubb reported that growing privacy litigation has contributed to surging cyber claim costs in the US Wed, 26 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/cyber-insurance-losses-increase/ https://www.infosecurity-magazine.com/news/linux-foundation-trace-standard-ai/ This new open standard offers hardware-attested runtime and compliance evidence for AI agents Wed, 26 Aug 2026 09:10:00 GMT https://www.infosecurity-magazine.com/news/linux-foundation-trace-standard-ai/ https://www.infosecurity-magazine.com/news/ddos-attack-hits-norwegian/ A coordinated DDoS campaign has caused disruption among Norwegian government services Wed, 26 Aug 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/ddos-attack-hits-norwegian/ https://www.infosecurity-magazine.com/news/zerotokens-phishing-real-time/ ZeroTokens gives phishing operators live control of victim sessions targeting 53 financial brands Tue, 25 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/zerotokens-phishing-real-time/ https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/ RecruitTrap campaigns use mobile-optimized phishing pages to target enterprise credentials Tue, 25 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/ https://www.infosecurity-magazine.com/news/australia-exploitation-teamcity/ Australian officials are urging TeamCity customers to patch an actively exploited critical flaw, which follows a similar warning from the US government Tue, 25 Aug 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/australia-exploitation-teamcity/ https://www.infosecurity-magazine.com/news/fake-minecraft-weedhack-malware/ A threat actor keeps spreading the WeedHack malware to Minecraft players despite its original infrastructure taken down in July Tue, 25 Aug 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/fake-minecraft-weedhack-malware/ https://www.infosecurity-magazine.com/news/reliaquest-not-compromised-by/ ReliaQuest has detailed a social engineering attack linked to ShinyHunters, denying reports that the threat actor successfully compromised its systems Tue, 25 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/reliaquest-not-compromised-by/ https://www.infosecurity-magazine.com/news/us-sanctions-mabna-institute/ The US has sanctioned individuals connected to hacking-for-hire group the Mabna Institute Tue, 25 Aug 2026 09:10:00 GMT https://www.infosecurity-magazine.com/news/us-sanctions-mabna-institute/ https://www.infosecurity-magazine.com/news/guidance-verify-quantum-safe/ TCG has released new guidance to help proving that trusted platform modules genuinely meet essential quantum-safe requirements Mon, 24 Aug 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/guidance-verify-quantum-safe/ https://www.infosecurity-magazine.com/news/nist-risks-multi-cloud/ NIST has set out 23 novel challenges that arise in multi-cloud environments and has encouraged the cyber community to find solutions Mon, 24 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/nist-risks-multi-cloud/ https://www.infosecurity-magazine.com/news/fake-codex-download-google-sites/ Fake Codex pages used Google Sites, sponsored search and ClickFix to target Mac users Mon, 24 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/fake-codex-download-google-sites/ https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/ Doubloon Dredger abused Notion and malicious PDFs to harvest Microsoft authentication tokens Mon, 24 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/ https://www.infosecurity-magazine.com/news/cni-iranian-attack-shuts-uk-power/ Experts argue Iranian cyber-attack on UK power plant lays bare frailty of critical national infrastructure Mon, 24 Aug 2026 09:01:00 GMT https://www.infosecurity-magazine.com/news/cni-iranian-attack-shuts-uk-power/ https://www.infosecurity-magazine.com/news/researchers-thousands-eaked-aws/ Truffle Security says it found over 9000 publicly accessible and active AWS key pairs Mon, 24 Aug 2026 08:05:00 GMT https://www.infosecurity-magazine.com/news/researchers-thousands-eaked-aws/ https://www.infosecurity-magazine.com/news/north-korean-rust-supply-chain/ Cybersecurity researchers have linked a malicious backdoor in compromised Rust packages to previous North Korean supply chain attacks Fri, 21 Aug 2026 12:40:00 GMT https://www.infosecurity-magazine.com/news/north-korean-rust-supply-chain/ https://www.infosecurity-magazine.com/news/agent-tesla-malware-evasion/ An Agent Tesla v4 malware campaign used novel emoji-based code obfuscation to evade detection, KnowBe4 has revealed Fri, 21 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/agent-tesla-malware-evasion/ https://www.infosecurity-magazine.com/news/cybersecurity-job-ads-ai-skills/ An analysis by the AI Workforce Consortium found that technical cybersecurity jobs are becoming more strategic due to the influence of AI Fri, 21 Aug 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-job-ads-ai-skills/ https://www.infosecurity-magazine.com/news/ncsc-stronger-controls-agentic-ai/ NCSC urged sandboxing, oversight and tight access controls for autonomous AI agents Thu, 20 Aug 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/ncsc-stronger-controls-agentic-ai/ https://www.infosecurity-magazine.com/news/us-defense-contractors-cmmc-scores/ Defense contractors in the US are doubting their own self-assessment scores under CMMC Phase I, even as those scores hit an all-time high Thu, 20 Aug 2026 12:40:00 GMT https://www.infosecurity-magazine.com/news/us-defense-contractors-cmmc-scores/ https://www.infosecurity-magazine.com/news/ics-ai-attacks-siemens/ A US government advisory warned that attackers are deploying AI-generated exploitation scripts against exposed Siemens S7 Series PLCs Thu, 20 Aug 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/ics-ai-attacks-siemens/ https://www.infosecurity-magazine.com/news/updated-toxicpanda-140-banking/ Zimperium lifts the lid on the ToxicPanda 2.0 Android banking Trojan Thu, 20 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/updated-toxicpanda-140-banking/ https://www.infosecurity-magazine.com/news/def-con-attendees-persistent/ Huntress researcher explains how they were targeted by an elaborate and persistent phishing scam following Def Con Thu, 20 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/def-con-attendees-persistent/ https://www.infosecurity-magazine.com/news/linux-foundations-akrites-go-live/ The Linux Foundation's Akrites initiative will become operational in September, when it will begin accepting AI-powered vulnerability reports for open-source projects Wed, 19 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/linux-foundations-akrites-go-live/ https://www.infosecurity-magazine.com/news/maas-clickfix-errtraffic-cruciferra/ eSentire uncovered a malware campaign combining ClickFix lures with ErrTraffic and Cruciferra Wed, 19 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/maas-clickfix-errtraffic-cruciferra/ https://www.infosecurity-magazine.com/news/grandoreiro-mexico-dll-sideloading/ Grandoreiro is active after its 2024 disruption, with Mexico now accounting for 40% of detections Wed, 19 Aug 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/grandoreiro-mexico-dll-sideloading/ https://www.infosecurity-magazine.com/news/openai-tightens-ai-safeguards/ OpenAI is strengthening safeguards for its most advanced AI models, citing growing risks as frontier systems gain more powerful cyber capabilities Wed, 19 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/openai-tightens-ai-safeguards/ https://www.infosecurity-magazine.com/news/critical-infrastructure-medusa/ The FBI warned that the RaaS operation has significantly enhanced its tactics, techniques and procedures, making it harder for defenders to counter Wed, 19 Aug 2026 10:50:00 GMT https://www.infosecurity-magazine.com/news/critical-infrastructure-medusa/ https://www.infosecurity-magazine.com/news/ico-police-data-governance-facial/ The UK’s privacy watchdog has called on police using facial recognition to follow its recommendations Wed, 19 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/ico-police-data-governance-facial/ https://www.infosecurity-magazine.com/news/uk-fraud-cases-hit-record-high/ Cifas data finds account takeover and identity fraud are driving a surge in fraud cases Wed, 19 Aug 2026 08:45:00 GMT https://www.infosecurity-magazine.com/news/uk-fraud-cases-hit-record-high/ https://www.infosecurity-magazine.com/news/wiz-ai-agent-finds-snowflake/ The security flaw in Snowflake’s GitHub Actions workflow had been missed by a GitHub Advanced Security scan, said a Wiz researcher Tue, 18 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/wiz-ai-agent-finds-snowflake/ https://www.infosecurity-magazine.com/news/enterprise-apps-critical-high/ Enterprise software creation has accelerated as vulnerability levels rise, Sonatype finds Tue, 18 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/enterprise-apps-critical-high/ https://www.infosecurity-magazine.com/news/nasa-ground-control-software-flaw/ Critical AIT-GUI flaws expose spacecraft commands and scripts to unauthenticated attackers Tue, 18 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/nasa-ground-control-software-flaw/ https://www.infosecurity-magazine.com/news/cyber-incident-ut-san-antonio/ UT San Antonio has taken IT systems offline following a cyber incident, disrupting student registration and tuition payments days before term is due to resume Tue, 18 Aug 2026 11:20:00 GMT https://www.infosecurity-magazine.com/news/cyber-incident-ut-san-antonio/ https://www.infosecurity-magazine.com/news/threequarters-ransomware-attacks/ Black Kite finds mid-market is the sweet spot for ransomware as manufacturers are most likely to be hit Tue, 18 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/threequarters-ransomware-attacks/ https://www.infosecurity-magazine.com/news/uk-legal-regulator-raises-ai/ Solicitors Regulation Authority sounds the alarm over AI hallucinations and data leaks Tue, 18 Aug 2026 08:17:00 GMT https://www.infosecurity-magazine.com/news/uk-legal-regulator-raises-ai/ https://www.infosecurity-magazine.com/news/unisoc-modem-flaw-rce-calls/ UNISOC modem flaw enabled kernel-level code execution through video calls Mon, 17 Aug 2026 15:45:00 GMT https://www.infosecurity-magazine.com/news/unisoc-modem-flaw-rce-calls/ https://www.infosecurity-magazine.com/news/wordpress-plugin-flaw-40000-sites/ Critical User Profile Builder flaw let unauthenticated attackers access administrator accounts Mon, 17 Aug 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/wordpress-plugin-flaw-40000-sites/ https://www.infosecurity-magazine.com/news/etsi-proposes-17-cybersecurity/ The European Telecommunications Standards Institute has launched an approval process for standards vendors will have to meet under the Cyber Resilience Act Mon, 17 Aug 2026 11:15:00 GMT https://www.infosecurity-magazine.com/news/etsi-proposes-17-cybersecurity/ https://www.infosecurity-magazine.com/news/safepal-data-breach-tens-thousands/ Nearly 40,000 customers of hardware wallet provider SafePal have been impacted by a data breach Mon, 17 Aug 2026 09:10:00 GMT https://www.infosecurity-magazine.com/news/safepal-data-breach-tens-thousands/ https://www.infosecurity-magazine.com/news/infostealers-17-billion/ Flashpoint data reveals infostealers were responsible for taking 1.7 billion credentials in the first half of 2026 Mon, 17 Aug 2026 07:30:00 GMT https://www.infosecurity-magazine.com/news/infostealers-17-billion/ https://www.infosecurity-magazine.com/news/exfilsquads-13-organizations/ Researchers have verified that ExfilSquad possesses sensitive data stolen from at least 13 victims after the extortion group published leaked datasets via torrents Fri, 14 Aug 2026 14:49:00 GMT https://www.infosecurity-magazine.com/news/exfilsquads-13-organizations/ https://www.infosecurity-magazine.com/news/new-linux-botnet-evooo1bot-victims/ Evooo1Bot is a newly observed botnet based on the Mirai framework but equipped with advanced features, turning edge devices into persistent proxies Fri, 14 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/new-linux-botnet-evooo1bot-victims/ https://www.infosecurity-magazine.com/news/macos-infostealer-spread-clickfix/ AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data Fri, 14 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/macos-infostealer-spread-clickfix/ https://www.infosecurity-magazine.com/news/researchers-link-chinese-apt-hack/ Threat intelligence researchers from Broadcom revealed that a known Chinese APT group may be linked to a lucrative crypto fraud operation Fri, 14 Aug 2026 07:30:00 GMT https://www.infosecurity-magazine.com/news/researchers-link-chinese-apt-hack/ https://www.infosecurity-magazine.com/news/exposed-aws-key-data-charities/ CRM provider Beacon has revealed that a compromised AWS access key was the likely root cause of the breach of 1500 UK charities’ data Thu, 13 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/exposed-aws-key-data-charities/ https://www.infosecurity-magazine.com/news/google-cloud-post-quantum-roadmap/ Google Cloud has set a 2027 deadline to mitigate store-now-decrypt-later risks as part of its post-quantum cryptography roadmap, with wider migration goals extending through 2028 Thu, 13 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/google-cloud-post-quantum-roadmap/ https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/ Attackers exploited a critical-severity vCenter flaw five days after Broadcom disclosed it Thu, 13 Aug 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/ https://www.infosecurity-magazine.com/news/trump-private-offensive-cyber/ The White House has authorized government-directed offensive cyber operations against transnational groups, prompting warnings over escalation and attribution risks Thu, 13 Aug 2026 12:35:00 GMT https://www.infosecurity-magazine.com/news/trump-private-offensive-cyber/ https://www.infosecurity-magazine.com/news/akira-affiliate-crashes-ransomware/ Huntress documents how a ransomware affiliate sabotaged its own attack with an anti-EDR effort Thu, 13 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/akira-affiliate-crashes-ransomware/ https://www.infosecurity-magazine.com/news/ico-reprimands-acro-records-office/ The ICO has issued a formal reprimand to ACRO after patching and security monitoring failures led to a breach Thu, 13 Aug 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/ico-reprimands-acro-records-office/ https://www.infosecurity-magazine.com/news/windrelay-nfc-relay-spynote-rat/ New WindRelay NFC malware paired with SpyNote RAT let a fraudster clone a card mid-call Wed, 12 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/windrelay-nfc-relay-spynote-rat/ https://www.infosecurity-magazine.com/news/lazarus-post-quantum-key-dream-job/ Lazarus malware used post-quantum key exchange to protect delivery of a Windows zero-day exploit Wed, 12 Aug 2026 13:35:00 GMT https://www.infosecurity-magazine.com/news/lazarus-post-quantum-key-dream-job/ https://www.infosecurity-magazine.com/news/gunra-ransomware-fortinet-flaws/ Gunra actors are using stealth to exfiltrate vast volumes of data from Microsoft services, US and Korean agencies have warned Wed, 12 Aug 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/gunra-ransomware-fortinet-flaws/ https://www.infosecurity-magazine.com/news/nist-seeks-public-input-ai-nvd/ The US National Institute for Standards and Technology wants to modernize its National Vulnerability Database to embrace AI-powered vulnerability research Wed, 12 Aug 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/nist-seeks-public-input-ai-nvd/ https://www.infosecurity-magazine.com/news/attack-polish-power-plant-2025-led/ The Polish CERT has released details of another 2025 attack on a combined heat and power plant in the country Wed, 12 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/attack-polish-power-plant-2025-led/ https://www.infosecurity-magazine.com/news/microsoft-fixes-400-flaws-august/ Microsoft has issued another massive batch of security updates with 400 fixed in the August Patch Tuesday Wed, 12 Aug 2026 08:12:00 GMT https://www.infosecurity-magazine.com/news/microsoft-fixes-400-flaws-august/ https://www.infosecurity-magazine.com/news/npm-packages-ethereum-wallet-c2/ Six npm packages queried an Ethereum wallet to locate C2 infrastructure Tue, 11 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/npm-packages-ethereum-wallet-c2/ https://www.infosecurity-magazine.com/news/cursor-security-bug-command/ Cursor fixed a pre-trust code execution path in three days then closed the report as informative Tue, 11 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/cursor-security-bug-command/ https://www.infosecurity-magazine.com/news/suisan-cyber-incident-government/ Police and fire response has been impacted by the attack on Suisan City, while two other local authorities have been hit by cyber incidents in the past week also Tue, 11 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/suisan-cyber-incident-government/ https://www.infosecurity-magazine.com/news/openai-daybreak-blue-red-gpt-cyber/ Daybreak Blue removes some OpenAI-made guardrails while Daybreak Red grants the use of cyber-focused frontier AI models Tue, 11 Aug 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/openai-daybreak-blue-red-gpt-cyber/ https://www.infosecurity-magazine.com/news/logistics-ceva-data-breach/ Supply chain attack and data breach at Ceva Logistics appears to have a large blast radius Tue, 11 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/logistics-ceva-data-breach/ https://www.infosecurity-magazine.com/news/openai-pauses-development-astra/ OpenAI is tightening restrictions on testing of its upcoming Astra model due to security concerns Tue, 11 Aug 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/openai-pauses-development-astra/ https://www.infosecurity-magazine.com/news/half-uk-manufacturers-cyber/ Make UK reveals major cyber resilience gaps as 30% of UK manufacturers report recent cyber incidents Tue, 11 Aug 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/half-uk-manufacturers-cyber/ https://www.infosecurity-magazine.com/news/rovoblast-atlassian-rovo-url/ Atlassian fixed a flaw letting one crafted link make its Rovo AI assistant exfiltrate company data Mon, 10 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/rovoblast-atlassian-rovo-url/ https://www.infosecurity-magazine.com/news/bdthemes-wordpress-poisoned-api/ Poisoned JSON feed let attackers backdoor WordPress sites without changing any plugin files Mon, 10 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/bdthemes-wordpress-poisoned-api/ https://www.infosecurity-magazine.com/news/ghostjacking-ai-gents-access/ Tenet reported that half of Fortune 500 companies are vulnerable to the Ghostjacking technique, which involves tricking AI agents with fake reports Mon, 10 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/ghostjacking-ai-gents-access/ https://www.infosecurity-magazine.com/news/gobased-macos-malware-crypto-and/ A macOS malware variant has been detected stealing crypto, passwords and more Mon, 10 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/gobased-macos-malware-crypto-and/ https://www.infosecurity-magazine.com/news/us-sanctions-iranian-6bn-crypto/ TRM Labs explains that sanctioned Iranian firm Shelbit was a fake crypto exchange Mon, 10 Aug 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/us-sanctions-iranian-6bn-crypto/ https://www.infosecurity-magazine.com/news/healthcare-victim-charities-beacon/ Beacon has informed around 1500 customer charities that its CRM databases were accessed and likely exfiltrated by an unauthorized actor Fri, 07 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/healthcare-victim-charities-beacon/ https://www.infosecurity-magazine.com/news/redact-extortion-group-blackfile/ BlackFile has rebranded as Redact after an alleged affiliate hijack, with Google linking the group to ongoing vishing and extortion campaigns Fri, 07 Aug 2026 09:40:00 GMT https://www.infosecurity-magazine.com/news/redact-extortion-group-blackfile/ https://www.infosecurity-magazine.com/news/ransomware-surges-july-q2-lull/ Finance, technology and healthcare sectors were particularly heavily targeted in July, according to Comparitech Fri, 07 Aug 2026 08:20:00 GMT https://www.infosecurity-magazine.com/news/ransomware-surges-july-q2-lull/ https://www.infosecurity-magazine.com/news/khunt-toolkit-oracle-database-sql/ Attackers used SQL injection to compile a post-exploitation toolkit inside an Oracle database Thu, 06 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/khunt-toolkit-oracle-database-sql/ https://www.infosecurity-magazine.com/news/teampcp-shadowray-ta-natalstatus/ Oligo Security has linked TeamPCP to ShadowRay 2.0 and to cryptojacking infrastructure dating back to 2020 Thu, 06 Aug 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/teampcp-shadowray-ta-natalstatus/ https://www.infosecurity-magazine.com/news/meta-ai-exploit-incident/ One of Meta’s AI models exploited a third-party security flaw during an evaluation, the latest in a series of similar incidents involving advanced AI systems Thu, 06 Aug 2026 13:40:00 GMT https://www.infosecurity-magazine.com/news/meta-ai-exploit-incident/ https://www.infosecurity-magazine.com/news/violent-physical-crypto-thefts/ So-called “wrench attacks” have resulted in $30m in losses so far in 2026, says Chainalysis Thu, 06 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/violent-physical-crypto-thefts/ https://www.infosecurity-magazine.com/news/canadian-hacker-guilty-snowflake/ A Canadian hacker has admitted involvement in the widespread compromise of 165 Snowflake customer accounts used to steal data and extort victims Thu, 06 Aug 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/canadian-hacker-guilty-snowflake/ https://www.infosecurity-magazine.com/news/safe-initiative-agentic-threat/ The Open Secure AI Alliance has announced plans for the Shared AI Findings Exchange (SAFE) Thu, 06 Aug 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/safe-initiative-agentic-threat/ https://www.infosecurity-magazine.com/news/open-vsx-evil-twin-extensions-git/ 77 counterfeit Open VSX extensions beaconed to one domain, 19 harvesting git and CI identity Wed, 05 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/open-vsx-evil-twin-extensions-git/ https://www.infosecurity-magazine.com/news/paperclip-ai-vulnerabilities-rce/ 3 Paperclip flaws exposed data & allowed unauthenticated command execution in two deployment modes Wed, 05 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/paperclip-ai-vulnerabilities-rce/ https://www.infosecurity-magazine.com/news/prompt-injection-llm-risk/ Prompt injection remains the most dangerous security threat to LLMs, according to OWASP’s latest Top 10 LLM Applications list Wed, 05 Aug 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/prompt-injection-llm-risk/ https://www.infosecurity-magazine.com/news/chaindrop-worm-400-npm-two-billion/ A new npm worm has compromised packages with over two billion monthly installs Wed, 05 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/chaindrop-worm-400-npm-two-billion/ https://www.infosecurity-magazine.com/news/frontier-models-unsanctioned/ Anthropic and OpenAI models attacked “real people and organizations” during AI Security Institute tests Wed, 05 Aug 2026 08:45:00 GMT https://www.infosecurity-magazine.com/news/frontier-models-unsanctioned/ https://www.infosecurity-magazine.com/news/fake-bank-of-america-phishing-scam/ Cybercriminals are using a fake Bank of America phishing campaign to trick users into downloading a malicious script that installs ScreenConnect, enabling remote access and persistence on compromised systems Wed, 05 Aug 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/fake-bank-of-america-phishing-scam/ https://www.infosecurity-magazine.com/news/whatsapp-voting-scam-linked/ WhatsApp scam abused the Linked devices feature to hijack accounts without stealing any passwords Tue, 04 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/whatsapp-voting-scam-linked/ https://www.infosecurity-magazine.com/news/talos-attackers-split-tasks-evade/ Talos read attacker prompt logs and found guardrails fell to task splitting and ownership claims Tue, 04 Aug 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/talos-attackers-split-tasks-evade/ https://www.infosecurity-magazine.com/news/cloud-saas-targets-attackers/ Cloud and SaaS are now the preferred operating environments for threat actors, amid a continued shift to identity attacks Tue, 04 Aug 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/cloud-saas-targets-attackers/ https://www.infosecurity-magazine.com/news/ai-accounts-over-half-cybercrime/ Interpol claims AI is driving a surge in cybercrime in Africa, with related losses doubling Tue, 04 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/ai-accounts-over-half-cybercrime/ https://www.infosecurity-magazine.com/news/uks-police-national-legal-database/ The UK’s Police National Legal Database and Ask the Police service have been breached Tue, 04 Aug 2026 08:40:00 GMT https://www.infosecurity-magazine.com/news/uks-police-national-legal-database/ https://www.infosecurity-magazine.com/news/chinalinked-threat-actors/ Chinese actors exploited the critical React2Shell exploit inside a day, while 88% of exploited vulnerabilities in H1 2026 were compromised within 48 hours of disclosure Mon, 03 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/chinalinked-threat-actors/