https://www.infosecurity-magazine.com/news/ Copyright © 2026 Reed Exhibitions Ltd. All Rights Reserved. https://www.infosecurity-magazine.com/news/fake-voicemail-svg-files-bypass/ A large-scale phishing campaign used fake voicemail SVG attachments to bypass email defenses, targeting 5527 organizations with over 26,000 malicious messages Fri, 28 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/fake-voicemail-svg-files-bypass/ https://www.infosecurity-magazine.com/news/window-ai-attacks-narrowing-tech/ More than 100 companies, including OpenAI, Anthropic, Google and Microsoft, have urged collective action to unlock the power of AI to protect critical public services Fri, 28 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/window-ai-attacks-narrowing-tech/ https://www.infosecurity-magazine.com/news/abuse-cursor-agent-ransomware/ Aurora ransomware operators are abusing SpaceX’s Cursor Agent AI tool to conduct tasks such as reconnaissance and exploitation activities Fri, 28 Aug 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/abuse-cursor-agent-ransomware/ https://www.infosecurity-magazine.com/news/manchester-airports-data-breach/ Customer data linked to bookings and airport Wi-Fi registrations at Manchester, Stansted and East Midlands airports has been accessed by an unauthorized third party Thu, 27 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/manchester-airports-data-breach/ https://www.infosecurity-magazine.com/news/chinese-qtfy-us-infrastructure-fbi/ The FBI advisory set out QTFY’s distributed hacking ecosystem, allowing it to exploit vulnerabilities at scale and obfuscate its activities Thu, 27 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/chinese-qtfy-us-infrastructure-fbi/ https://www.infosecurity-magazine.com/news/cisa-kev-microsoft-citrix/ CISA added six new bugs to its Known Exploited Vulnerabilities catalog on August 26, showing signs of active exploitation in the wild Thu, 27 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/cisa-kev-microsoft-citrix/ https://www.infosecurity-magazine.com/news/boston-scientific-global/ MedTech giant Boston Scientific has revealed IT outages following a cyber incident Thu, 27 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/boston-scientific-global/ https://www.infosecurity-magazine.com/news/openai-hugging-face-warning-shot/ OpenAI reveals that unauthorized message boards were at the heart of the recent Hugging Face breach Thu, 27 Aug 2026 09:15:00 GMT https://www.infosecurity-magazine.com/news/openai-hugging-face-warning-shot/ https://www.infosecurity-magazine.com/news/tortoiseshell-new-backdoor-ssh/ Group-IB uncovered new Tortoiseshell infrastructure, including a backdoor and SSH tunneling tool Wed, 26 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/tortoiseshell-new-backdoor-ssh/ https://www.infosecurity-magazine.com/news/interpol-operation-jackal-iv/ Interpol operation leads to 58 arrests and identifies 263 suspects across 22 countries Wed, 26 Aug 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/interpol-operation-jackal-iv/ https://www.infosecurity-magazine.com/news/four-in-five-ai-tools-no-it/ Reco report reveals growing shadow AI problem and surge in vulnerability disclosures Wed, 26 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/four-in-five-ai-tools-no-it/ https://www.infosecurity-magazine.com/news/cyber-insurance-losses-increase/ Chubb reported that growing privacy litigation has contributed to surging cyber claim costs in the US Wed, 26 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/cyber-insurance-losses-increase/ https://www.infosecurity-magazine.com/news/linux-foundation-trace-standard-ai/ This new open standard offers hardware-attested runtime and compliance evidence for AI agents Wed, 26 Aug 2026 09:10:00 GMT https://www.infosecurity-magazine.com/news/linux-foundation-trace-standard-ai/ https://www.infosecurity-magazine.com/news/ddos-attack-hits-norwegian/ A coordinated DDoS campaign has caused disruption among Norwegian government services Wed, 26 Aug 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/ddos-attack-hits-norwegian/ https://www.infosecurity-magazine.com/news/zerotokens-phishing-real-time/ ZeroTokens gives phishing operators live control of victim sessions targeting 53 financial brands Tue, 25 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/zerotokens-phishing-real-time/ https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/ RecruitTrap campaigns use mobile-optimized phishing pages to target enterprise credentials Tue, 25 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/ https://www.infosecurity-magazine.com/news/australia-exploitation-teamcity/ Australian officials are urging TeamCity customers to patch an actively exploited critical flaw, which follows a similar warning from the US government Tue, 25 Aug 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/australia-exploitation-teamcity/ https://www.infosecurity-magazine.com/news/fake-minecraft-weedhack-malware/ A threat actor keeps spreading the WeedHack malware to Minecraft players despite its original infrastructure taken down in July Tue, 25 Aug 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/fake-minecraft-weedhack-malware/ https://www.infosecurity-magazine.com/news/reliaquest-not-compromised-by/ ReliaQuest has detailed a social engineering attack linked to ShinyHunters, denying reports that the threat actor successfully compromised its systems Tue, 25 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/reliaquest-not-compromised-by/ https://www.infosecurity-magazine.com/news/us-sanctions-mabna-institute/ The US has sanctioned individuals connected to hacking-for-hire group the Mabna Institute Tue, 25 Aug 2026 09:10:00 GMT https://www.infosecurity-magazine.com/news/us-sanctions-mabna-institute/ https://www.infosecurity-magazine.com/news/guidance-verify-quantum-safe/ TCG has released new guidance to help proving that trusted platform modules genuinely meet essential quantum-safe requirements Mon, 24 Aug 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/guidance-verify-quantum-safe/ https://www.infosecurity-magazine.com/news/nist-risks-multi-cloud/ NIST has set out 23 novel challenges that arise in multi-cloud environments and has encouraged the cyber community to find solutions Mon, 24 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/nist-risks-multi-cloud/ https://www.infosecurity-magazine.com/news/fake-codex-download-google-sites/ Fake Codex pages used Google Sites, sponsored search and ClickFix to target Mac users Mon, 24 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/fake-codex-download-google-sites/ https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/ Doubloon Dredger abused Notion and malicious PDFs to harvest Microsoft authentication tokens Mon, 24 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/ https://www.infosecurity-magazine.com/news/cni-iranian-attack-shuts-uk-power/ Experts argue Iranian cyber-attack on UK power plant lays bare frailty of critical national infrastructure Mon, 24 Aug 2026 09:01:00 GMT https://www.infosecurity-magazine.com/news/cni-iranian-attack-shuts-uk-power/ https://www.infosecurity-magazine.com/news/researchers-thousands-eaked-aws/ Truffle Security says it found over 9000 publicly accessible and active AWS key pairs Mon, 24 Aug 2026 08:05:00 GMT https://www.infosecurity-magazine.com/news/researchers-thousands-eaked-aws/ https://www.infosecurity-magazine.com/news/north-korean-rust-supply-chain/ Cybersecurity researchers have linked a malicious backdoor in compromised Rust packages to previous North Korean supply chain attacks Fri, 21 Aug 2026 12:40:00 GMT https://www.infosecurity-magazine.com/news/north-korean-rust-supply-chain/ https://www.infosecurity-magazine.com/news/agent-tesla-malware-evasion/ An Agent Tesla v4 malware campaign used novel emoji-based code obfuscation to evade detection, KnowBe4 has revealed Fri, 21 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/agent-tesla-malware-evasion/ https://www.infosecurity-magazine.com/news/cybersecurity-job-ads-ai-skills/ An analysis by the AI Workforce Consortium found that technical cybersecurity jobs are becoming more strategic due to the influence of AI Fri, 21 Aug 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-job-ads-ai-skills/ https://www.infosecurity-magazine.com/news/ncsc-stronger-controls-agentic-ai/ NCSC urged sandboxing, oversight and tight access controls for autonomous AI agents Thu, 20 Aug 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/ncsc-stronger-controls-agentic-ai/ https://www.infosecurity-magazine.com/news/us-defense-contractors-cmmc-scores/ Defense contractors in the US are doubting their own self-assessment scores under CMMC Phase I, even as those scores hit an all-time high Thu, 20 Aug 2026 12:40:00 GMT https://www.infosecurity-magazine.com/news/us-defense-contractors-cmmc-scores/ https://www.infosecurity-magazine.com/news/ics-ai-attacks-siemens/ A US government advisory warned that attackers are deploying AI-generated exploitation scripts against exposed Siemens S7 Series PLCs Thu, 20 Aug 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/ics-ai-attacks-siemens/ https://www.infosecurity-magazine.com/news/updated-toxicpanda-140-banking/ Zimperium lifts the lid on the ToxicPanda 2.0 Android banking Trojan Thu, 20 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/updated-toxicpanda-140-banking/ https://www.infosecurity-magazine.com/news/def-con-attendees-persistent/ Huntress researcher explains how they were targeted by an elaborate and persistent phishing scam following Def Con Thu, 20 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/def-con-attendees-persistent/ https://www.infosecurity-magazine.com/news/linux-foundations-akrites-go-live/ The Linux Foundation's Akrites initiative will become operational in September, when it will begin accepting AI-powered vulnerability reports for open-source projects Wed, 19 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/linux-foundations-akrites-go-live/ https://www.infosecurity-magazine.com/news/maas-clickfix-errtraffic-cruciferra/ eSentire uncovered a malware campaign combining ClickFix lures with ErrTraffic and Cruciferra Wed, 19 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/maas-clickfix-errtraffic-cruciferra/ https://www.infosecurity-magazine.com/news/grandoreiro-mexico-dll-sideloading/ Grandoreiro is active after its 2024 disruption, with Mexico now accounting for 40% of detections Wed, 19 Aug 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/grandoreiro-mexico-dll-sideloading/ https://www.infosecurity-magazine.com/news/openai-tightens-ai-safeguards/ OpenAI is strengthening safeguards for its most advanced AI models, citing growing risks as frontier systems gain more powerful cyber capabilities Wed, 19 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/openai-tightens-ai-safeguards/ https://www.infosecurity-magazine.com/news/critical-infrastructure-medusa/ The FBI warned that the RaaS operation has significantly enhanced its tactics, techniques and procedures, making it harder for defenders to counter Wed, 19 Aug 2026 10:50:00 GMT https://www.infosecurity-magazine.com/news/critical-infrastructure-medusa/ https://www.infosecurity-magazine.com/news/ico-police-data-governance-facial/ The UK’s privacy watchdog has called on police using facial recognition to follow its recommendations Wed, 19 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/ico-police-data-governance-facial/ https://www.infosecurity-magazine.com/news/uk-fraud-cases-hit-record-high/ Cifas data finds account takeover and identity fraud are driving a surge in fraud cases Wed, 19 Aug 2026 08:45:00 GMT https://www.infosecurity-magazine.com/news/uk-fraud-cases-hit-record-high/ https://www.infosecurity-magazine.com/news/wiz-ai-agent-finds-snowflake/ The security flaw in Snowflake’s GitHub Actions workflow had been missed by a GitHub Advanced Security scan, said a Wiz researcher Tue, 18 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/wiz-ai-agent-finds-snowflake/ https://www.infosecurity-magazine.com/news/enterprise-apps-critical-high/ Enterprise software creation has accelerated as vulnerability levels rise, Sonatype finds Tue, 18 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/enterprise-apps-critical-high/ https://www.infosecurity-magazine.com/news/nasa-ground-control-software-flaw/ Critical AIT-GUI flaws expose spacecraft commands and scripts to unauthenticated attackers Tue, 18 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/nasa-ground-control-software-flaw/ https://www.infosecurity-magazine.com/news/cyber-incident-ut-san-antonio/ UT San Antonio has taken IT systems offline following a cyber incident, disrupting student registration and tuition payments days before term is due to resume Tue, 18 Aug 2026 11:20:00 GMT https://www.infosecurity-magazine.com/news/cyber-incident-ut-san-antonio/ https://www.infosecurity-magazine.com/news/threequarters-ransomware-attacks/ Black Kite finds mid-market is the sweet spot for ransomware as manufacturers are most likely to be hit Tue, 18 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/threequarters-ransomware-attacks/ https://www.infosecurity-magazine.com/news/uk-legal-regulator-raises-ai/ Solicitors Regulation Authority sounds the alarm over AI hallucinations and data leaks Tue, 18 Aug 2026 08:17:00 GMT https://www.infosecurity-magazine.com/news/uk-legal-regulator-raises-ai/ https://www.infosecurity-magazine.com/news/unisoc-modem-flaw-rce-calls/ UNISOC modem flaw enabled kernel-level code execution through video calls Mon, 17 Aug 2026 15:45:00 GMT https://www.infosecurity-magazine.com/news/unisoc-modem-flaw-rce-calls/ https://www.infosecurity-magazine.com/news/wordpress-plugin-flaw-40000-sites/ Critical User Profile Builder flaw let unauthenticated attackers access administrator accounts Mon, 17 Aug 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/wordpress-plugin-flaw-40000-sites/ https://www.infosecurity-magazine.com/news/etsi-proposes-17-cybersecurity/ The European Telecommunications Standards Institute has launched an approval process for standards vendors will have to meet under the Cyber Resilience Act Mon, 17 Aug 2026 11:15:00 GMT https://www.infosecurity-magazine.com/news/etsi-proposes-17-cybersecurity/ https://www.infosecurity-magazine.com/news/safepal-data-breach-tens-thousands/ Nearly 40,000 customers of hardware wallet provider SafePal have been impacted by a data breach Mon, 17 Aug 2026 09:10:00 GMT https://www.infosecurity-magazine.com/news/safepal-data-breach-tens-thousands/ https://www.infosecurity-magazine.com/news/infostealers-17-billion/ Flashpoint data reveals infostealers were responsible for taking 1.7 billion credentials in the first half of 2026 Mon, 17 Aug 2026 07:30:00 GMT https://www.infosecurity-magazine.com/news/infostealers-17-billion/ https://www.infosecurity-magazine.com/news/exfilsquads-13-organizations/ Researchers have verified that ExfilSquad possesses sensitive data stolen from at least 13 victims after the extortion group published leaked datasets via torrents Fri, 14 Aug 2026 14:49:00 GMT https://www.infosecurity-magazine.com/news/exfilsquads-13-organizations/ https://www.infosecurity-magazine.com/news/new-linux-botnet-evooo1bot-victims/ Evooo1Bot is a newly observed botnet based on the Mirai framework but equipped with advanced features, turning edge devices into persistent proxies Fri, 14 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/new-linux-botnet-evooo1bot-victims/ https://www.infosecurity-magazine.com/news/macos-infostealer-spread-clickfix/ AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data Fri, 14 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/macos-infostealer-spread-clickfix/ https://www.infosecurity-magazine.com/news/researchers-link-chinese-apt-hack/ Threat intelligence researchers from Broadcom revealed that a known Chinese APT group may be linked to a lucrative crypto fraud operation Fri, 14 Aug 2026 07:30:00 GMT https://www.infosecurity-magazine.com/news/researchers-link-chinese-apt-hack/ https://www.infosecurity-magazine.com/news/exposed-aws-key-data-charities/ CRM provider Beacon has revealed that a compromised AWS access key was the likely root cause of the breach of 1500 UK charities’ data Thu, 13 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/exposed-aws-key-data-charities/ https://www.infosecurity-magazine.com/news/google-cloud-post-quantum-roadmap/ Google Cloud has set a 2027 deadline to mitigate store-now-decrypt-later risks as part of its post-quantum cryptography roadmap, with wider migration goals extending through 2028 Thu, 13 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/google-cloud-post-quantum-roadmap/ https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/ Attackers exploited a critical-severity vCenter flaw five days after Broadcom disclosed it Thu, 13 Aug 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/ https://www.infosecurity-magazine.com/news/trump-private-offensive-cyber/ The White House has authorized government-directed offensive cyber operations against transnational groups, prompting warnings over escalation and attribution risks Thu, 13 Aug 2026 12:35:00 GMT https://www.infosecurity-magazine.com/news/trump-private-offensive-cyber/ https://www.infosecurity-magazine.com/news/akira-affiliate-crashes-ransomware/ Huntress documents how a ransomware affiliate sabotaged its own attack with an anti-EDR effort Thu, 13 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/akira-affiliate-crashes-ransomware/ https://www.infosecurity-magazine.com/news/ico-reprimands-acro-records-office/ The ICO has issued a formal reprimand to ACRO after patching and security monitoring failures led to a breach Thu, 13 Aug 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/ico-reprimands-acro-records-office/ https://www.infosecurity-magazine.com/news/windrelay-nfc-relay-spynote-rat/ New WindRelay NFC malware paired with SpyNote RAT let a fraudster clone a card mid-call Wed, 12 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/windrelay-nfc-relay-spynote-rat/ https://www.infosecurity-magazine.com/news/lazarus-post-quantum-key-dream-job/ Lazarus malware used post-quantum key exchange to protect delivery of a Windows zero-day exploit Wed, 12 Aug 2026 13:35:00 GMT https://www.infosecurity-magazine.com/news/lazarus-post-quantum-key-dream-job/ https://www.infosecurity-magazine.com/news/gunra-ransomware-fortinet-flaws/ Gunra actors are using stealth to exfiltrate vast volumes of data from Microsoft services, US and Korean agencies have warned Wed, 12 Aug 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/gunra-ransomware-fortinet-flaws/ https://www.infosecurity-magazine.com/news/nist-seeks-public-input-ai-nvd/ The US National Institute for Standards and Technology wants to modernize its National Vulnerability Database to embrace AI-powered vulnerability research Wed, 12 Aug 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/nist-seeks-public-input-ai-nvd/ https://www.infosecurity-magazine.com/news/attack-polish-power-plant-2025-led/ The Polish CERT has released details of another 2025 attack on a combined heat and power plant in the country Wed, 12 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/attack-polish-power-plant-2025-led/ https://www.infosecurity-magazine.com/news/microsoft-fixes-400-flaws-august/ Microsoft has issued another massive batch of security updates with 400 fixed in the August Patch Tuesday Wed, 12 Aug 2026 08:12:00 GMT https://www.infosecurity-magazine.com/news/microsoft-fixes-400-flaws-august/ https://www.infosecurity-magazine.com/news/npm-packages-ethereum-wallet-c2/ Six npm packages queried an Ethereum wallet to locate C2 infrastructure Tue, 11 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/npm-packages-ethereum-wallet-c2/ https://www.infosecurity-magazine.com/news/cursor-security-bug-command/ Cursor fixed a pre-trust code execution path in three days then closed the report as informative Tue, 11 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/cursor-security-bug-command/ https://www.infosecurity-magazine.com/news/suisan-cyber-incident-government/ Police and fire response has been impacted by the attack on Suisan City, while two other local authorities have been hit by cyber incidents in the past week also Tue, 11 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/suisan-cyber-incident-government/ https://www.infosecurity-magazine.com/news/openai-daybreak-blue-red-gpt-cyber/ Daybreak Blue removes some OpenAI-made guardrails while Daybreak Red grants the use of cyber-focused frontier AI models Tue, 11 Aug 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/openai-daybreak-blue-red-gpt-cyber/ https://www.infosecurity-magazine.com/news/logistics-ceva-data-breach/ Supply chain attack and data breach at Ceva Logistics appears to have a large blast radius Tue, 11 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/logistics-ceva-data-breach/ https://www.infosecurity-magazine.com/news/openai-pauses-development-astra/ OpenAI is tightening restrictions on testing of its upcoming Astra model due to security concerns Tue, 11 Aug 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/openai-pauses-development-astra/ https://www.infosecurity-magazine.com/news/half-uk-manufacturers-cyber/ Make UK reveals major cyber resilience gaps as 30% of UK manufacturers report recent cyber incidents Tue, 11 Aug 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/half-uk-manufacturers-cyber/ https://www.infosecurity-magazine.com/news/rovoblast-atlassian-rovo-url/ Atlassian fixed a flaw letting one crafted link make its Rovo AI assistant exfiltrate company data Mon, 10 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/rovoblast-atlassian-rovo-url/ https://www.infosecurity-magazine.com/news/bdthemes-wordpress-poisoned-api/ Poisoned JSON feed let attackers backdoor WordPress sites without changing any plugin files Mon, 10 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/bdthemes-wordpress-poisoned-api/ https://www.infosecurity-magazine.com/news/ghostjacking-ai-gents-access/ Tenet reported that half of Fortune 500 companies are vulnerable to the Ghostjacking technique, which involves tricking AI agents with fake reports Mon, 10 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/ghostjacking-ai-gents-access/ https://www.infosecurity-magazine.com/news/gobased-macos-malware-crypto-and/ A macOS malware variant has been detected stealing crypto, passwords and more Mon, 10 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/gobased-macos-malware-crypto-and/ https://www.infosecurity-magazine.com/news/us-sanctions-iranian-6bn-crypto/ TRM Labs explains that sanctioned Iranian firm Shelbit was a fake crypto exchange Mon, 10 Aug 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/us-sanctions-iranian-6bn-crypto/ https://www.infosecurity-magazine.com/news/healthcare-victim-charities-beacon/ Beacon has informed around 1500 customer charities that its CRM databases were accessed and likely exfiltrated by an unauthorized actor Fri, 07 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/healthcare-victim-charities-beacon/ https://www.infosecurity-magazine.com/news/redact-extortion-group-blackfile/ BlackFile has rebranded as Redact after an alleged affiliate hijack, with Google linking the group to ongoing vishing and extortion campaigns Fri, 07 Aug 2026 09:40:00 GMT https://www.infosecurity-magazine.com/news/redact-extortion-group-blackfile/ https://www.infosecurity-magazine.com/news/ransomware-surges-july-q2-lull/ Finance, technology and healthcare sectors were particularly heavily targeted in July, according to Comparitech Fri, 07 Aug 2026 08:20:00 GMT https://www.infosecurity-magazine.com/news/ransomware-surges-july-q2-lull/ https://www.infosecurity-magazine.com/news/khunt-toolkit-oracle-database-sql/ Attackers used SQL injection to compile a post-exploitation toolkit inside an Oracle database Thu, 06 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/khunt-toolkit-oracle-database-sql/ https://www.infosecurity-magazine.com/news/teampcp-shadowray-ta-natalstatus/ Oligo Security has linked TeamPCP to ShadowRay 2.0 and to cryptojacking infrastructure dating back to 2020 Thu, 06 Aug 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/teampcp-shadowray-ta-natalstatus/ https://www.infosecurity-magazine.com/news/meta-ai-exploit-incident/ One of Meta’s AI models exploited a third-party security flaw during an evaluation, the latest in a series of similar incidents involving advanced AI systems Thu, 06 Aug 2026 13:40:00 GMT https://www.infosecurity-magazine.com/news/meta-ai-exploit-incident/ https://www.infosecurity-magazine.com/news/violent-physical-crypto-thefts/ So-called “wrench attacks” have resulted in $30m in losses so far in 2026, says Chainalysis Thu, 06 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/violent-physical-crypto-thefts/ https://www.infosecurity-magazine.com/news/canadian-hacker-guilty-snowflake/ A Canadian hacker has admitted involvement in the widespread compromise of 165 Snowflake customer accounts used to steal data and extort victims Thu, 06 Aug 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/canadian-hacker-guilty-snowflake/ https://www.infosecurity-magazine.com/news/safe-initiative-agentic-threat/ The Open Secure AI Alliance has announced plans for the Shared AI Findings Exchange (SAFE) Thu, 06 Aug 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/safe-initiative-agentic-threat/ https://www.infosecurity-magazine.com/news/open-vsx-evil-twin-extensions-git/ 77 counterfeit Open VSX extensions beaconed to one domain, 19 harvesting git and CI identity Wed, 05 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/open-vsx-evil-twin-extensions-git/ https://www.infosecurity-magazine.com/news/paperclip-ai-vulnerabilities-rce/ 3 Paperclip flaws exposed data & allowed unauthenticated command execution in two deployment modes Wed, 05 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/paperclip-ai-vulnerabilities-rce/ https://www.infosecurity-magazine.com/news/prompt-injection-llm-risk/ Prompt injection remains the most dangerous security threat to LLMs, according to OWASP’s latest Top 10 LLM Applications list Wed, 05 Aug 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/prompt-injection-llm-risk/ https://www.infosecurity-magazine.com/news/chaindrop-worm-400-npm-two-billion/ A new npm worm has compromised packages with over two billion monthly installs Wed, 05 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/chaindrop-worm-400-npm-two-billion/ https://www.infosecurity-magazine.com/news/frontier-models-unsanctioned/ Anthropic and OpenAI models attacked “real people and organizations” during AI Security Institute tests Wed, 05 Aug 2026 08:45:00 GMT https://www.infosecurity-magazine.com/news/frontier-models-unsanctioned/ https://www.infosecurity-magazine.com/news/fake-bank-of-america-phishing-scam/ Cybercriminals are using a fake Bank of America phishing campaign to trick users into downloading a malicious script that installs ScreenConnect, enabling remote access and persistence on compromised systems Wed, 05 Aug 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/fake-bank-of-america-phishing-scam/ https://www.infosecurity-magazine.com/news/whatsapp-voting-scam-linked/ WhatsApp scam abused the Linked devices feature to hijack accounts without stealing any passwords Tue, 04 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/whatsapp-voting-scam-linked/ https://www.infosecurity-magazine.com/news/talos-attackers-split-tasks-evade/ Talos read attacker prompt logs and found guardrails fell to task splitting and ownership claims Tue, 04 Aug 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/talos-attackers-split-tasks-evade/ https://www.infosecurity-magazine.com/news/cloud-saas-targets-attackers/ Cloud and SaaS are now the preferred operating environments for threat actors, amid a continued shift to identity attacks Tue, 04 Aug 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/cloud-saas-targets-attackers/ https://www.infosecurity-magazine.com/news/ai-accounts-over-half-cybercrime/ Interpol claims AI is driving a surge in cybercrime in Africa, with related losses doubling Tue, 04 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/ai-accounts-over-half-cybercrime/ https://www.infosecurity-magazine.com/news/uks-police-national-legal-database/ The UK’s Police National Legal Database and Ask the Police service have been breached Tue, 04 Aug 2026 08:40:00 GMT https://www.infosecurity-magazine.com/news/uks-police-national-legal-database/ https://www.infosecurity-magazine.com/news/chinalinked-threat-actors/ Chinese actors exploited the critical React2Shell exploit inside a day, while 88% of exploited vulnerabilities in H1 2026 were compromised within 48 hours of disclosure Mon, 03 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/chinalinked-threat-actors/ https://www.infosecurity-magazine.com/news/captivecrunch-midnight-blizzard/ Russian actor Storm-2945 hijacked hotel captive portals to push fake updates and steal tokens Mon, 03 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/captivecrunch-midnight-blizzard/ https://www.infosecurity-magazine.com/news/hollowframe-fake-python-dll/ New HollowFrame loader hid Go code in a fake Python DLL after pre-staging Defender exclusions Mon, 03 Aug 2026 11:26:00 GMT https://www.infosecurity-magazine.com/news/hollowframe-fake-python-dll/ https://www.infosecurity-magazine.com/news/koreas-largest-telco-kt-fine-39m/ Korean telco KT has been fined $39m for a year-long breach linked to femtocell compromise Mon, 03 Aug 2026 09:36:00 GMT https://www.infosecurity-magazine.com/news/koreas-largest-telco-kt-fine-39m/ https://www.infosecurity-magazine.com/news/coldcard-users-lose-89m-bitcoin/ A hacker has drained nearly $89m from Coldcard Bitcoin wallets after exploiting a legacy bug Mon, 03 Aug 2026 08:40:00 GMT https://www.infosecurity-magazine.com/news/coldcard-users-lose-89m-bitcoin/ https://www.infosecurity-magazine.com/news/chinese-hacker-deepseek-ai/ A Chinese-speaking threat actor has been using DeepSeek’s AI models to orchestrate cyber-attacks targeting Asian organizations Fri, 31 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/chinese-hacker-deepseek-ai/ https://www.infosecurity-magazine.com/news/aws-north-korea-axios-npm-supply/ AWS has linked North Korea to the axios campaign to other attacks on npm libraries Fri, 31 Jul 2026 09:50:00 GMT https://www.infosecurity-magazine.com/news/aws-north-korea-axios-npm-supply/ https://www.infosecurity-magazine.com/news/anthropic-claude-breached-three/ Anthropic has revealed that Claude AI models compromised third-party organizations Fri, 31 Jul 2026 08:35:00 GMT https://www.infosecurity-magazine.com/news/anthropic-claude-breached-three/ https://www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/ Cryptomining crew abandoned root to impersonate low-privileged Linux users and evade SOC alerts Thu, 30 Jul 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/ https://www.infosecurity-magazine.com/news/aitm-phishing-top-entry-point-law/ AiTM phishing is now the top entry point into law firms, with identity behind 56% of threats Thu, 30 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/aitm-phishing-top-entry-point-law/ https://www.infosecurity-magazine.com/news/ai-automation-fall-short-sysadmin/ Action1 report finds sysadmins overestimated their use of AI in predictions made two years ago Thu, 30 Jul 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/ai-automation-fall-short-sysadmin/ https://www.infosecurity-magazine.com/news/teams-phishing-abused-legit/ Check Point researchers detail phishing attack as an example of attackers dropping fake Microsoft login pages in favor of abusing Microsoft’s legitimate authentication infrastructure Thu, 30 Jul 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/teams-phishing-abused-legit/ https://www.infosecurity-magazine.com/news/google-patches-370-vulnerabilities/ The new version of Chrome, 151, comes with 370 vulnerability patches, including for seven critical flaws Thu, 30 Jul 2026 09:15:00 GMT https://www.infosecurity-magazine.com/news/google-patches-370-vulnerabilities/ https://www.infosecurity-magazine.com/news/ncsc-calls-device-manufacturers/ The UK’s National Cyber Security Centre wants network device makers to improve forensic observability Thu, 30 Jul 2026 08:25:00 GMT https://www.infosecurity-magazine.com/news/ncsc-calls-device-manufacturers/ https://www.infosecurity-magazine.com/news/logokit-phishing-real-time/ LogoKit now builds per-victim phishing pages using live screenshots of the target's real website Wed, 29 Jul 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/logokit-phishing-real-time/ https://www.infosecurity-magazine.com/news/ta488-outlook-half-click-owareaper/ TA488 returned with OWA half-click exploit deploying OWAReaper implant that survived re-imaging Wed, 29 Jul 2026 15:10:00 GMT https://www.infosecurity-magazine.com/news/ta488-outlook-half-click-owareaper/ https://www.infosecurity-magazine.com/news/cost-of-a-data-breach-5m-ibm/ IBM Cost of a Data Breach Report warns that the global average cost of a data breach has reached a record high of $4.99m – and AI-backed attacks have played a role Wed, 29 Jul 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/cost-of-a-data-breach-5m-ibm/ https://www.infosecurity-magazine.com/news/one-percent-ai-vulnerabilities/ For now, the use of AI benefits vulnerability research more than vulnerability exploitation, a VulnCheck researcher said Wed, 29 Jul 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/one-percent-ai-vulnerabilities/ https://www.infosecurity-magazine.com/news/researchers-aienhanced-phone-fraud/ AI is dramatically reducing the barriers to entry for scam phone farm operators, Human Security warns Wed, 29 Jul 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/researchers-aienhanced-phone-fraud/ https://www.infosecurity-magazine.com/news/ncsc-publishes-guidance-incident/ The National Cyber Security Centre has released a detailed framework to assist with incident response and recovery Wed, 29 Jul 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/ncsc-publishes-guidance-incident/ https://www.infosecurity-magazine.com/news/hugging-face-diffusers-trust/ Three CVEs in Hugging Face diffusers let a malicious model repo run code on any machine that loads it Tue, 28 Jul 2026 15:15:00 GMT https://www.infosecurity-magazine.com/news/hugging-face-diffusers-trust/ https://www.infosecurity-magazine.com/news/ai-linux-kernel-zero-day-net-sched/ AI-assisted research uncovered Linux kernel use-after-free allowing root escalation Tue, 28 Jul 2026 14:45:00 GMT https://www.infosecurity-magazine.com/news/ai-linux-kernel-zero-day-net-sched/ https://www.infosecurity-magazine.com/news/phishing-dominates-initial-entry/ Analysis of real-life incident response cases by Cisco Talos warns that phishing remains a powerful method of initial compromise Tue, 28 Jul 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/phishing-dominates-initial-entry/ https://www.infosecurity-magazine.com/news/microsoft-ai-security-initiatives/ Microsoft has launched a new agentic security system for cyber defenders as well as its first cyber-focused AI model Tue, 28 Jul 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/microsoft-ai-security-initiatives/ https://www.infosecurity-magazine.com/news/coca-cola-subsidiary-fairlife-data/ Coca Cola claims data was stolen from its Fairlife business after a recent ransomware attack Tue, 28 Jul 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/coca-cola-subsidiary-fairlife-data/ https://www.infosecurity-magazine.com/news/nvidia-open-security-ai-alliance/ NVIDIA has launched a new Open Secure AI Alliance to build an “open defense stack for agents” Tue, 28 Jul 2026 09:40:00 GMT https://www.infosecurity-magazine.com/news/nvidia-open-security-ai-alliance/ https://www.infosecurity-magazine.com/news/crest-ai-pentesting-accreditation/ CREST’s new AI standards are optional add-on requirements for cybersecurity service providers wishing to demonstrate responsible AI usage Tue, 28 Jul 2026 08:57:00 GMT https://www.infosecurity-magazine.com/news/crest-ai-pentesting-accreditation/ https://www.infosecurity-magazine.com/news/malvertising-builds-malware-in/ Impersonating well-known cryptocurrency and trading sites, SourTrade has developed a novel technique to drop infostealers to victims Mon, 27 Jul 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/malvertising-builds-malware-in/ https://www.infosecurity-magazine.com/news/ransomware-q2-2026-edr-kill/ Halcyon’s latest quarterly ransomware report showed that while ransomware attacks are declining, obfuscation techniques are getting harder to fight against Mon, 27 Jul 2026 10:01:00 GMT https://www.infosecurity-magazine.com/news/ransomware-q2-2026-edr-kill/ https://www.infosecurity-magazine.com/news/hotel-wifi-dns-poisoning/ Researchers at ReliaQuest warned of widespread DNS poisoning attacks targeting the hospitality sector as part of a cyber espionage campaign Fri, 24 Jul 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/hotel-wifi-dns-poisoning/ https://www.infosecurity-magazine.com/news/chatgpt-most-impersonated-brands/ OpenAI’s chatbot tool ChatGPT ranked among the top 10 most impersonated brands in phishing attacks for the first time Fri, 24 Jul 2026 11:15:00 GMT https://www.infosecurity-magazine.com/news/chatgpt-most-impersonated-brands/ https://www.infosecurity-magazine.com/news/university-ransomware-attacks-rise/ Comparitech’s analysis of incidents in the first half of 2026 finds that the emergence of The Gentlemen ransomware has resulted in surge in attacks against higher education Fri, 24 Jul 2026 09:15:00 GMT https://www.infosecurity-magazine.com/news/university-ransomware-attacks-rise/ https://www.infosecurity-magazine.com/news/russian-hackers-zero-click/ International agencies issue joint alert over state-backed campaign exploiting a critical vulnerability in the Zimbra Collaboration Suite Thu, 23 Jul 2026 15:50:00 GMT https://www.infosecurity-magazine.com/news/russian-hackers-zero-click/ https://www.infosecurity-magazine.com/news/microsoft-copilot-delayed-over/ CoreView research finds that security leadership is concerned about AI Assistant exposing confidential data Thu, 23 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-copilot-delayed-over/ https://www.infosecurity-magazine.com/news/iran-hackers-siemen-schneider-ics/ US government agencies have warned that Iranian cyber actors are targeting US-based Siemens and Schneider industrial equipment Thu, 23 Jul 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/iran-hackers-siemen-schneider-ics/ https://www.infosecurity-magazine.com/news/ai-agents-attack-surface/ Sophos report warns that the rapid adoption of AI by businesses is leaving them vulnerable to a new source of cyber threats Thu, 23 Jul 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/ai-agents-attack-surface/ https://www.infosecurity-magazine.com/news/new-dolphin-x-stealer-ai-targets/ Dolphin X is a new infostealer that uses AI to sort and rank victims, giving cybercriminals a faster way to identify lucrative targets Thu, 23 Jul 2026 10:19:00 GMT https://www.infosecurity-magazine.com/news/new-dolphin-x-stealer-ai-targets/ https://www.infosecurity-magazine.com/news/ai-boosts-ransomware-effectiveness/ A new study of organizations which have fallen victim to ransomware suggests the rise of AI-tools being used by hackers is making life harder for defenders Thu, 23 Jul 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/ai-boosts-ransomware-effectiveness/ https://www.infosecurity-magazine.com/news/trickbot-dns-tunneling-c2/ New TrickBot variant hides C2 communication inside DNS queries, replacing decade-old HTTP pattern Wed, 22 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/trickbot-dns-tunneling-c2/ https://www.infosecurity-magazine.com/news/open-ai-hacked-another-company/ Hugging Face recently disclosed a security breach. OpenAI has now said that it was its AI models which broke containment and hacked Hugging Face themselves Wed, 22 Jul 2026 11:40:00 GMT https://www.infosecurity-magazine.com/news/open-ai-hacked-another-company/ https://www.infosecurity-magazine.com/news/ubuntu-snap-confine-local-root-cve/ New Ubuntu snap-confine race condition lets local users escalate to root on default installs Wed, 22 Jul 2026 10:50:00 GMT https://www.infosecurity-magazine.com/news/ubuntu-snap-confine-local-root-cve/ https://www.infosecurity-magazine.com/news/google-codemender-available-ai/ CodeMender actively builds and runs exploits in customer-managed sandboxes to verify if vulnerabilities are truly exploitable Wed, 22 Jul 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/google-codemender-available-ai/ https://www.infosecurity-magazine.com/news/trim-jailbroken-claude-ai-pentest/ Russian-speaking actor Trim built a commercial offensive AI pentest tool on jailbroken Claude models Tue, 21 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/trim-jailbroken-claude-ai-pentest/ https://www.infosecurity-magazine.com/news/new-ransomware-weekly/ Analysis by Black Kite warns that ransomware ecosystem is becoming bigger and more fragmented Tue, 21 Jul 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/new-ransomware-weekly/ https://www.infosecurity-magazine.com/news/fbi-deepfake-videos-ic3/ FBI warned of deepfake videos of IC3 leadership directing users to spoofed complaint sites Tue, 21 Jul 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/fbi-deepfake-videos-ic3/ https://www.infosecurity-magazine.com/news/craneware-reports-data-theft/ Craneware, a provider of financial software for US healthcare organizations, has disclosed a cyber incident involving unauthorized access and data theft Tue, 21 Jul 2026 09:38:00 GMT https://www.infosecurity-magazine.com/news/craneware-reports-data-theft/ https://www.infosecurity-magazine.com/news/north-korean-clickfake-campaign/ In a new campaign, North Korean hacking group Famous Chollima targeted crypto professionals through ClickFix lures to deliver Windows and macOS trojans Tue, 21 Jul 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/north-korean-clickfake-campaign/ https://www.infosecurity-magazine.com/news/cruciferra-crypter-process-ghosting/ Cruciferra crypter used process ghosting and 90 custom ciphers to hide payloads for multiple actors Mon, 20 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cruciferra-crypter-process-ghosting/ https://www.infosecurity-magazine.com/news/jadepuffer-ai-model-ransomware/ JadePuffer follow-up campaign deployed ENCFORGE locker built to destroy AI model artifacts Mon, 20 Jul 2026 14:05:00 GMT https://www.infosecurity-magazine.com/news/jadepuffer-ai-model-ransomware/ https://www.infosecurity-magazine.com/news/researchers-wordpress-exploit/ A researcher who discovered a critical vulnerability in WordPress has used OpenAI’s latest model to develop an exploit chain Mon, 20 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/researchers-wordpress-exploit/ https://www.infosecurity-magazine.com/news/hollowgraph-microsoft-calendars/ Researchers have linked HollowGraph malware to the Cavern framework after discovering its use of Microsoft 365 calendars and Microsoft Graph APIs as a stealthy C2 channel Mon, 20 Jul 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/hollowgraph-microsoft-calendars/ https://www.infosecurity-magazine.com/news/police-chiefs-tfl-cybercrime-risk/ Two chiefs of UK policing agencies said the Transport for London prosecution demonstrates the need for Cybercrime Risk Orders Mon, 20 Jul 2026 09:45:00 GMT https://www.infosecurity-magazine.com/news/police-chiefs-tfl-cybercrime-risk/ https://www.infosecurity-magazine.com/news/government-ransomware-daily/ Government organizations are targeted by attackers who know agencies cannot afford disruption to public services Fri, 17 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/government-ransomware-daily/ https://www.infosecurity-magazine.com/news/23andme-18m-data-breach-settlement/ 23andMe has agreed to an $18m settlement with 42 US attorneys general over its 2023 data breach, including enhanced data protection requirements Fri, 17 Jul 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/23andme-18m-data-breach-settlement/ https://www.infosecurity-magazine.com/news/cisa-urgent-patch-fortinet/ US government agencies have until July 19 to patch two critical Fortinet vulnerabilities Fri, 17 Jul 2026 09:45:00 GMT https://www.infosecurity-magazine.com/news/cisa-urgent-patch-fortinet/ https://www.infosecurity-magazine.com/news/the-gentlemen-most-prolific/ Analysis of ransomware incidents by ReliaQuest indicates a shift in the ransomware landscape Fri, 17 Jul 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/the-gentlemen-most-prolific/ https://www.infosecurity-magazine.com/news/phishing-lua-loader-truetype-font/ Global phishing campaign disguised a Lua loader as a font file to deploy RATs and infostealers Thu, 16 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/phishing-lua-loader-truetype-font/ https://www.infosecurity-magazine.com/news/clicklock-macos-stealer-clickfix/ New ClickLock macOS stealer locked victims out of their own system until they surrendered a password Thu, 16 Jul 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/clicklock-macos-stealer-clickfix/ https://www.infosecurity-magazine.com/news/chatgpt55-to-execute-full/ Cybersecurity researchers tested Open AI GPT 5.5’s offensive cyber capabilities – and the results showed how effective a frontier LLM can be for hackers Thu, 16 Jul 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/chatgpt55-to-execute-full/ https://www.infosecurity-magazine.com/news/selfish-bravado-behind-tfl/ The perpetrators of the 2024 TfL cyber-attack have been jailed for five and a half years each after pleading guilty to Computer Misuse Act offences Thu, 16 Jul 2026 11:51:00 GMT https://www.infosecurity-magazine.com/news/selfish-bravado-behind-tfl/ https://www.infosecurity-magazine.com/news/sans-warns-of-ai-governance-gap/ SANS Institute says governance programs are still nascent even as AI failures and threats grow Thu, 16 Jul 2026 09:25:00 GMT https://www.infosecurity-magazine.com/news/sans-warns-of-ai-governance-gap/ https://www.infosecurity-magazine.com/news/us-gold-eagle-ai-vulnerability/ The White House announced Gold Eagle to help accelerate the discovery, prioritization and patching of flaws found by AI Thu, 16 Jul 2026 08:50:00 GMT https://www.infosecurity-magazine.com/news/us-gold-eagle-ai-vulnerability/ https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/ Six-month phishing campaign used seasonal eCard lures to plant legitimate RMM tools on victims Wed, 15 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/ https://www.infosecurity-magazine.com/news/uefi-shims-secure-boot-bypass/ Eleven forgotten Microsoft-signed UEFI shims can bypass Secure Boot on almost any machine Wed, 15 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/uefi-shims-secure-boot-bypass/ https://www.infosecurity-magazine.com/news/compromised-logins-ransomware-entry/ Research of incidents by Sophos finds that phishing, brute force attacks and other identity-based threats have surpassed software vulnerabilities as means of delivering ransomware Wed, 15 Jul 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/compromised-logins-ransomware-entry/ https://www.infosecurity-magazine.com/news/progress-restores-sharefile/ Progress has restored access to its ShareFile Storage Zones Controller after a four-day suspension triggered by a credible external security threat Wed, 15 Jul 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/progress-restores-sharefile/ https://www.infosecurity-magazine.com/news/microsoft-570-cves-patch-tuesday/ Microsoft released fixes for a record 570 CVEs in its July Patch Tuesday update, as experts warn AI is dramatically accelerating vulnerability discovery and increasing patch volumes Wed, 15 Jul 2026 09:20:00 GMT https://www.infosecurity-magazine.com/news/microsoft-570-cves-patch-tuesday/ https://www.infosecurity-magazine.com/news/uk-national-risk-register-cyber/ The UK government is warning of the potential impact of catastrophic cyber-attacks Wed, 15 Jul 2026 08:48:00 GMT https://www.infosecurity-magazine.com/news/uk-national-risk-register-cyber/ https://www.infosecurity-magazine.com/news/us-pentagon-suspends-cmmc-2/ The US Department of Defense announced the immediate suspension of the CMMC Phase II requirements until further review Tue, 14 Jul 2026 15:28:00 GMT https://www.infosecurity-magazine.com/news/us-pentagon-suspends-cmmc-2/ https://www.infosecurity-magazine.com/news/macos-malware-apple-crash-reporter/ Researchers at Jamf Threat Labs detail CrashStealer, which steals passwords, cryptocurrency wallets and more Tue, 14 Jul 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/macos-malware-apple-crash-reporter/ https://www.infosecurity-magazine.com/news/lidl-notifies-customers-of/ Supermarket giant Lidl has revealed details of a supplier breach impacting customer data Tue, 14 Jul 2026 09:43:00 GMT https://www.infosecurity-magazine.com/news/lidl-notifies-customers-of/ https://www.infosecurity-magazine.com/news/five-charged-in-russian-coms-fraud/ Five UK residents have been charged in relation to supplying Russian Coms fraud devices and apps Tue, 14 Jul 2026 08:21:00 GMT https://www.infosecurity-magazine.com/news/five-charged-in-russian-coms-fraud/ https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/ Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA Mon, 13 Jul 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/ https://www.infosecurity-magazine.com/news/chinese-indian-espionage-pakistani/ Chinese and Indian spies converged on the same Balochistan police force, SentinelLabs found Mon, 13 Jul 2026 14:45:00 GMT https://www.infosecurity-magazine.com/news/chinese-indian-espionage-pakistani/ https://www.infosecurity-magazine.com/news/novel-spoofing-technique-targets/ New research reveals cyber-attackers can spoof OAuth Client IDs in Microsoft Entra ID, creating a stealthy path into cloud environments Mon, 13 Jul 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/novel-spoofing-technique-targets/ https://www.infosecurity-magazine.com/news/progress-warns-security-threat/ Progress Software, the provider of the popular file-sharing and data storage solutions, has urged customers to shut down the server hosting their Storage Zone Controller Mon, 13 Jul 2026 12:05:00 GMT https://www.infosecurity-magazine.com/news/progress-warns-security-threat/ https://www.infosecurity-magazine.com/news/russian-state-hackers-vulnerable/ Cybersecurity agencies from 12 countries have warned that Russian state-backed hackers are actively targeting vulnerable routers using weak SNMP credentials Mon, 13 Jul 2026 10:40:00 GMT https://www.infosecurity-magazine.com/news/russian-state-hackers-vulnerable/ https://www.infosecurity-magazine.com/news/hacker-extradited-ukraine-guilty/ An Armenian man has pleaded guilty to his role in the infamous Ryuk ransomware operation Mon, 13 Jul 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/hacker-extradited-ukraine-guilty/ https://www.infosecurity-magazine.com/news/australia-warns-global-cms/ Australian Cyber Security Centre warns CMS users of mass scanning and exploitation campaign Mon, 13 Jul 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/australia-warns-global-cms/ https://www.infosecurity-magazine.com/news/cisa-incident-response-exposed-aws/ CISA reveals how it responded after sensitive AWS GovCloud credentials and internal data were exposed in a public GitHub repository Fri, 10 Jul 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/cisa-incident-response-exposed-aws/ https://www.infosecurity-magazine.com/news/new-gigawiper-espionage-destructive/ A new multi-purpose backdoor allows cyber threat actors to conduct both quiet espionage activity and destructive wiping operations Fri, 10 Jul 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/new-gigawiper-espionage-destructive/ https://www.infosecurity-magazine.com/news/anthropic-openai-report-exploit/ Researchers at the AI Now Institute developed a proof-of-concept exploit showing common AI tools used for security could backfire Fri, 10 Jul 2026 13:45:00 GMT https://www.infosecurity-magazine.com/news/anthropic-openai-report-exploit/ https://www.infosecurity-magazine.com/news/ransomware-removes-cybersecurity/ GodDamn ransomware uses remote desktop application to secretly move around networks and drop the malicious PoisonX kernel driver Fri, 10 Jul 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-removes-cybersecurity/ https://www.infosecurity-magazine.com/news/microsoft-increase-number-security/ Microsoft has said the volume of Windows security updates is set to grow as it uses AI to find new bugs Fri, 10 Jul 2026 09:33:00 GMT https://www.infosecurity-magazine.com/news/microsoft-increase-number-security/ https://www.infosecurity-magazine.com/news/nhs-warns-staff-unauthorized/ NHS tells staff they could face prison for “inappropriate” access to patients’ medical records Fri, 10 Jul 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/nhs-warns-staff-unauthorized/ https://www.infosecurity-magazine.com/news/vibe-coded-malware-ai-powershell/ Huntress found a threat actor using vibe-coded PowerShell to map an Active Directory network Thu, 09 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/vibe-coded-malware-ai-powershell/ https://www.infosecurity-magazine.com/news/cisos-fear-execs-dont-understand/ Survey of cybersecurity leaders by MetaCompliance finds that many feel boards are uninterested in ever-evolving cyber risks Thu, 09 Jul 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/cisos-fear-execs-dont-understand/ https://www.infosecurity-magazine.com/news/china-interpol-cybercrime-crackdown/ Operation First Light 2026, coordinated by Interpol and funded by the Chinese government, has led to 5,811 arrests Thu, 09 Jul 2026 11:45:00 GMT https://www.infosecurity-magazine.com/news/china-interpol-cybercrime-crackdown/ https://www.infosecurity-magazine.com/news/ghostapproval-flaw-ai-coding/ Wiz discovered GhostApproval, a symlink flaw in six major AI coding assistants that bypasses approval Thu, 09 Jul 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/ghostapproval-flaw-ai-coding/ https://www.infosecurity-magazine.com/news/crest-ai-security-charter-cyber/ Over 70 cybersecurity organizations have signed the CREST AI Charter detailing responsible use of AI for security Thu, 09 Jul 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/crest-ai-security-charter-cyber/ https://www.infosecurity-magazine.com/news/cybercriminals-plant-ai-agents/ Cybersecurity researchers at ESET identify big rise in suspicious and malicious toolsets which put users at risk from cyber-attacks Thu, 09 Jul 2026 07:30:00 GMT https://www.infosecurity-magazine.com/news/cybercriminals-plant-ai-agents/ https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/ Zimperium found RedWing, an Android spyware sold as a service via Telegram to target banking apps Wed, 08 Jul 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/ https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/ Cisco Talos said China-linked APT UAT-7810 is growing its proxy relay network with new malware Wed, 08 Jul 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/ https://www.infosecurity-magazine.com/news/threat-actor-agentic-ai-cloud/ Sygnia report details how agentic AI accelerated weeks-long attack to just 72 hours Wed, 08 Jul 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/threat-actor-agentic-ai-cloud/ https://www.infosecurity-magazine.com/news/new-campaign-vidar-stealer-monero/ Cyber threat actors are infecting victims with the Vidar stealer and the XMRig cryptocurrency miner in a new malicious campaign Wed, 08 Jul 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/new-campaign-vidar-stealer-monero/ https://www.infosecurity-magazine.com/news/ncsc-national-cyber-sheild-ai/ The National Cyber Security Centre wants to work with AI partners to build a new “Cyber Shield” to defend the UK Wed, 08 Jul 2026 08:10:00 GMT https://www.infosecurity-magazine.com/news/ncsc-national-cyber-sheild-ai/ https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/ A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and Canada and harvest user credentials Tue, 07 Jul 2026 15:40:00 GMT https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/ https://www.infosecurity-magazine.com/news/scattered-spider-as-cybercrime/ Group-IB analysis argued Scattered Spider is a decentralized collective of independent clusters Tue, 07 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/scattered-spider-as-cybercrime/ https://www.infosecurity-magazine.com/news/uk-gov-launches-cyber-resilience/ More than 60 organizations, including M&S, Microsoft UK and Vodafone, have signed the UK government's Cyber Resilience Pledge, a new initiative aimed at boosting cyber security and resilience across British businesses Tue, 07 Jul 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/uk-gov-launches-cyber-resilience/ https://www.infosecurity-magazine.com/news/exploit-maximum-severity-adobe/ Threat actors are exploiting an Adobe ColdFusion vulnerability which has a CVSS score of 10.0 Tue, 07 Jul 2026 08:20:00 GMT https://www.infosecurity-magazine.com/news/exploit-maximum-severity-adobe/ https://www.infosecurity-magazine.com/news/phishing-facebook-fake-verification/ Attacks also used a compromised chatbot in campaign to steal sensitive information from Business Users Tue, 07 Jul 2026 07:00:00 GMT https://www.infosecurity-magazine.com/news/phishing-facebook-fake-verification/ https://www.infosecurity-magazine.com/news/new-iran-hacking-group-targets/ Check Point researchers have identified a new cyber adversary targeting Israeli government and IT businesses, tracked as ‘Cavern Manticore’ Mon, 06 Jul 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/new-iran-hacking-group-targets/ https://www.infosecurity-magazine.com/news/indirect-prompt-injection-web/ Zscaler found sites hiding prompt-injection text to manipulate AI agents into crypto payments Mon, 06 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/indirect-prompt-injection-web/ https://www.infosecurity-magazine.com/news/opera-gx-flaw-gx-mods-css/ Opera GX flaw let sites automatically install mods to steal data from other pages, now patched Mon, 06 Jul 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/opera-gx-flaw-gx-mods-css/ https://www.infosecurity-magazine.com/news/nca-warn-parents-volume/ IWF and NCA warn that growing numbers of images and videos are being manipulated into sexual abuse material Mon, 06 Jul 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/nca-warn-parents-volume/ https://www.infosecurity-magazine.com/news/researchers-first-agentic/ Researchers have revealed JadePuffer, the first agentic AI-powered ransomware campaign, highlighting how autonomous agents can automate cyber-attacks Mon, 06 Jul 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/researchers-first-agentic/ https://www.infosecurity-magazine.com/news/qilin-dominates-ransomware-market/ The ransomware landscape is reconsolidating around major players, with Qilin emerging as the leading RaaS operation, researchers say Fri, 03 Jul 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/qilin-dominates-ransomware-market/ https://www.infosecurity-magazine.com/news/industrialized-cyberattacks/ Researchers warn that collaboration could lead to “unprecedented” ransomware attacks, as FBI also issues warning Fri, 03 Jul 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/industrialized-cyberattacks/ https://www.infosecurity-magazine.com/news/fbi-google-take-down-netnut-proxy/ The NetNut proxy network and the ‘Popa’ botnet are known to have infected devices with variants of Mirai DDoS botnets Fri, 03 Jul 2026 09:35:00 GMT https://www.infosecurity-magazine.com/news/fbi-google-take-down-netnut-proxy/ https://www.infosecurity-magazine.com/news/researcher-exploitarium-exploits/ Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities first Thu, 02 Jul 2026 12:51:00 GMT https://www.infosecurity-magazine.com/news/researcher-exploitarium-exploits/ https://www.infosecurity-magazine.com/news/cybercriminals-pose-interpol/ Bitdefender researchers warned of curious ransomware campaign which has targeted businesses around the world Thu, 02 Jul 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/cybercriminals-pose-interpol/ https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/ The NCSC has shared best practice advice from pen testers which could help improve system resilience Thu, 02 Jul 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/ https://www.infosecurity-magazine.com/news/scattered-spider-member-extradited/ A teenager accused of hacking as part of Scattered Spider has been arrested Thu, 02 Jul 2026 08:45:00 GMT https://www.infosecurity-magazine.com/news/scattered-spider-member-extradited/ https://www.infosecurity-magazine.com/news/veil-drop-blogspot-purelog-stealer/ Securonix said the Veil#Drop campaign abuses Google Blogspot to deliver PureLog Stealer in memory Wed, 01 Jul 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/veil-drop-blogspot-purelog-stealer/ https://www.infosecurity-magazine.com/news/ousaban-banking-trojan-spain/ FortiGuard says the Brazilian banking trojan Ousaban is targeting Spain and Portugal via phishing Wed, 01 Jul 2026 13:45:00 GMT https://www.infosecurity-magazine.com/news/ousaban-banking-trojan-spain/ https://www.infosecurity-magazine.com/news/anthropic-fable-mythos-back/ The new classifier in Fable 5 blocks the jailbreak technique that prompted the US export controls “in over 99% of cases” Wed, 01 Jul 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/anthropic-fable-mythos-back/ https://www.infosecurity-magazine.com/news/microsoft-accelerates-quantumsafe/ Microsoft has brought forward its timelines for transitioning to post-quantum cryptography (PQC) Wed, 01 Jul 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-accelerates-quantumsafe/ https://www.infosecurity-magazine.com/news/insurance-giant-aflac-data-breach/ Aflac Japan has notified regulators that policy details and personal and banking information have been compromised Wed, 01 Jul 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/insurance-giant-aflac-data-breach/ https://www.infosecurity-magazine.com/news/nissan-oracle-peoplesoft-zero-day/ Nissan says employees' data was stolen via the Oracle PeopleSoft zero-day campaign Tue, 30 Jun 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/nissan-oracle-peoplesoft-zero-day/ https://www.infosecurity-magazine.com/news/simplehelp-rmm-vulnerability/ Attackers exploited a critical SimpleHelp RMM bug to deploy TaskWeaver and Djinn Stealer malware Tue, 30 Jun 2026 15:34:00 GMT https://www.infosecurity-magazine.com/news/simplehelp-rmm-vulnerability/ https://www.infosecurity-magazine.com/news/clickfix-cybercriminals-favorite/ ReliaQuest report warns of a surge in ClickFix social engineering attacks against Windows and macOS users Tue, 30 Jun 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/clickfix-cybercriminals-favorite/ https://www.infosecurity-magazine.com/news/hackers-blockchain-japan-hotels/ A wave of phishing emails sent to Booking.com partner accommodations in Japan in May led to blockchain-hosted malware Tue, 30 Jun 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/hackers-blockchain-japan-hotels/ https://www.infosecurity-magazine.com/news/uk-healthcare-tenfold-increase/ SonicWall records 264,000 events in first five months of 2026 as UK hospitals come under siege Tue, 30 Jun 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/uk-healthcare-tenfold-increase/ https://www.infosecurity-magazine.com/news/over-300-uk-firms-hit-ransomware/ Report Fraud data reveals that more than half of 323 UK ransomware victims last year were SMEs Tue, 30 Jun 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/over-300-uk-firms-hit-ransomware/ https://www.infosecurity-magazine.com/news/openai-gpt-5-6-sol-limited-preview/ OpenAI is previewing its GPT-5.6 Sol model to a vetted few at the US government's request Mon, 29 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/openai-gpt-5-6-sol-limited-preview/ https://www.infosecurity-magazine.com/news/millenium-rat-telegram-60000/ Group-IB says Millenium RAT, now rewritten in C++, has hit 62,289 devices in 160+ countries Mon, 29 Jun 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/millenium-rat-telegram-60000/ https://www.infosecurity-magazine.com/news/us-insurance-regulator-confirms/ An attacker has exploited a zero day in Oracle Peoplesoft to gain access to the IT systems of the NAIC, the standard-setting association for the US federal insurance system Mon, 29 Jun 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/us-insurance-regulator-confirms/ https://www.infosecurity-magazine.com/news/russian-hackers-destructive-jaguar/ Experts warn the Jaguar Land Rover breach bears hallmarks of Kremlin-backed hackers, citing novel ransomware, strategic timing and efforts to obscure attribution Mon, 29 Jun 2026 09:15:00 GMT https://www.infosecurity-magazine.com/news/russian-hackers-destructive-jaguar/ https://www.infosecurity-magazine.com/news/fbi-alarm-russian-intelligence/ The FBI claims Russian spies are targeting Signal backup keys Mon, 29 Jun 2026 08:15:00 GMT https://www.infosecurity-magazine.com/news/fbi-alarm-russian-intelligence/ https://www.infosecurity-magazine.com/news/china-hackers-asian-cni-backdoor/ A China-linked threat group has been targeting critical infrastructure in Southeast Asia with a new custom backdoor called TinyRCT Fri, 26 Jun 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/china-hackers-asian-cni-backdoor/ https://www.infosecurity-magazine.com/news/cmc-analysis-education-canvas-data/ The UK Cyber Monitoring Centre reviews the Canvas breach affecting 160 UK universities, highlighting data theft risks and financial impacts of cyber incidents Fri, 26 Jun 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/cmc-analysis-education-canvas-data/ https://www.infosecurity-magazine.com/news/cisco-vulnerability-exploited/ A high-severity flaw in Cisco Catalyst SD-WAN Manager disclosed in early June was exploited as early as March Thu, 25 Jun 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/cisco-vulnerability-exploited/ https://www.infosecurity-magazine.com/news/twenty-million-us-ip-connections/ Digital Citizens Alliance report claims that millions of Americans may have unwittingly had IP connections used by cybercriminals Thu, 25 Jun 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/twenty-million-us-ip-connections/ https://www.infosecurity-magazine.com/news/trust-ai-vulnerability-scanning/ Cobalt study finds 20-percentage-point drop in number of organizations relying solely on AI automation for testing Thu, 25 Jun 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/trust-ai-vulnerability-scanning/ https://www.infosecurity-magazine.com/news/cisa-sase-tic-3-0-zero-trust/ New CISA guidance shows federal agencies how to use SASE to move from legacy TIC 2.0 to zero trust Thu, 25 Jun 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/cisa-sase-tic-3-0-zero-trust/ https://www.infosecurity-magazine.com/news/macos-xpc-flaw-disable-edr-mdm/ macos-xpc-flaw-disable-edr-mdm-standard-user-xm-cyber Thu, 25 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/macos-xpc-flaw-disable-edr-mdm/ https://www.infosecurity-magazine.com/news/increase-ransomware-europe/ Analysis of ransomware incidents by researchers at Black Kite found that attacks have risen by over 50% in the last year, with supply chain attacks increasing Thu, 25 Jun 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/increase-ransomware-europe/ https://www.infosecurity-magazine.com/news/bioshocking-ai-browser-prompt/ LayerX tricked AI browsers including ChatGPT Atlas and Comet into bypassing their guardrails Wed, 24 Jun 2026 16:05:00 GMT https://www.infosecurity-magazine.com/news/bioshocking-ai-browser-prompt/ https://www.infosecurity-magazine.com/news/operation-endgame-stealc-amadey/ Operation Endgame seized around 50 domains and nearly 200 active IP-based servers associated with the infostealers Wed, 24 Jun 2026 15:25:00 GMT https://www.infosecurity-magazine.com/news/operation-endgame-stealc-amadey/ https://www.infosecurity-magazine.com/news/macos-gaslight-rust-backdoor/ SentinelLabs found a North Korea-linked macOS backdoor using prompt injection on AI triage tools Wed, 24 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/macos-gaslight-rust-backdoor/ https://www.infosecurity-magazine.com/news/kddi-breach-japanese-telcos/ Customers of the affected Japanese email services are “strongly advised” to change their email passwords Wed, 24 Jun 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/kddi-breach-japanese-telcos/ https://www.infosecurity-magazine.com/news/iranlinked-muddywater-poses-as/ An NCC Group report warns state-backed hackers are attempting to hide activity by posing as ransomware groups and deploying commercially available malware Wed, 24 Jun 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/iranlinked-muddywater-poses-as/ https://www.infosecurity-magazine.com/news/ai-attacks-cheaper-faster-covert/ New ReliaQuest study reveals the six ways AI is practically being used in attacks today Wed, 24 Jun 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/ai-attacks-cheaper-faster-covert/ https://www.infosecurity-magazine.com/news/mps-criticize-government-museum/ Public Accounts Committee (PAC) warns that museums and galleries aren’t getting enough government support on cyber Wed, 24 Jun 2026 08:40:00 GMT https://www.infosecurity-magazine.com/news/mps-criticize-government-museum/ https://www.infosecurity-magazine.com/news/lookalike-npm-package-postcss/ JFrog found an npm package impersonating postcss-selector-parser to drop a multi-stage Windows RAT Tue, 23 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/lookalike-npm-package-postcss/ https://www.infosecurity-magazine.com/news/openai-daybreak-gpt-5-5-cyber/ OpenAI expanded Daybreak with a full GPT-5.5-Cyber release to help defenders patch software flaws Tue, 23 Jun 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/openai-daybreak-gpt-5-5-cyber/ https://www.infosecurity-magazine.com/news/trump-eo-post-quantum-migration/ All US federal agencies will have to complete their post-quantum cryptography transition by 2031, according to a new Trump Executive Order Tue, 23 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/trump-eo-post-quantum-migration/ https://www.infosecurity-magazine.com/news/gta-6-scams-emerge-as-preorders/ Cybercriminals launch fake GTA 6 pre-order sites offering early access for crypto payments Tue, 23 Jun 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/gta-6-scams-emerge-as-preorders/ https://www.infosecurity-magazine.com/news/scattered-spider-teens-convicted/ Two young British men have pleaded guilty to hacking Transport for London as part of a Scattered Spider plot Tue, 23 Jun 2026 09:29:00 GMT https://www.infosecurity-magazine.com/news/scattered-spider-teens-convicted/ https://www.infosecurity-magazine.com/news/five-eyes-issues-urgent-call/ The Five Eyes Alliance has published a rare call to action for organizations facing AI threats Tue, 23 Jun 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/five-eyes-issues-urgent-call/