<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <link>https://www.infosecurity-magazine.com/news/</link>
    <copyright>Copyright © 2026 Reed Exhibitions Ltd. All Rights Reserved.</copyright>
    <item>
      <title>New HollowGraph Malware Hijacks Microsoft 365 Calendars for Covert C2 Communications</title>
      <link>https://www.infosecurity-magazine.com/news/hollowgraph-microsoft-calendars/</link>
      <description>Researchers have linked HollowGraph malware to the Cavern framework after discovering its use of Microsoft 365 calendars and Microsoft Graph APIs as a stealthy C2 channel</description>
      <pubDate>Mon, 20 Jul 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hollowgraph-microsoft-calendars/</guid>
    </item>
    <item>
      <title>Police Chiefs Cite TfL Hack in Push for Cybercrime Risk Orders </title>
      <link>https://www.infosecurity-magazine.com/news/police-chiefs-tfl-cybercrime-risk/</link>
      <description>Two chiefs of UK policing agencies said the Transport for London prosecution demonstrates the need for Cybercrime Risk Orders</description>
      <pubDate>Mon, 20 Jul 2026 09:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/police-chiefs-tfl-cybercrime-risk/</guid>
    </item>
    <item>
      <title>Government Agencies Falling Victim to Ransomware Daily, Warns Study</title>
      <link>https://www.infosecurity-magazine.com/news/government-ransomware-daily/</link>
      <description>Government organizations are targeted by attackers who know agencies cannot afford disruption to public services</description>
      <pubDate>Fri, 17 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/government-ransomware-daily/</guid>
    </item>
    <item>
      <title>23andMe Faces New Security Mandates in $18m Data Breach Settlement</title>
      <link>https://www.infosecurity-magazine.com/news/23andme-18m-data-breach-settlement/</link>
      <description>23andMe has agreed to an $18m settlement with 42 US attorneys general over its 2023 data breach, including enhanced data protection requirements</description>
      <pubDate>Fri, 17 Jul 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/23andme-18m-data-breach-settlement/</guid>
    </item>
    <item>
      <title>CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities</title>
      <link>https://www.infosecurity-magazine.com/news/cisa-urgent-patch-fortinet/</link>
      <description>US government agencies have until July 19 to patch two critical Fortinet vulnerabilities</description>
      <pubDate>Fri, 17 Jul 2026 09:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisa-urgent-patch-fortinet/</guid>
    </item>
    <item>
      <title>The Gentlemen Overtakes Qilin as Most Prolific Ransomware Threat</title>
      <link>https://www.infosecurity-magazine.com/news/the-gentlemen-most-prolific/</link>
      <description>Analysis of ransomware incidents by ReliaQuest indicates a shift in the ransomware landscape</description>
      <pubDate>Fri, 17 Jul 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/the-gentlemen-most-prolific/</guid>
    </item>
    <item>
      <title>Phishing Campaign Hides Lua Loader as TrueType Font File</title>
      <link>https://www.infosecurity-magazine.com/news/phishing-lua-loader-truetype-font/</link>
      <description>Global phishing campaign disguised a Lua loader as a font file to deploy RATs and infostealers</description>
      <pubDate>Thu, 16 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/phishing-lua-loader-truetype-font/</guid>
    </item>
    <item>
      <title>Modular macOS Stealer Uses Kill Loops to Force Password Entry</title>
      <link>https://www.infosecurity-magazine.com/news/clicklock-macos-stealer-clickfix/</link>
      <description>New ClickLock macOS stealer locked victims out of their own system until they surrendered a password</description>
      <pubDate>Thu, 16 Jul 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/clicklock-macos-stealer-clickfix/</guid>
    </item>
    <item>
      <title>Single Prompt Enables ChatGPT to Execute Full Cyber-Attack Chain, Researchers Claim</title>
      <link>https://www.infosecurity-magazine.com/news/chatgpt55-to-execute-full/</link>
      <description>Cybersecurity researchers tested Open AI GPT 5.5’s offensive cyber capabilities – and the results showed how effective a frontier LLM can be for hackers</description>
      <pubDate>Thu, 16 Jul 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chatgpt55-to-execute-full/</guid>
    </item>
    <item>
      <title>"Selfish Bravado"  Behind TfL Cyber-Attack, Judge Says as Pair Jailed</title>
      <link>https://www.infosecurity-magazine.com/news/selfish-bravado-behind-tfl/</link>
      <description>The perpetrators of the 2024 TfL cyber-attack have been jailed for five and a half years each after pleading guilty to Computer Misuse Act offences</description>
      <pubDate>Thu, 16 Jul 2026 11:51:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/selfish-bravado-behind-tfl/</guid>
    </item>
    <item>
      <title>SANS Warns of AI Governance Gap as Use by Security Teams Surges</title>
      <link>https://www.infosecurity-magazine.com/news/sans-warns-of-ai-governance-gap/</link>
      <description>SANS Institute says governance programs are still nascent even as AI failures and threats grow</description>
      <pubDate>Thu, 16 Jul 2026 09:25:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/sans-warns-of-ai-governance-gap/</guid>
    </item>
    <item>
      <title>US Launches Gold Eagle to Coordinate AI-Driven Vulnerability Management</title>
      <link>https://www.infosecurity-magazine.com/news/us-gold-eagle-ai-vulnerability/</link>
      <description>The White House announced Gold Eagle to help accelerate the discovery, prioritization and patching of flaws found by AI</description>
      <pubDate>Thu, 16 Jul 2026 08:50:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-gold-eagle-ai-vulnerability/</guid>
    </item>
    <item>
      <title>Phishing Campaign Abuses eCards to Deploy RMM Tools</title>
      <link>https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/</link>
      <description>Six-month phishing campaign used seasonal eCard lures to plant legitimate RMM tools on victims</description>
      <pubDate>Wed, 15 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/</guid>
    </item>
    <item>
      <title>Eleven Vulnerable UEFI Shims Enable Secure Boot Bypass</title>
      <link>https://www.infosecurity-magazine.com/news/uefi-shims-secure-boot-bypass/</link>
      <description>Eleven forgotten Microsoft-signed UEFI shims can bypass Secure Boot on almost any machine</description>
      <pubDate>Wed, 15 Jul 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uefi-shims-secure-boot-bypass/</guid>
    </item>
    <item>
      <title>Compromised Logins Surge as the Most Common Entry Point for Ransomware Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/compromised-logins-ransomware-entry/</link>
      <description>Research of incidents by Sophos finds that phishing, brute force attacks and other identity-based threats have surpassed software vulnerabilities as means of delivering ransomware</description>
      <pubDate>Wed, 15 Jul 2026 12:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/compromised-logins-ransomware-entry/</guid>
    </item>
    <item>
      <title>Progress Restores ShareFile Storage Zones Access After Security Warning</title>
      <link>https://www.infosecurity-magazine.com/news/progress-restores-sharefile/</link>
      <description>Progress has restored access to its ShareFile Storage Zones Controller after a four-day suspension triggered by a credible external security threat</description>
      <pubDate>Wed, 15 Jul 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/progress-restores-sharefile/</guid>
    </item>
    <item>
      <title>Microsoft Patches 570 CVEs in Record Patch Tuesday </title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-570-cves-patch-tuesday/</link>
      <description>Microsoft released fixes for a record 570 CVEs in its July Patch Tuesday update, as experts warn AI is dramatically accelerating vulnerability discovery and increasing patch volumes</description>
      <pubDate>Wed, 15 Jul 2026 09:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-570-cves-patch-tuesday/</guid>
    </item>
    <item>
      <title>Government Updates UK’s National Risk Register with Cyber Warnings</title>
      <link>https://www.infosecurity-magazine.com/news/uk-national-risk-register-cyber/</link>
      <description>The UK government is warning of the potential impact of catastrophic cyber-attacks</description>
      <pubDate>Wed, 15 Jul 2026 08:48:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-national-risk-register-cyber/</guid>
    </item>
    <item>
      <title>US: Pentagon Suspends CMMC Phase II Requirements for Defense Contractors</title>
      <link>https://www.infosecurity-magazine.com/news/us-pentagon-suspends-cmmc-2/</link>
      <description>The US Department of Defense announced the immediate suspension of the CMMC Phase II requirements until further review</description>
      <pubDate>Tue, 14 Jul 2026 15:28:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-pentagon-suspends-cmmc-2/</guid>
    </item>
    <item>
      <title>New MacOS Malware Exploits Legitimate Developer ID to Pose as Apple Crash Reporter </title>
      <link>https://www.infosecurity-magazine.com/news/macos-malware-apple-crash-reporter/</link>
      <description>Researchers at Jamf Threat Labs detail CrashStealer, which steals passwords, cryptocurrency wallets and more</description>
      <pubDate>Tue, 14 Jul 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/macos-malware-apple-crash-reporter/</guid>
    </item>
    <item>
      <title>Lidl Notifies Customers of Third-Party Data Breach</title>
      <link>https://www.infosecurity-magazine.com/news/lidl-notifies-customers-of/</link>
      <description>Supermarket giant Lidl has revealed details of a supplier breach impacting customer data</description>
      <pubDate>Tue, 14 Jul 2026 09:43:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/lidl-notifies-customers-of/</guid>
    </item>
    <item>
      <title>Five Charged in “Russian Coms” Fraud Platform Case</title>
      <link>https://www.infosecurity-magazine.com/news/five-charged-in-russian-coms-fraud/</link>
      <description>Five UK residents have been charged in relation to supplying Russian Coms fraud devices and apps</description>
      <pubDate>Tue, 14 Jul 2026 08:21:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/five-charged-in-russian-coms-fraud/</guid>
    </item>
    <item>
      <title>Open Directory Exposes Three Evilginx Phishing Operators</title>
      <link>https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/</link>
      <description>Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA</description>
      <pubDate>Mon, 13 Jul 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/</guid>
    </item>
    <item>
      <title>Pakistani Police Systems Hit by Chinese and Indian Espionage</title>
      <link>https://www.infosecurity-magazine.com/news/chinese-indian-espionage-pakistani/</link>
      <description>Chinese and Indian spies converged on the same Balochistan police force, SentinelLabs found</description>
      <pubDate>Mon, 13 Jul 2026 14:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chinese-indian-espionage-pakistani/</guid>
    </item>
    <item>
      <title>Novel OAuth Client ID Spoofing Technique Targets Cloud Environments</title>
      <link>https://www.infosecurity-magazine.com/news/novel-spoofing-technique-targets/</link>
      <description>New research reveals cyber-attackers can spoof OAuth Client IDs in Microsoft Entra ID, creating a stealthy path into cloud environments</description>
      <pubDate>Mon, 13 Jul 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/novel-spoofing-technique-targets/</guid>
    </item>
    <item>
      <title>Progress Software Warns of "External Security Threat" to ShareFile</title>
      <link>https://www.infosecurity-magazine.com/news/progress-warns-security-threat/</link>
      <description>Progress Software, the provider of the popular file-sharing and data storage solutions, has urged customers to shut down the server hosting their Storage Zone Controller</description>
      <pubDate>Mon, 13 Jul 2026 12:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/progress-warns-security-threat/</guid>
    </item>
    <item>
      <title>Russian State Hackers Target Vulnerable Routers Worldwide, Joint Advisory Warns</title>
      <link>https://www.infosecurity-magazine.com/news/russian-state-hackers-vulnerable/</link>
      <description>Cybersecurity agencies from 12 countries have warned that Russian state-backed hackers are actively targeting vulnerable routers using weak SNMP credentials</description>
      <pubDate>Mon, 13 Jul 2026 10:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/russian-state-hackers-vulnerable/</guid>
    </item>
    <item>
      <title>Hacker Extradited from Ukraine Pleads Guilty to Ryuk Ransomware Charges</title>
      <link>https://www.infosecurity-magazine.com/news/hacker-extradited-ukraine-guilty/</link>
      <description>An Armenian man has pleaded guilty to his role in the infamous Ryuk ransomware operation</description>
      <pubDate>Mon, 13 Jul 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hacker-extradited-ukraine-guilty/</guid>
    </item>
    <item>
      <title>Australian Cyber Agency Warns of Global CMS Exploitation Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/australia-warns-global-cms/</link>
      <description>Australian Cyber Security Centre warns CMS users of mass scanning and exploitation campaign</description>
      <pubDate>Mon, 13 Jul 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/australia-warns-global-cms/</guid>
    </item>
    <item>
      <title>CISA Details Incident Response to Exposed AWS GovCloud Keys</title>
      <link>https://www.infosecurity-magazine.com/news/cisa-incident-response-exposed-aws/</link>
      <description>CISA reveals how it responded after sensitive AWS GovCloud credentials and internal data were exposed in a public GitHub repository</description>
      <pubDate>Fri, 10 Jul 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisa-incident-response-exposed-aws/</guid>
    </item>
    <item>
      <title>Microsoft Warns New 'GigaWiper' Malware Combines Espionage and Destructive Capabilities</title>
      <link>https://www.infosecurity-magazine.com/news/new-gigawiper-espionage-destructive/</link>
      <description>A new multi-purpose backdoor allows cyber threat actors to conduct both quiet espionage activity and destructive wiping operations</description>
      <pubDate>Fri, 10 Jul 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/new-gigawiper-espionage-destructive/</guid>
    </item>
    <item>
      <title>Anthropic and OpenAI Security Tools Could Fuel Cyber-Attacks, Researchers Warn</title>
      <link>https://www.infosecurity-magazine.com/news/anthropic-openai-report-exploit/</link>
      <description>Researchers at the AI Now Institute developed a proof-of-concept exploit showing common AI tools used for security could backfire</description>
      <pubDate>Fri, 10 Jul 2026 13:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/anthropic-openai-report-exploit/</guid>
    </item>
    <item>
      <title>New Ransomware Exploits Malicious Driver to Remove Cybersecurity Protections</title>
      <link>https://www.infosecurity-magazine.com/news/ransomware-removes-cybersecurity/</link>
      <description>GodDamn ransomware uses remote desktop application to secretly move around networks and drop the malicious PoisonX kernel driver</description>
      <pubDate>Fri, 10 Jul 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ransomware-removes-cybersecurity/</guid>
    </item>
    <item>
      <title>Microsoft Warns of Increase in Number of Security Updates </title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-increase-number-security/</link>
      <description>Microsoft has said the volume of Windows security updates is set to grow as it uses AI to find new bugs</description>
      <pubDate>Fri, 10 Jul 2026 09:33:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-increase-number-security/</guid>
    </item>
    <item>
      <title>NHS Warns Staff Over Unauthorized Access to Patient Data </title>
      <link>https://www.infosecurity-magazine.com/news/nhs-warns-staff-unauthorized/</link>
      <description>NHS tells staff they could face prison for “inappropriate” access to patients’ medical records</description>
      <pubDate>Fri, 10 Jul 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nhs-warns-staff-unauthorized/</guid>
    </item>
    <item>
      <title>Vibe-Coded Malware Caught in Active Directory Attack</title>
      <link>https://www.infosecurity-magazine.com/news/vibe-coded-malware-ai-powershell/</link>
      <description>Huntress found a threat actor using vibe-coded PowerShell to map an Active Directory network</description>
      <pubDate>Thu, 09 Jul 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/vibe-coded-malware-ai-powershell/</guid>
    </item>
    <item>
      <title>75% CISOs Fear Executives Don’t Understand Cybersecurity Risks Employees Face</title>
      <link>https://www.infosecurity-magazine.com/news/cisos-fear-execs-dont-understand/</link>
      <description>Survey of cybersecurity leaders by MetaCompliance finds that many feel boards are uninterested in ever-evolving cyber risks</description>
      <pubDate>Thu, 09 Jul 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisos-fear-execs-dont-understand/</guid>
    </item>
    <item>
      <title>Chinese-Funded Interpol Cybercrime Crackdown Leads to 5,800 Arrests</title>
      <link>https://www.infosecurity-magazine.com/news/china-interpol-cybercrime-crackdown/</link>
      <description>Operation First Light 2026, coordinated by Interpol and funded by the Chinese government, has led to 5,811 arrests</description>
      <pubDate>Thu, 09 Jul 2026 11:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/china-interpol-cybercrime-crackdown/</guid>
    </item>
    <item>
      <title>GhostApproval Flaw Hits Six Major AI Coding Assistants</title>
      <link>https://www.infosecurity-magazine.com/news/ghostapproval-flaw-ai-coding/</link>
      <description>Wiz discovered GhostApproval, a symlink flaw in six major AI coding assistants that bypasses approval</description>
      <pubDate>Thu, 09 Jul 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ghostapproval-flaw-ai-coding/</guid>
    </item>
    <item>
      <title>New AI Security Charter Backed by Over 70 Cyber Firms</title>
      <link>https://www.infosecurity-magazine.com/news/crest-ai-security-charter-cyber/</link>
      <description>Over 70 cybersecurity organizations have signed the CREST AI Charter detailing responsible use of AI for security</description>
      <pubDate>Thu, 09 Jul 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/crest-ai-security-charter-cyber/</guid>
    </item>
    <item>
      <title>Cybercriminals Plant Malicious AI Agents in Open Source Tool Repositories</title>
      <link>https://www.infosecurity-magazine.com/news/cybercriminals-plant-ai-agents/</link>
      <description>Cybersecurity researchers at ESET identify big rise in suspicious and malicious toolsets which put users at risk from cyber-attacks</description>
      <pubDate>Thu, 09 Jul 2026 07:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybercriminals-plant-ai-agents/</guid>
    </item>
    <item>
      <title>RedWing Android Spyware Sold as a Service on Telegram</title>
      <link>https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/</link>
      <description>Zimperium found RedWing, an Android spyware sold as a service via Telegram to target banking apps</description>
      <pubDate>Wed, 08 Jul 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/</guid>
    </item>
    <item>
      <title>China-Linked APT Expands Proxy Network With New Malware</title>
      <link>https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/</link>
      <description>Cisco Talos said China-linked APT UAT-7810 is growing its proxy relay network with new malware</description>
      <pubDate>Wed, 08 Jul 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/</guid>
    </item>
    <item>
      <title>Threat Actors Uses Agentic AI to Rapidly Compromise Cloud Target</title>
      <link>https://www.infosecurity-magazine.com/news/threat-actor-agentic-ai-cloud/</link>
      <description>Sygnia report details how agentic AI accelerated weeks-long attack to just 72 hours</description>
      <pubDate>Wed, 08 Jul 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/threat-actor-agentic-ai-cloud/</guid>
    </item>
    <item>
      <title>New Malicious Campaign Delivers Vidar Infostealer and Monero Crypto Miner</title>
      <link>https://www.infosecurity-magazine.com/news/new-campaign-vidar-stealer-monero/</link>
      <description>Cyber threat actors are infecting victims with the Vidar stealer and the XMRig cryptocurrency miner in a new malicious campaign</description>
      <pubDate>Wed, 08 Jul 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/new-campaign-vidar-stealer-monero/</guid>
    </item>
    <item>
      <title>NCSC Touts National Scale, AI-Powered “Cyber Shield” for Defense</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-national-cyber-sheild-ai/</link>
      <description>The National Cyber Security Centre wants to work with AI partners to build a new “Cyber Shield” to defend the UK</description>
      <pubDate>Wed, 08 Jul 2026 08:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-national-cyber-sheild-ai/</guid>
    </item>
    <item>
      <title>Suspected Chinese Threat Group Targets Universities via Vulnerable Roundcube Servers</title>
      <link>https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/</link>
      <description>A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and Canada and harvest user credentials</description>
      <pubDate>Tue, 07 Jul 2026 15:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/</guid>
    </item>
    <item>
      <title>Scattered Spider’s Structure More Like a Cybercrime Collective Than a Unified Gang</title>
      <link>https://www.infosecurity-magazine.com/news/scattered-spider-as-cybercrime/</link>
      <description>Group-IB analysis argued Scattered Spider is a decentralized collective of independent clusters</description>
      <pubDate>Tue, 07 Jul 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/scattered-spider-as-cybercrime/</guid>
    </item>
    <item>
      <title>UK Government Launches Cyber Resilience Pledge, Claiming 60+ Signatories</title>
      <link>https://www.infosecurity-magazine.com/news/uk-gov-launches-cyber-resilience/</link>
      <description>More than 60 organizations, including M&amp;S, Microsoft UK and Vodafone, have signed the UK government's Cyber Resilience Pledge, a new initiative aimed at boosting cyber security and resilience across British businesses</description>
      <pubDate>Tue, 07 Jul 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-gov-launches-cyber-resilience/</guid>
    </item>
    <item>
      <title>Hackers Exploit Maximum Severity Adobe ColdFusion Flaw</title>
      <link>https://www.infosecurity-magazine.com/news/exploit-maximum-severity-adobe/</link>
      <description>Threat actors are exploiting an Adobe ColdFusion vulnerability which has a CVSS score of 10.0</description>
      <pubDate>Tue, 07 Jul 2026 08:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/exploit-maximum-severity-adobe/</guid>
    </item>
    <item>
      <title>Phishing Attacks Targeted Facebook Users With Fake Verification Offer</title>
      <link>https://www.infosecurity-magazine.com/news/phishing-facebook-fake-verification/</link>
      <description>Attacks also used a compromised chatbot in campaign to steal sensitive information from Business Users</description>
      <pubDate>Tue, 07 Jul 2026 07:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/phishing-facebook-fake-verification/</guid>
    </item>
    <item>
      <title>New Iran-Nexus Hacking Group Targets Israel Government and IT Sectors</title>
      <link>https://www.infosecurity-magazine.com/news/new-iran-hacking-group-targets/</link>
      <description>Check Point researchers have identified a new cyber adversary targeting Israeli government and IT businesses, tracked as ‘Cavern Manticore’</description>
      <pubDate>Mon, 06 Jul 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/new-iran-hacking-group-targets/</guid>
    </item>
    <item>
      <title>Indirect Prompt Injection in Web Content Targets AI Agents</title>
      <link>https://www.infosecurity-magazine.com/news/indirect-prompt-injection-web/</link>
      <description>Zscaler found sites hiding prompt-injection text to manipulate AI agents into crypto payments</description>
      <pubDate>Mon, 06 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/indirect-prompt-injection-web/</guid>
    </item>
    <item>
      <title>Opera GX Flaw Let Sites Auto-Install Mods to Steal Data</title>
      <link>https://www.infosecurity-magazine.com/news/opera-gx-flaw-gx-mods-css/</link>
      <description>Opera GX flaw let sites automatically install mods to steal data from other pages, now patched</description>
      <pubDate>Mon, 06 Jul 2026 14:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/opera-gx-flaw-gx-mods-css/</guid>
    </item>
    <item>
      <title>NCA Issues Warning to Parents As Shared Child Photos Exploited by AI Tools</title>
      <link>https://www.infosecurity-magazine.com/news/nca-warn-parents-volume/</link>
      <description>IWF and NCA warn that growing numbers of images and videos are being manipulated into sexual abuse material</description>
      <pubDate>Mon, 06 Jul 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nca-warn-parents-volume/</guid>
    </item>
    <item>
      <title>Researchers Claim First Fully Agentic Ransomware: JadePuffer</title>
      <link>https://www.infosecurity-magazine.com/news/researchers-first-agentic/</link>
      <description>Researchers have revealed JadePuffer, the first agentic AI-powered ransomware campaign, highlighting how autonomous agents can automate cyber-attacks</description>
      <pubDate>Mon, 06 Jul 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/researchers-first-agentic/</guid>
    </item>
    <item>
      <title>Qilin Dominates Ransomware Market Amid Growing Cybercrime Consolidation</title>
      <link>https://www.infosecurity-magazine.com/news/qilin-dominates-ransomware-market/</link>
      <description>The ransomware landscape is reconsolidating around major players, with Qilin emerging as the leading RaaS operation, researchers say</description>
      <pubDate>Fri, 03 Jul 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/qilin-dominates-ransomware-market/</guid>
    </item>
    <item>
      <title>Warning Over “Industrialized” Cyber-Attacks After Ransomware Gang Partners With TeamPCP </title>
      <link>https://www.infosecurity-magazine.com/news/industrialized-cyberattacks/</link>
      <description>Researchers warn that collaboration could lead to “unprecedented” ransomware attacks, as FBI also issues warning</description>
      <pubDate>Fri, 03 Jul 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/industrialized-cyberattacks/</guid>
    </item>
    <item>
      <title>FBI, Google Take Down NetNut Proxy Network Used by Cyber Threat Actors</title>
      <link>https://www.infosecurity-magazine.com/news/fbi-google-take-down-netnut-proxy/</link>
      <description>The NetNut proxy network and the ‘Popa’ botnet are known to have infected devices with variants of Mirai DDoS botnets</description>
      <pubDate>Fri, 03 Jul 2026 09:35:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fbi-google-take-down-netnut-proxy/</guid>
    </item>
    <item>
      <title>Researcher Behind 'Exploitarium' Explains Release of Undisclosed Zero-Day Exploits</title>
      <link>https://www.infosecurity-magazine.com/news/researcher-exploitarium-exploits/</link>
      <description>Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities first</description>
      <pubDate>Thu, 02 Jul 2026 12:51:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/researcher-exploitarium-exploits/</guid>
    </item>
    <item>
      <title>Cybercriminals Pose as Interpol in Phishing Emails to Infect Victims With Ransomware</title>
      <link>https://www.infosecurity-magazine.com/news/cybercriminals-pose-interpol/</link>
      <description>Bitdefender researchers warned of curious ransomware campaign which has targeted businesses around the world</description>
      <pubDate>Thu, 02 Jul 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybercriminals-pose-interpol/</guid>
    </item>
    <item>
      <title>NCSC Shares Tips on How to Make a Pen Tester’s Job Harder</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/</link>
      <description>The NCSC has shared best practice advice from pen testers which could help improve system resilience</description>
      <pubDate>Thu, 02 Jul 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/</guid>
    </item>
    <item>
      <title>Alleged Scattered Spider Member Extradited to US</title>
      <link>https://www.infosecurity-magazine.com/news/scattered-spider-member-extradited/</link>
      <description>A teenager accused of hacking as part of Scattered Spider has been arrested </description>
      <pubDate>Thu, 02 Jul 2026 08:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/scattered-spider-member-extradited/</guid>
    </item>
    <item>
      <title>Fileless Malware Abuses Google Blogspot to Deploy Infostealer in Memory</title>
      <link>https://www.infosecurity-magazine.com/news/veil-drop-blogspot-purelog-stealer/</link>
      <description>Securonix said the Veil#Drop campaign abuses Google Blogspot to deliver PureLog Stealer in memory</description>
      <pubDate>Wed, 01 Jul 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/veil-drop-blogspot-purelog-stealer/</guid>
    </item>
    <item>
      <title>Brazilian Banking Trojan Ousaban Targets Spain and Portugal</title>
      <link>https://www.infosecurity-magazine.com/news/ousaban-banking-trojan-spain/</link>
      <description>FortiGuard says the Brazilian banking trojan Ousaban is targeting Spain and Portugal via phishing</description>
      <pubDate>Wed, 01 Jul 2026 13:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ousaban-banking-trojan-spain/</guid>
    </item>
    <item>
      <title>Anthropic's Fable 5 and Mythos 5 Are Back with New Security Guardrails</title>
      <link>https://www.infosecurity-magazine.com/news/anthropic-fable-mythos-back/</link>
      <description>The new classifier in Fable 5 blocks the jailbreak technique that prompted the US export controls “in over 99% of cases”</description>
      <pubDate>Wed, 01 Jul 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/anthropic-fable-mythos-back/</guid>
    </item>
    <item>
      <title>Microsoft Accelerates Quantum-Safe Push with New Timeline</title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-accelerates-quantumsafe/</link>
      <description>Microsoft has brought forward its timelines for transitioning to post-quantum cryptography (PQC) </description>
      <pubDate>Wed, 01 Jul 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-accelerates-quantumsafe/</guid>
    </item>
    <item>
      <title>Insurance Giant Aflac Discloses Data Breach Impacting Millions</title>
      <link>https://www.infosecurity-magazine.com/news/insurance-giant-aflac-data-breach/</link>
      <description>Aflac Japan has notified regulators that policy details and personal and banking information have been compromised</description>
      <pubDate>Wed, 01 Jul 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/insurance-giant-aflac-data-breach/</guid>
    </item>
    <item>
      <title>Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day</title>
      <link>https://www.infosecurity-magazine.com/news/nissan-oracle-peoplesoft-zero-day/</link>
      <description>Nissan says employees' data was stolen via the Oracle PeopleSoft zero-day campaign</description>
      <pubDate>Tue, 30 Jun 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nissan-oracle-peoplesoft-zero-day/</guid>
    </item>
    <item>
      <title>Critical SimpleHelp Vulnerability Exploited For Malware Delivery</title>
      <link>https://www.infosecurity-magazine.com/news/simplehelp-rmm-vulnerability/</link>
      <description>Attackers exploited a critical SimpleHelp RMM bug to deploy TaskWeaver and Djinn Stealer malware</description>
      <pubDate>Tue, 30 Jun 2026 15:34:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/simplehelp-rmm-vulnerability/</guid>
    </item>
    <item>
      <title>
ClickFix Now Cybercriminals' Favorite Malware Delivery Technique
</title>
      <link>https://www.infosecurity-magazine.com/news/clickfix-cybercriminals-favorite/</link>
      <description>ReliaQuest report warns of a surge in ClickFix social engineering attacks against Windows and macOS users</description>
      <pubDate>Tue, 30 Jun 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/clickfix-cybercriminals-favorite/</guid>
    </item>
    <item>
      <title>Hackers Leverage Blockchain to Hit Japan's Hotels Through Booking.com Phishing</title>
      <link>https://www.infosecurity-magazine.com/news/hackers-blockchain-japan-hotels/</link>
      <description>A wave of phishing emails sent to Booking.com partner accommodations in Japan in May led to blockchain-hosted malware</description>
      <pubDate>Tue, 30 Jun 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hackers-blockchain-japan-hotels/</guid>
    </item>
    <item>
      <title>UK Healthcare Sector Records Tenfold Increase in Cyber-Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/uk-healthcare-tenfold-increase/</link>
      <description>SonicWall records 264,000 events in first five months of 2026 as UK hospitals come under siege </description>
      <pubDate>Tue, 30 Jun 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-healthcare-tenfold-increase/</guid>
    </item>
    <item>
      <title>Over 300 UK Firms Hit by Ransomware in a Year</title>
      <link>https://www.infosecurity-magazine.com/news/over-300-uk-firms-hit-ransomware/</link>
      <description>Report Fraud data reveals that more than half of 323 UK ransomware victims last year were SMEs</description>
      <pubDate>Tue, 30 Jun 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/over-300-uk-firms-hit-ransomware/</guid>
    </item>
    <item>
      <title>OpenAI Reveals GPT-5.6 Sol Cybersecurity Model, Restricts Early Access</title>
      <link>https://www.infosecurity-magazine.com/news/openai-gpt-5-6-sol-limited-preview/</link>
      <description>OpenAI is previewing its GPT-5.6 Sol model to a vetted few at the US government's request</description>
      <pubDate>Mon, 29 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/openai-gpt-5-6-sol-limited-preview/</guid>
    </item>
    <item>
      <title>Telegram-Based Millenium RAT Campaign Infects 60,000 Devices</title>
      <link>https://www.infosecurity-magazine.com/news/millenium-rat-telegram-60000/</link>
      <description>Group-IB says Millenium RAT, now rewritten in C++, has hit 62,289 devices in 160+ countries</description>
      <pubDate>Mon, 29 Jun 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/millenium-rat-telegram-60000/</guid>
    </item>
    <item>
      <title>US Federal Insurance Regulator Confirms Data Breach Via Oracle Flaw</title>
      <link>https://www.infosecurity-magazine.com/news/us-insurance-regulator-confirms/</link>
      <description>An attacker has exploited a zero day in Oracle Peoplesoft to gain access to the IT systems of the NAIC, the standard-setting association for the US federal insurance system</description>
      <pubDate>Mon, 29 Jun 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-insurance-regulator-confirms/</guid>
    </item>
    <item>
      <title>Russian Hackers Accused of Destructive Cyber-Attack on Jaguar Land Rover</title>
      <link>https://www.infosecurity-magazine.com/news/russian-hackers-destructive-jaguar/</link>
      <description>Experts warn the Jaguar Land Rover breach bears hallmarks of Kremlin-backed hackers, citing novel ransomware, strategic timing and efforts to obscure attribution</description>
      <pubDate>Mon, 29 Jun 2026 09:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/russian-hackers-destructive-jaguar/</guid>
    </item>
    <item>
      <title>FBI Sounds Alarm Over Russian Intelligence Signal Phishing</title>
      <link>https://www.infosecurity-magazine.com/news/fbi-alarm-russian-intelligence/</link>
      <description>The FBI claims Russian spies are targeting Signal backup keys</description>
      <pubDate>Mon, 29 Jun 2026 08:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fbi-alarm-russian-intelligence/</guid>
    </item>
    <item>
      <title>China-Linked Hackers Strike Asian Critical Infrastructure with TinyRCT Backdoor</title>
      <link>https://www.infosecurity-magazine.com/news/china-hackers-asian-cni-backdoor/</link>
      <description>A China-linked threat group has been targeting critical infrastructure in Southeast Asia with a new custom backdoor called TinyRCT</description>
      <pubDate>Fri, 26 Jun 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/china-hackers-asian-cni-backdoor/</guid>
    </item>
    <item>
      <title>CMC Releases Analysis and Guidance for Education Sector After Canvas Data Breach</title>
      <link>https://www.infosecurity-magazine.com/news/cmc-analysis-education-canvas-data/</link>
      <description>The UK Cyber Monitoring Centre reviews the Canvas breach affecting 160 UK universities, highlighting data theft risks and financial impacts of cyber incidents</description>
      <pubDate>Fri, 26 Jun 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cmc-analysis-education-canvas-data/</guid>
    </item>
    <item>
      <title>Cisco Vulnerability Exploited Months Before Disclosure, Google Warns</title>
      <link>https://www.infosecurity-magazine.com/news/cisco-vulnerability-exploited/</link>
      <description>A high-severity flaw in Cisco Catalyst SD-WAN Manager disclosed in early June was exploited as early as March</description>
      <pubDate>Thu, 25 Jun 2026 14:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisco-vulnerability-exploited/</guid>
    </item>
    <item>
      <title>Twenty Million US IP Connections Used by Proxy Services</title>
      <link>https://www.infosecurity-magazine.com/news/twenty-million-us-ip-connections/</link>
      <description>Digital Citizens Alliance report claims that millions of Americans may have unwittingly had IP connections used by cybercriminals</description>
      <pubDate>Thu, 25 Jun 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/twenty-million-us-ip-connections/</guid>
    </item>
    <item>
      <title>Trust in Automated AI Vulnerability Scanning Collapses to 9%, New Study Finds </title>
      <link>https://www.infosecurity-magazine.com/news/trust-ai-vulnerability-scanning/</link>
      <description>Cobalt study finds 20-percentage-point drop in number of organizations relying solely on AI automation for testing</description>
      <pubDate>Thu, 25 Jun 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trust-ai-vulnerability-scanning/</guid>
    </item>
    <item>
      <title>New CISA Guide Helps Agencies Adopt SASE For Zero Trust</title>
      <link>https://www.infosecurity-magazine.com/news/cisa-sase-tic-3-0-zero-trust/</link>
      <description>New CISA guidance shows federal agencies how to use SASE to move from legacy TIC 2.0 to zero trust</description>
      <pubDate>Thu, 25 Jun 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisa-sase-tic-3-0-zero-trust/</guid>
    </item>
    <item>
      <title>macOS Flaw Lets Standard Users Disable EDR and MDM</title>
      <link>https://www.infosecurity-magazine.com/news/macos-xpc-flaw-disable-edr-mdm/</link>
      <description>macos-xpc-flaw-disable-edr-mdm-standard-user-xm-cyber</description>
      <pubDate>Thu, 25 Jun 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/macos-xpc-flaw-disable-edr-mdm/</guid>
    </item>
    <item>
      <title>Major Increase in Ransomware Attacks Targeting Europe, Warns New Report</title>
      <link>https://www.infosecurity-magazine.com/news/increase-ransomware-europe/</link>
      <description>Analysis of ransomware incidents by researchers at Black Kite found that attacks have risen by over 50% in the last year, with supply chain attacks increasing</description>
      <pubDate>Thu, 25 Jun 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/increase-ransomware-europe/</guid>
    </item>
    <item>
      <title>Researchers Trick AI Browsers Into Leaking Credentials</title>
      <link>https://www.infosecurity-magazine.com/news/bioshocking-ai-browser-prompt/</link>
      <description>LayerX tricked AI browsers including ChatGPT Atlas and Comet into bypassing their guardrails</description>
      <pubDate>Wed, 24 Jun 2026 16:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/bioshocking-ai-browser-prompt/</guid>
    </item>
    <item>
      <title>Europol-Led Operation Endgame Takes Down StealC and Amadey Infostealers</title>
      <link>https://www.infosecurity-magazine.com/news/operation-endgame-stealc-amadey/</link>
      <description>Operation Endgame seized around 50 domains and nearly 200 active IP-based servers associated with the infostealers</description>
      <pubDate>Wed, 24 Jun 2026 15:25:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/operation-endgame-stealc-amadey/</guid>
    </item>
    <item>
      <title>macOS Backdoor Uses Prompt Injection to Evade AI Triage</title>
      <link>https://www.infosecurity-magazine.com/news/macos-gaslight-rust-backdoor/</link>
      <description>SentinelLabs found a North Korea-linked macOS backdoor using prompt injection on AI triage tools</description>
      <pubDate>Wed, 24 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/macos-gaslight-rust-backdoor/</guid>
    </item>
    <item>
      <title>KDDI Breach Affects Six Japanese ISPs, Exposes 14.2 Email Credentials</title>
      <link>https://www.infosecurity-magazine.com/news/kddi-breach-japanese-telcos/</link>
      <description>Customers of the affected Japanese email services are “strongly advised” to change their email passwords</description>
      <pubDate>Wed, 24 Jun 2026 12:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/kddi-breach-japanese-telcos/</guid>
    </item>
    <item>
      <title>Iran-Linked MuddyWater Poses as Ransomware Gang to Mask Cyber Espionage</title>
      <link>https://www.infosecurity-magazine.com/news/iranlinked-muddywater-poses-as/</link>
      <description>An NCC Group report warns state-backed hackers are attempting to hide activity by posing as ransomware groups and deploying commercially available malware</description>
      <pubDate>Wed, 24 Jun 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/iranlinked-muddywater-poses-as/</guid>
    </item>
    <item>
      <title>AI Is Making Attacks Cheaper, Faster and More Covert, Says ReliaQuest</title>
      <link>https://www.infosecurity-magazine.com/news/ai-attacks-cheaper-faster-covert/</link>
      <description>New ReliaQuest study reveals the six ways AI is practically being used in attacks today</description>
      <pubDate>Wed, 24 Jun 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-attacks-cheaper-faster-covert/</guid>
    </item>
    <item>
      <title>UK Museums Face Cybersecurity Risks, MPs Warn</title>
      <link>https://www.infosecurity-magazine.com/news/mps-criticize-government-museum/</link>
      <description>Public Accounts Committee (PAC) warns that museums and galleries aren’t getting enough government support on cyber</description>
      <pubDate>Wed, 24 Jun 2026 08:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/mps-criticize-government-museum/</guid>
    </item>
    <item>
      <title>Lookalike npm Package Hides a Multi-Stage Windows RAT</title>
      <link>https://www.infosecurity-magazine.com/news/lookalike-npm-package-postcss/</link>
      <description>JFrog found an npm package impersonating postcss-selector-parser to drop a multi-stage Windows RAT</description>
      <pubDate>Tue, 23 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/lookalike-npm-package-postcss/</guid>
    </item>
    <item>
      <title>OpenAI Expands Daybreak to Help Defenders Patch Flaws</title>
      <link>https://www.infosecurity-magazine.com/news/openai-daybreak-gpt-5-5-cyber/</link>
      <description>OpenAI expanded Daybreak with a full GPT-5.5-Cyber release to help defenders patch software flaws</description>
      <pubDate>Tue, 23 Jun 2026 14:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/openai-daybreak-gpt-5-5-cyber/</guid>
    </item>
    <item>
      <title>Trump Issues Executive Order to Fast-Track Post-Quantum Migration</title>
      <link>https://www.infosecurity-magazine.com/news/trump-eo-post-quantum-migration/</link>
      <description>All US federal agencies will have to complete their post-quantum cryptography transition by 2031, according to a new Trump Executive Order</description>
      <pubDate>Tue, 23 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trump-eo-post-quantum-migration/</guid>
    </item>
    <item>
      <title>GTA 6 Scams Emerge as Pre-Orders Open</title>
      <link>https://www.infosecurity-magazine.com/news/gta-6-scams-emerge-as-preorders/</link>
      <description>Cybercriminals launch fake GTA 6 pre-order sites offering early access for crypto payments</description>
      <pubDate>Tue, 23 Jun 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gta-6-scams-emerge-as-preorders/</guid>
    </item>
    <item>
      <title>Scattered Spider Teens Convicted of TfL Cyber-Attack</title>
      <link>https://www.infosecurity-magazine.com/news/scattered-spider-teens-convicted/</link>
      <description>Two young British men have pleaded guilty to hacking Transport for London as part of a Scattered Spider plot</description>
      <pubDate>Tue, 23 Jun 2026 09:29:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/scattered-spider-teens-convicted/</guid>
    </item>
    <item>
      <title>Five Eyes Group Issues Urgent Call to Tackle Frontier AI Threats</title>
      <link>https://www.infosecurity-magazine.com/news/five-eyes-issues-urgent-call/</link>
      <description>The Five Eyes Alliance has published a rare call to action for organizations facing AI threats</description>
      <pubDate>Tue, 23 Jun 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/five-eyes-issues-urgent-call/</guid>
    </item>
    <item>
      <title>GentleKiller Framework Disables Victims' Security Software</title>
      <link>https://www.infosecurity-magazine.com/news/gentlekiller-gentlemen-ransomware/</link>
      <description>ESET details GentleKiller, the EDR-killer framework the Gentlemen ransomware gang gives affiliates</description>
      <pubDate>Mon, 22 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gentlekiller-gentlemen-ransomware/</guid>
    </item>
    <item>
      <title>Unpatchable BootROM Flaw Impacts Apple A12, A13 Chips </title>
      <link>https://www.infosecurity-magazine.com/news/apple-bootrom-exploit-a12-a13/</link>
      <description>Apple BootROM exploit exposes unpatchable USB flaw on A12 and A13 devices</description>
      <pubDate>Mon, 22 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/apple-bootrom-exploit-a12-a13/</guid>
    </item>
    <item>
      <title>Microsoft Attributes Mastra AI Supply Chain Attack to North Korea</title>
      <link>https://www.infosecurity-magazine.com/news/mastra-ai-supply-chain-attack/</link>
      <description>North Korean threat actor Sapphire Sleet has been linked to a supply chain attack targeting Mastra, according to Microsoft security researchers</description>
      <pubDate>Mon, 22 Jun 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/mastra-ai-supply-chain-attack/</guid>
    </item>
    <item>
      <title>Klue Breach Enables Hackers to Compromise Cybersecurity Firms via OAuth Tokens</title>
      <link>https://www.infosecurity-magazine.com/news/klue-breach-compromise/</link>
      <description>At least four cybersecurity firms confirmed they have been affected by a breach of business intelligence platform Klue via Salesforce integration</description>
      <pubDate>Mon, 22 Jun 2026 10:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/klue-breach-compromise/</guid>
    </item>
    <item>
      <title>UK Information Commissioner Resigns After Workplace Investigation </title>
      <link>https://www.infosecurity-magazine.com/news/information-commissioner-resigns/</link>
      <description>The UK’s data protection regulator the information commissioner has resigned after his position became “untenable”</description>
      <pubDate>Mon, 22 Jun 2026 09:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/information-commissioner-resigns/</guid>
    </item>
    <item>
      <title>NCSC Urges Fortinet Customers to Tackle FortiBleed Fallout</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-fortinet-customers-tackle/</link>
      <description>The NCSC has released guidance for Fortinet customers impacted by the FortiBleed threat campaign</description>
      <pubDate>Mon, 22 Jun 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-fortinet-customers-tackle/</guid>
    </item>
    <item>
      <title>AWS Unveils 'Continuum,' an AI-Powered Vulnerability Management Platform</title>
      <link>https://www.infosecurity-magazine.com/news/aws-continuum-ai-vulnerability/</link>
      <description>Working with frontier AI models, this new platform aims to help discovering, prioritizing, validating and remediating code vulnerabilities</description>
      <pubDate>Fri, 19 Jun 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/aws-continuum-ai-vulnerability/</guid>
    </item>
    <item>
      <title>Operation Endgame Disrupts Malware Network Linked to Major Ransomware Gang</title>
      <link>https://www.infosecurity-magazine.com/news/operation-endgame-socgholish-evil/</link>
      <description>SocGholish malware has been removed from 15,000 sites associated with Evil Corp hackers</description>
      <pubDate>Fri, 19 Jun 2026 10:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/operation-endgame-socgholish-evil/</guid>
    </item>
    <item>
      <title>Confidence Lacks in Threat Detection Across Non-Email Channels like Slack and Teams </title>
      <link>https://www.infosecurity-magazine.com/news/threat-detection-across-nonemail/</link>
      <description>Half of cybersecurity leaders lack confidence in detecting threats on Slack, Teams and other non-email platforms, despite growing attacker focus</description>
      <pubDate>Fri, 19 Jun 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/threat-detection-across-nonemail/</guid>
    </item>
    <item>
      <title>Fake GitHub Stars and AI Videos Mask a Crypto Clipper</title>
      <link>https://www.infosecurity-magazine.com/news/crypto-clipboard-hijacker-fake/</link>
      <description>A Rust crypto clipper hides behind fake GitHub stars and AI-narrated YouTube videos</description>
      <pubDate>Thu, 18 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/crypto-clipboard-hijacker-fake/</guid>
    </item>
    <item>
      <title>ICO Cautions Healthcare Worker After Princess of Wales Incident </title>
      <link>https://www.infosecurity-magazine.com/news/ico-cautions-healthcare-worker/</link>
      <description>Hospital insider escapes criminal prosecution after attempting to sell royal’s medical records</description>
      <pubDate>Thu, 18 Jun 2026 14:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ico-cautions-healthcare-worker/</guid>
    </item>
    <item>
      <title>Cybercriminals Are Worried About AI Taking Their Jobs Too</title>
      <link>https://www.infosecurity-magazine.com/news/cybercriminals-worried-ai-take/</link>
      <description>Analysis of chatter on underground forums by Sophos finds that hackers fear AI could take work away from them</description>
      <pubDate>Thu, 18 Jun 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybercriminals-worried-ai-take/</guid>
    </item>
    <item>
      <title>LATAM Infrastructure Hit by Fortinet and Ivanti Exploits</title>
      <link>https://www.infosecurity-magazine.com/news/operation-escaneo-cloudsek-latam/</link>
      <description>CloudSEK maps Operation Escaneo, a campaign hitting Latin American infrastructure via perimeter bugs</description>
      <pubDate>Thu, 18 Jun 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/operation-escaneo-cloudsek-latam/</guid>
    </item>
    <item>
      <title>Hostile States Behind 75% of Cyber-Attacks on UK Critical Infrastructure, NCSC Warns</title>
      <link>https://www.infosecurity-magazine.com/news/hostile-states-cni-75-percent-ncsc/</link>
      <description>Richard Horne, the NCSC CEO, said three-quarters of cyber-attacks targeting UK critical infrastructure came from nation-state actors</description>
      <pubDate>Thu, 18 Jun 2026 09:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hostile-states-cni-75-percent-ncsc/</guid>
    </item>
    <item>
      <title>Cybercrime Surges in APAC as Digitalization Takes Hold</title>
      <link>https://www.infosecurity-magazine.com/news/cybercrime-surges-apac-digitization/</link>
      <description>Interpol claims cybercrime accounts for third of crime in over half of Asia and South Pacific countries</description>
      <pubDate>Thu, 18 Jun 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybercrime-surges-apac-digitization/</guid>
    </item>
    <item>
      <title>North Korean Hiring Fraud Runs on AI and US Laptop Farms</title>
      <link>https://www.infosecurity-magazine.com/news/north-korea-it-worker-fraud-ai/</link>
      <description>Nisos infiltrated a North Korean IT-worker fraud cell running on AI interviews and a US laptop farm</description>
      <pubDate>Wed, 17 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/north-korea-it-worker-fraud-ai/</guid>
    </item>
    <item>
      <title>Serverless Phishing Kit on GitHub Targets Mexican Banks</title>
      <link>https://www.infosecurity-magazine.com/news/gitbait-github-pages-sheetbest/</link>
      <description>GitBait phishing kit abuses GitHub Pages and the SheetBest API to steal Mexican banking credentials</description>
      <pubDate>Wed, 17 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gitbait-github-pages-sheetbest/</guid>
    </item>
    <item>
      <title>Sensitive Enterprise Data Uploads to AI Models Double in a Year</title>
      <link>https://www.infosecurity-magazine.com/news/sensitive-ai-data-upload-doubles/</link>
      <description>The rise of AI-assistants and applications in the enterprise has seen a 93% increase in employees attempting to upload sensitive data, bringing security challenges</description>
      <pubDate>Wed, 17 Jun 2026 13:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/sensitive-ai-data-upload-doubles/</guid>
    </item>
    <item>
      <title>AI Threats and Alert Fatigue Challenge Cybersecurity Teams </title>
      <link>https://www.infosecurity-magazine.com/news/ai-threats-alert-fatigue-challenge/</link>
      <description>Filigran survey at Infosecurity Europe 2026 reveals AI-powered attacks as the top concern, with false positives, alert fatigue and manual processes draining security teams</description>
      <pubDate>Wed, 17 Jun 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-threats-alert-fatigue-challenge/</guid>
    </item>
    <item>
      <title>EU Security Experts to Support Ukrainian Organizations in Case of Cyber-Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/ukraine-included-eu-cyber-reserve/</link>
      <description>Ukraine has been added to the EU Cybersecurity Reserve, which provides incident response services against large-scale incidents</description>
      <pubDate>Wed, 17 Jun 2026 09:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ukraine-included-eu-cyber-reserve/</guid>
    </item>
    <item>
      <title>Fifteen JetBrains Marketplace Plugins Found Stealing API Keys</title>
      <link>https://www.infosecurity-magazine.com/news/fifteen-jetbrains-marketplace/</link>
      <description>Aikido Security has discovered at least 15 IDE plugins on the JetBrains Marketplace</description>
      <pubDate>Wed, 17 Jun 2026 09:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fifteen-jetbrains-marketplace/</guid>
    </item>
    <item>
      <title>Staffing Is Top SOC Challenge Even as AI Proliferates, Says SANS</title>
      <link>https://www.infosecurity-magazine.com/news/staffing-top-soc-challenge-ai/</link>
      <description>SANS Institute study finds few SOCs have built AI into defined workflows, despite widespread adoption</description>
      <pubDate>Wed, 17 Jun 2026 08:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/staffing-top-soc-challenge-ai/</guid>
    </item>
    <item>
      <title>SprySOCKS Backdoor Expands From Linux to Windows</title>
      <link>https://www.infosecurity-magazine.com/news/sprysocks-backdoor-windows/</link>
      <description>China-linked SprySOCKS backdoor gains stealthy Windows variants and 30-plus C2 commands</description>
      <pubDate>Tue, 16 Jun 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/sprysocks-backdoor-windows/</guid>
    </item>
    <item>
      <title>Rokarolla Trojan Combines Banking Fraud With Device Surveillance</title>
      <link>https://www.infosecurity-magazine.com/news/rokarolla-android-banking-trojan/</link>
      <description>Rokarolla Android trojan steals banking logins and spies on victims while blocking fraud alerts</description>
      <pubDate>Tue, 16 Jun 2026 13:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/rokarolla-android-banking-trojan/</guid>
    </item>
    <item>
      <title>Over Two-Thirds of Security Pros Say Cyber Is Getting Harder</title>
      <link>https://www.infosecurity-magazine.com/news/security-pros-cyber-cyber-harder/</link>
      <description>ISSA study finds most security professionals feel challenged by colleagues’ involvement in cyber</description>
      <pubDate>Tue, 16 Jun 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/security-pros-cyber-cyber-harder/</guid>
    </item>
    <item>
      <title>DragonForce Ransomware Exploited Microsoft Teams to Hide in Attack Against Major Company</title>
      <link>https://www.infosecurity-magazine.com/news/dragonforce-ransomware-hidden/</link>
      <description>Command and control traffic exploited a Teams visitor token to make malicious activity look legitimate to defenders</description>
      <pubDate>Tue, 16 Jun 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/dragonforce-ransomware-hidden/</guid>
    </item>
    <item>
      <title>Chainguard, JPMorgan, BNY Team Up to Secure Open Source from AI Threats</title>
      <link>https://www.infosecurity-magazine.com/news/chainguard-bny-open-source-athena/</link>
      <description>Athena is a new an industry coalition to fix the vulnerabilities frontier AI models find before attackers can exploit them</description>
      <pubDate>Tue, 16 Jun 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chainguard-bny-open-source-athena/</guid>
    </item>
    <item>
      <title>FBI Warns Courier Cash Pickups Are Driving Crypto Scams</title>
      <link>https://www.infosecurity-magazine.com/news/fbi-warns-courier-cash-pickups/</link>
      <description>The FBI claims couriers are being used to circumvent bank transfers in crypto investment schemes</description>
      <pubDate>Tue, 16 Jun 2026 08:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fbi-warns-courier-cash-pickups/</guid>
    </item>
    <item>
      <title>Attackers Hijack Popular WordPress Plugins to Deploy Backdoors</title>
      <link>https://www.infosecurity-magazine.com/news/wordpress-plugin-supply-chain/</link>
      <description>Tampered OptinMonster and sister plugins plant hidden backdoors on 1.2 million WordPress sites</description>
      <pubDate>Mon, 15 Jun 2026 17:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/wordpress-plugin-supply-chain/</guid>
    </item>
    <item>
      <title>Adriatic Port Cyber-Attack by Anubis Sparks Warning Over Maritime Security Risks</title>
      <link>https://www.infosecurity-magazine.com/news/anubis-ransomware-adriatic-port/</link>
      <description>How the Anubis ransomware group stole and leaked an Italian Adriatic port authority's data</description>
      <pubDate>Mon, 15 Jun 2026 16:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/anubis-ransomware-adriatic-port/</guid>
    </item>
    <item>
      <title>Cybersecurity Experts Urge US to Lift Ban on Anthropic's Frontier AI Models</title>
      <link>https://www.infosecurity-magazine.com/news/cyber-experts-urge-us-lift-ban/</link>
      <description>Access to two Anthropic large language models, Mythos 5 and Fable 5, has effectively been banned to any non-US nationals by the Trump administration</description>
      <pubDate>Mon, 15 Jun 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cyber-experts-urge-us-lift-ban/</guid>
    </item>
    <item>
      <title>UK Government Finds 400+ Vulnerabilities in AI Hackathons</title>
      <link>https://www.infosecurity-magazine.com/news/uk-government-400-vulnerabilities/</link>
      <description>Government departments find hundreds of vulnerabilities after testing frontier models</description>
      <pubDate>Mon, 15 Jun 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-government-400-vulnerabilities/</guid>
    </item>
    <item>
      <title>Maine Takes Breach Reporting Portal Offline After Fake Entries</title>
      <link>https://www.infosecurity-magazine.com/news/maine-breach-reporting-portal/</link>
      <description>The Office of the Maine Attorney General has suspended its breach reporting portal</description>
      <pubDate>Mon, 15 Jun 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/maine-breach-reporting-portal/</guid>
    </item>
    <item>
      <title>Ransomware Payment Crypto Laundering Platform Taken Out by FBI and Europol</title>
      <link>https://www.infosecurity-magazine.com/news/ransomware-crypto-laundering/</link>
      <description>Domain of dark web money laundering platform AudiA6 seized and suspects arrested in joint operation by the FBI, Europol and others</description>
      <pubDate>Fri, 12 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ransomware-crypto-laundering/</guid>
    </item>
    <item>
      <title>GitHub to Update npm to Thwart Software Supply Chain Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/github-update-npm-supply-chain/</link>
      <description>NPM, part of GitHub, announced a new version of the npm package manager with several security improvements, including disabling install scripts</description>
      <pubDate>Fri, 12 Jun 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/github-update-npm-supply-chain/</guid>
    </item>
    <item>
      <title>Over 80% of Sports Organizations Targeted by Hackers in the Last Year </title>
      <link>https://www.infosecurity-magazine.com/news/sports-organizations-targeted-by/</link>
      <description>As the FIFA World Cup 2026 kicks off, a new Darktrace report warns that sports teams and bodies are a major target for cyber criminals</description>
      <pubDate>Fri, 12 Jun 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/sports-organizations-targeted-by/</guid>
    </item>
    <item>
      <title>CISA Orders Agencies to Patch by Risk, Not Severity</title>
      <link>https://www.infosecurity-magazine.com/news/cisa-orders-agencies-to-patch-by/</link>
      <description>New CISA directive tells federal agencies to patch by real-world risk, not CVSS severity scores</description>
      <pubDate>Thu, 11 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisa-orders-agencies-to-patch-by/</guid>
    </item>
    <item>
      <title>Cybercriminals Use Fake AI Guides and Dev Tools to Spread AsyncRAT Malware</title>
      <link>https://www.infosecurity-magazine.com/news/fake-ai-guides-dev-tools-spread/</link>
      <description>Fake AI guides hide a multi-stage chain that drops AsyncRAT, with signs of AI-assisted coding</description>
      <pubDate>Thu, 11 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fake-ai-guides-dev-tools-spread/</guid>
    </item>
    <item>
      <title>Most Cybersecurity Teams Struggle to Find Time for Training on New Cyber Threats</title>
      <link>https://www.infosecurity-magazine.com/news/cybersecurity-training-time/</link>
      <description>Organizations are aware of the challenges that new technologies like AI bring: but cybersecurity staff struggle to make time for the required training during working hours</description>
      <pubDate>Thu, 11 Jun 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybersecurity-training-time/</guid>
    </item>
    <item>
      <title>Interpol Dismantles SniperDz Phishing-as-a-Service Platform</title>
      <link>https://www.infosecurity-magazine.com/news/interpol-dismantles-sniperdz/</link>
      <description>New revelations by Group-IB expose the full scale of the decade-old SniperDz phishing operation</description>
      <pubDate>Thu, 11 Jun 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/interpol-dismantles-sniperdz/</guid>
    </item>
    <item>
      <title>Extortion-Only Attacks Increase, With Data Theft Dominating Ransomware Claims</title>
      <link>https://www.infosecurity-magazine.com/news/extortion-only-attacks-surge/</link>
      <description>Extortion-only attacks are increasing as data theft drives most ransomware claims, with many organizations unable to stop stolen data from being exposed</description>
      <pubDate>Thu, 11 Jun 2026 10:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/extortion-only-attacks-surge/</guid>
    </item>
    <item>
      <title>New “Agentjacking” Attacks Could Hijack AI Coding Agents</title>
      <link>https://www.infosecurity-magazine.com/news/agentjacking-attacks-hijack-ai/</link>
      <description>Tenet Security researchers reveal how new “agentjacking” attacks could trick coding agents into executing arbitrary code</description>
      <pubDate>Thu, 11 Jun 2026 09:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/agentjacking-attacks-hijack-ai/</guid>
    </item>
    <item>
      <title>Fake Software Tutorials on TikTok Spread Vidar Stealer</title>
      <link>https://www.infosecurity-magazine.com/news/fake-software-videos-tiktok-vidar/</link>
      <description>Threat actors push fake free-software tutorials on TikTok and Instagram to spread Vidar stealer</description>
      <pubDate>Wed, 10 Jun 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fake-software-videos-tiktok-vidar/</guid>
    </item>
    <item>
      <title>New SilabRAT Trojan Hijacks Sessions to Steal Crypto</title>
      <link>https://www.infosecurity-magazine.com/news/silabrat-trojan-session-hijacking/</link>
      <description>MaaS trojan SilabRAT uses HVNC and browser cloning to hijack sessions and steal crypto</description>
      <pubDate>Wed, 10 Jun 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/silabrat-trojan-session-hijacking/</guid>
    </item>
    <item>
      <title>Cybersecurity Software Fails to Detect Fifth of Brower-Based Phishing Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/cybersecurity-fails-to-detect/</link>
      <description>Menlo Security research warns that as enterprise applications become increasingly browser based, traditional cybersecurity tools leave them vulnerable to cyber threats</description>
      <pubDate>Wed, 10 Jun 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybersecurity-fails-to-detect/</guid>
    </item>
    <item>
      <title>New Fable 5 Is a "Mythos-Class" LLM Available to All, Anthropic Announces</title>
      <link>https://www.infosecurity-magazine.com/news/fable-5-mythos-class-anthropic/</link>
      <description>Anthropic unveils Claude Mythos 5 and Fable 5, a restricted-access frontier AI model and guardrailed version for everyone to use</description>
      <pubDate>Wed, 10 Jun 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fable-5-mythos-class-anthropic/</guid>
    </item>
    <item>
      <title>Over a Quarter of Identity Crime Victims Hit by Multiple Incidents, ITRC Data Shows</title>
      <link>https://www.infosecurity-magazine.com/news/quarter-identity-crime-victims/</link>
      <description>Nearly 26% of identity crime victims faced multiple incidents in the past year, as ITRC warns of a growing "multi-layered crisis"</description>
      <pubDate>Wed, 10 Jun 2026 10:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/quarter-identity-crime-victims/</guid>
    </item>
    <item>
      <title>Microsoft Fixes 200 CVEs in June Patch Tuesday </title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-fixes-200-cves-in-june/</link>
      <description>Microsoft has patched 200 vulnerabilities including three zero-days</description>
      <pubDate>Wed, 10 Jun 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-fixes-200-cves-in-june/</guid>
    </item>
    <item>
      <title>75% of Firms Deploy Vulnerable Code Amid Pressure on CISOs, Report Finds</title>
      <link>https://www.infosecurity-magazine.com/news/firms-deploy-vulnerable-code/</link>
      <description>Checkmarx report warns that business pressure is among the reason security leaders let security compliance slip</description>
      <pubDate>Tue, 09 Jun 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/firms-deploy-vulnerable-code/</guid>
    </item>
    <item>
      <title>AI Coding Adoption Hits 97% but Governance Lags Behind</title>
      <link>https://www.infosecurity-magazine.com/news/ai-coding-adoption-governance-lags/</link>
      <description>Most dev teams use AI coding assistants but only 30% have full governance in place</description>
      <pubDate>Tue, 09 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-coding-adoption-governance-lags/</guid>
    </item>
    <item>
      <title>Critical phpBB Flaw Lets Attackers Hijack Any Account with One Request</title>
      <link>https://www.infosecurity-magazine.com/news/phpbb-authentication-bypass/</link>
      <description>Critical phpBB authentication bypass lets attackers hijack any account with one request</description>
      <pubDate>Tue, 09 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/phpbb-authentication-bypass/</guid>
    </item>
    <item>
      <title>Google Releases Patch for Chrome Vulnerability Exploited in the Wild</title>
      <link>https://www.infosecurity-magazine.com/news/google-patch-chrome-vulnerability/</link>
      <description>The flaw, CVE-2026-11645, can allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page</description>
      <pubDate>Tue, 09 Jun 2026 10:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/google-patch-chrome-vulnerability/</guid>
    </item>
    <item>
      <title>Check Point Warns Critical Auth Bypass Bug Exploited in the Wild</title>
      <link>https://www.infosecurity-magazine.com/news/check-point-critical-auth-bypass/</link>
      <description>Check Point says a critical vulnerability in its Remote Access VPN and Mobile Access solutions has been exploited by Qilin</description>
      <pubDate>Tue, 09 Jun 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/check-point-critical-auth-bypass/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Why JLR’s CISO Enforced In-Person Password Resets Following Cyber-Attack</title>
      <link>https://www.infosecurity-magazine.com/news/jlr-cyberattack-ciso-inperson/</link>
      <description>Speaking at Infosecurity Europe, Ashish Shrestha, former CISO at Jaguar Land Rover revealed why he wanted over 30,000 employees to change their passwords in the immediate aftermath of the incident </description>
      <pubDate>Tue, 09 Jun 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/jlr-cyberattack-ciso-inperson/</guid>
    </item>
    <item>
      <title>WhatsApp Discovers NSO Group-Linked Spearphishing Attempts</title>
      <link>https://www.infosecurity-magazine.com/news/whatsapp-nso-group-spearphishing/</link>
      <description>Meta’s WhatsApp demands contempt ruling after users report NSO Group-linked phishing</description>
      <pubDate>Tue, 09 Jun 2026 08:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/whatsapp-nso-group-spearphishing/</guid>
    </item>
    <item>
      <title>North Korean Hackers Use Fake Coding Tasks to Steal Crypto</title>
      <link>https://www.infosecurity-magazine.com/news/north-korean-hackers-developers/</link>
      <description>North Korean actor UNK_DeadDrop targeted developers with fake coding tasks to steal crypto</description>
      <pubDate>Mon, 08 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/north-korean-hackers-developers/</guid>
    </item>
    <item>
      <title>OpenAI Unveils ChatGPT Account Security Controls</title>
      <link>https://www.infosecurity-magazine.com/news/chatgpt-lockdown-mode-active/</link>
      <description>OpenAI brings Lockdown Mode and Active Sessions to ChatGPT to curb prompt injection data theft</description>
      <pubDate>Mon, 08 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chatgpt-lockdown-mode-active/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Prompt Injection Remains Unsolved, OWASP Researcher Warns</title>
      <link>https://www.infosecurity-magazine.com/news/infosec-europe-prompt-injection/</link>
      <description>At Infosecurity Europe 2026, OWASP’s Ariel Fogel warned that prompt injection remains an “unresolved problem” within generative AI architecture</description>
      <pubDate>Mon, 08 Jun 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/infosec-europe-prompt-injection/</guid>
    </item>
    <item>
      <title>Two-Thirds of Open Source Community Unaware of Cyber Resilience Act</title>
      <link>https://www.infosecurity-magazine.com/news/open-source-unaware-cyber/</link>
      <description />
      <pubDate>Mon, 08 Jun 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/open-source-unaware-cyber/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: How DSIT Protects Thousands of UK Orgs from Cyber Vulnerabilities</title>
      <link>https://www.infosecurity-magazine.com/news/infosecurity-europe-dsit-cyber/</link>
      <description>The Department of Science, Innovation and Technology details how a combination of hands-on human advice and technology systems keeps government agencies safe</description>
      <pubDate>Mon, 08 Jun 2026 08:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/infosecurity-europe-dsit-cyber/</guid>
    </item>
    <item>
      <title>Meta AI Bug Exposes Over 20,000 Instagram Accounts</title>
      <link>https://www.infosecurity-magazine.com/news/over-20000-instagram-accounts/</link>
      <description>Meta confirms an AI tool vulnerability led to unauthorized access to Instagram accounts after a failure in email verification during password reset</description>
      <pubDate>Mon, 08 Jun 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/over-20000-instagram-accounts/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Practical Lessons From Lloyds' Agentic AI Security Playbook</title>
      <link>https://www.infosecurity-magazine.com/news/lloyds-agentic-ai-security-playbook/</link>
      <description>Lloyds Banking Group shared its approach for securing agentic AI workflows, with a mix of hands on experimentation and cross functional governance</description>
      <pubDate>Fri, 05 Jun 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/lloyds-agentic-ai-security-playbook/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: OWASP Introduces Agentic AI Security Maturity Framework</title>
      <link>https://www.infosecurity-magazine.com/news/owasp-agentic-ai-security-maturity/</link>
      <description>The OWASP agentic AI security framework helps organizations assess governance maturity vs adoption and adjust governance as needed</description>
      <pubDate>Fri, 05 Jun 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/owasp-agentic-ai-security-maturity/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: AI Coding Tools Need Built-In Security for Agentic Development Era</title>
      <link>https://www.infosecurity-magazine.com/news/ai-coding-tools-security-agentic/</link>
      <description>Ox Security field CTO, Boaz Barzel, makes the case for vibe security to tackle AI agent coding risks</description>
      <pubDate>Fri, 05 Jun 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-coding-tools-security-agentic/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Reactive Security Is Failing Healthcare Organizations, Experts Warn</title>
      <link>https://www.infosecurity-magazine.com/news/reactive-security-failing/</link>
      <description>A perfect storm of legacy devices, hyper connectivity and human fatigue is bad news for the healthcare sector, warns Cyber Salus</description>
      <pubDate>Fri, 05 Jun 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/reactive-security-failing/</guid>
    </item>
    <item>
      <title>Everest Forms Pro Vulnerability Allows Remote Code Execution on WordPress Sites</title>
      <link>https://www.infosecurity-magazine.com/news/everest-forms-pro-rce-actively/</link>
      <description>Critical Everest Forms Pro RCE flaw exploited to create rogue WordPress admin accounts</description>
      <pubDate>Thu, 04 Jun 2026 16:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/everest-forms-pro-rce-actively/</guid>
    </item>
    <item>
      <title>Chinese-Speaking Actor TA4922 Widens Its Global Reach</title>
      <link>https://www.infosecurity-magazine.com/news/ta4922-global-expansion/</link>
      <description>Newly named Chinese-speaking actor TA4922 expands from East Asia into Europe and Africa</description>
      <pubDate>Thu, 04 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ta4922-global-expansion/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: AI Adoption Creates New Opportunities for Attackers to Distribute Malware, Microsoft Warns </title>
      <link>https://www.infosecurity-magazine.com/news/attackers-ai-adoption-malware/</link>
      <description>Microsoft Detection and Response Team (DART) details how it has uncovered malicious AI applications as cyber criminals manipulate organizations adopting AI tools</description>
      <pubDate>Thu, 04 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/attackers-ai-adoption-malware/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Mythos Outperforms GPT5.5 on Google Chrome Vulnerability Exploits, Says New Benchmark</title>
      <link>https://www.infosecurity-magazine.com/news/mythos-gpt-chrome-exploits/</link>
      <description>A Bugcrowd researcher has unveiled ExploitBench, an independent benchmark of AI models for vulnerability exploitation</description>
      <pubDate>Thu, 04 Jun 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/mythos-gpt-chrome-exploits/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: How Proton Fights Against Cybercriminals Using Its Services</title>
      <link>https://www.infosecurity-magazine.com/news/how-proton-fights-against/</link>
      <description>Proton uses machine learning models to detect abuse of its services – especially email addresses used by cybercriminals</description>
      <pubDate>Thu, 04 Jun 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/how-proton-fights-against/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: How Businesses Can Prepare for a Cybersecurity Crisis with Effective Plans</title>
      <link>https://www.infosecurity-magazine.com/news/infosecurity-europe-cybersecurity/</link>
      <description>Cybersecurity and business leaders with experience of dealing with major incidents from within the NCSC and at JLR detail what you need to prioritize if your organization is hit by a cyber-attack</description>
      <pubDate>Thu, 04 Jun 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/infosecurity-europe-cybersecurity/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Ukraine’s Experience Highlights the Need for Preparation and Resilience in Cybersecurity</title>
      <link>https://www.infosecurity-magazine.com/news/resilience-perseverance-ukraine/</link>
      <description>Former Ukrainian foreign minister, Dmytro Kuleba, urges Infosecurity Europe attendees to fight the good fight</description>
      <pubDate>Thu, 04 Jun 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/resilience-perseverance-ukraine/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Raise Security Concerns with Procurement Now, Because Quantum Can’t Wait </title>
      <link>https://www.infosecurity-magazine.com/news/raise-security-procurement-quantum/</link>
      <description>Forescout VP of security intelligence, Rik Ferguson, warns that Q-day is fast approaching</description>
      <pubDate>Thu, 04 Jun 2026 07:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/raise-security-procurement-quantum/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Vulnerability Management Innovator Konvu Wins Cyber Startup Award</title>
      <link>https://www.infosecurity-magazine.com/news/konvu-wins-cyber-startup-award/</link>
      <description>
Inaugural Infosecurity Europe Cyber Startup Award Winner Impresses Panel with Ability Help Prioritize Vulnerabilities in AI era</description>
      <pubDate>Wed, 03 Jun 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/konvu-wins-cyber-startup-award/</guid>
    </item>
    <item>
      <title>Trump Signs Order Inviting Voluntary Review of Frontier AI Models</title>
      <link>https://www.infosecurity-magazine.com/news/trump-eo-voluntary-frontier-ai/</link>
      <description>Trump's executive order invites voluntary pre-release review of frontier AI models</description>
      <pubDate>Wed, 03 Jun 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trump-eo-voluntary-frontier-ai/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: How to Get Boards to Prioritize Cyber Risk Quantification</title>
      <link>https://www.infosecurity-magazine.com/news/infosecurity-europe-board-cyber/</link>
      <description>Cybersecurity leaders major companies discuss how they got support from the board on cyber risk</description>
      <pubDate>Wed, 03 Jun 2026 10:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/infosecurity-europe-board-cyber/</guid>
    </item>
    <item>
      <title>Anthropic Expands Mythos Access to 150 More Organizations</title>
      <link>https://www.infosecurity-magazine.com/news/anthropic-glasswing-expansion/</link>
      <description>Anthropic widens Project Glasswing access to 150 more firms as patching becomes the bottleneck</description>
      <pubDate>Wed, 03 Jun 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/anthropic-glasswing-expansion/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Patch Responsibility Remains Up for Grabs as AI Unearths Decades of Flaws</title>
      <link>https://www.infosecurity-magazine.com/news/patch-responsibility-ai-infosec/</link>
      <description>The emergence of AI models capable to autonomously find and fix vulnerabilities at scale is having a significant impact on patching management, experts say</description>
      <pubDate>Wed, 03 Jun 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/patch-responsibility-ai-infosec/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Execs Must Treat Cyber Threats as Statecraft, ISACA Expert Say</title>
      <link>https://www.infosecurity-magazine.com/news/execs-cisos-must-treat-cyber/</link>
      <description>Private firms are being targeted by nation-state groups for reasons beyond finance, argued ISACA’s Bharat Thakrar</description>
      <pubDate>Wed, 03 Jun 2026 08:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/execs-cisos-must-treat-cyber/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: AI-Powered Cybercrime Tools Surge on Dark Web</title>
      <link>https://www.infosecurity-magazine.com/news/cybercrime-ai-tools-surge-3800/</link>
      <description>Halcyon’s Cynthia Kaiser lifts the lid on the dark web market for AI cybercrime tools</description>
      <pubDate>Wed, 03 Jun 2026 07:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybercrime-ai-tools-surge-3800/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: NCSC Urges Immediate Action to Boost Resilience as Uncertainty Persists</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-resilience-certainty-is-never/</link>
      <description>NCSC director of operations, Paul Chichester, says it’s time to future-proof cybersecurity today</description>
      <pubDate>Tue, 02 Jun 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-resilience-certainty-is-never/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Cybersecurity Teams Which Don’t Leverage AI are "Doomed to Fail"</title>
      <link>https://www.infosecurity-magazine.com/news/cybersecurity-teams-doomed-to-fail/</link>
      <description>Humans still need to be part of cyber defense, but refusing to deploy AI is no longer optional against AI-enhanced cyber threats, warns Dataminr’s Joe Slowik</description>
      <pubDate>Tue, 02 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybersecurity-teams-doomed-to-fail/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Bayer Reinvents Security Awareness Training to Counter AI Threats</title>
      <link>https://www.infosecurity-magazine.com/news/bayer-reinvents-security-awareness/</link>
      <description>Bayer’s security awareness training now focuses on psychological approaches rather than technical methods for detecting social engineering</description>
      <pubDate>Tue, 02 Jun 2026 13:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/bayer-reinvents-security-awareness/</guid>
    </item>
    <item>
      <title>Threat Actor Uses AI to Build EDR Evasion Tools</title>
      <link>https://www.infosecurity-magazine.com/news/ai-edr-evasion-tooling/</link>
      <description>A threat actor used AI coding tools to build and test EDR evasion malware, Sophos finds</description>
      <pubDate>Tue, 02 Jun 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-edr-evasion-tooling/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: UK Firms Prioritize AI Threat Preparedness as Cyber Risks Evolve</title>
      <link>https://www.infosecurity-magazine.com/news/uk-firms-prioritize-ai-threat/</link>
      <description>UK organizations are prioritizing AI-driven cybersecurity as 43% cite AI-powered attacks as their top risk, prompting significant investment in advanced threat defense</description>
      <pubDate>Tue, 02 Jun 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-firms-prioritize-ai-threat/</guid>
    </item>
    <item>
      <title>Attackers Hijack Red Hat npm Scope to Steal Cloud Secrets</title>
      <link>https://www.infosecurity-magazine.com/news/red-hat-npm-scope-backdoored/</link>
      <description>Attackers backdoored 32 packages in Red Hat's official npm scope to steal cloud and CI secrets</description>
      <pubDate>Tue, 02 Jun 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/red-hat-npm-scope-backdoored/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Business Leaders Lack Understanding of Threat Intelligence, Study Warns</title>
      <link>https://www.infosecurity-magazine.com/news/business-leaders-struggle-threat/</link>
      <description>A new Silobreaker and SANS Institute paper examines the ‘Intelligence-Stakeholder Gap’ and what organizations must do to achieve business buy-in on threat intelligence</description>
      <pubDate>Tue, 02 Jun 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/business-leaders-struggle-threat/</guid>
    </item>
    <item>
      <title>Critical Flowise Flaw Gives Attackers Full Server Control</title>
      <link>https://www.infosecurity-magazine.com/news/flowise-mcp-rce-poc/</link>
      <description>Obsidian publishes PoC for a 1-click Flowise RCE that can fully compromise self-hosted servers</description>
      <pubDate>Mon, 01 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/flowise-mcp-rce-poc/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Tabletop Exercise to Test How CISOs Respond to Major Supermarket Cyber-Attack </title>
      <link>https://www.infosecurity-magazine.com/news/infosecurity-europe-semperis/</link>
      <description>Semperis is set to bring ‘Enter the War Room: A Tabletop Experience’ to Infosecurity Europe to help cybersecurity leaders prepare to face real incidents</description>
      <pubDate>Mon, 01 Jun 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/infosecurity-europe-semperis/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: AI SOCs Will Still Need SOC Analysts, Security Vendors Say</title>
      <link>https://www.infosecurity-magazine.com/news/ai-soc-still-need-analysts/</link>
      <description>Top cybersecurity vendors said AI won't replace entry-level – only routine ticket-taking and triage</description>
      <pubDate>Mon, 01 Jun 2026 11:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-soc-still-need-analysts/</guid>
    </item>
    <item>
      <title>FSB Group Gamaredon Hides Worm in Windows Data Streams</title>
      <link>https://www.infosecurity-magazine.com/news/gamaredon-worm-ntfs-data-streams/</link>
      <description>FSB-linked Gamaredon concealed a fileless worm in NTFS data streams to spy on Ukraine targets</description>
      <pubDate>Mon, 01 Jun 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gamaredon-worm-ntfs-data-streams/</guid>
    </item>
    <item>
      <title>Attackers Abuse Shared Content for ChatGPT Phishing Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/attackers-shared-content-chatgpt/</link>
      <description>Push Security says threat actors are delivering malware hosted on chatgpt.com/s/ domain </description>
      <pubDate>Mon, 01 Jun 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/attackers-shared-content-chatgpt/</guid>
    </item>
    <item>
      <title>Palo Alto Warns High-Severity Bug Is Being Actively Exploited</title>
      <link>https://www.infosecurity-magazine.com/news/palo-alto-highseverity-bug/</link>
      <description>A vulnerability in Palo Alto Networks’ PAN-OS software is being exploited in attacks</description>
      <pubDate>Mon, 01 Jun 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/palo-alto-highseverity-bug/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: OWASP Forms New Agentic Research Council</title>
      <link>https://www.infosecurity-magazine.com/news/owasp-new-agentic-research-council/</link>
      <description>OWASP’s new Agentic Research Council will aim to connect academic work to operational realities on agentic AI security</description>
      <pubDate>Mon, 01 Jun 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/owasp-new-agentic-research-council/</guid>
    </item>
    <item>
      <title>Silent Ransom Group Uses In-Person IT Impersonation to Breach Systems</title>
      <link>https://www.infosecurity-magazine.com/news/silent-ransom-group-it/</link>
      <description>Threat actors from the Silent Ransom Group, aka Luna Moth, are escalating attacks by impersonating IT staff in phone calls and even showing up in person to gain direct access to victim systems</description>
      <pubDate>Fri, 29 May 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/silent-ransom-group-it/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: CyCOS Project Expands to Support UK SMEs as CIISec Takes Over</title>
      <link>https://www.infosecurity-magazine.com/news/cycos-expands-uk-smes-ciisec/</link>
      <description>From a research-driven pilot, the Cybersecurity Communities of Support (CyCOS) is about to be handed over to CIISec</description>
      <pubDate>Fri, 29 May 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cycos-expands-uk-smes-ciisec/</guid>
    </item>
    <item>
      <title>Chinese Hackers Exploit Iran War to Target Maritime and Energy Companies</title>
      <link>https://www.infosecurity-magazine.com/news/chinese-hackers-exploit-iran-war/</link>
      <description>ESET’s 2026 APT Activity Report suggests China-backed APTs are using instability in the region to target victims, as well as continuing activity against organizations around the globe</description>
      <pubDate>Fri, 29 May 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chinese-hackers-exploit-iran-war/</guid>
    </item>
    <item>
      <title>AI-Generated npm Malware Leaks Its Own GitHub Token</title>
      <link>https://www.infosecurity-magazine.com/news/ai-npm-malware-leaks-github-token/</link>
      <description>Sloppy AI-generated npm infostealer leaked its own GitHub token, exposing the operator</description>
      <pubDate>Fri, 29 May 2026 08:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-npm-malware-leaks-github-token/</guid>
    </item>
    <item>
      <title>Attackers Move Past Typosquatting to Realistic Package Impersonation</title>
      <link>https://www.infosecurity-magazine.com/news/attackers-beyond-typosquatting/</link>
      <description>Most malicious open source packages now mimic real code rather than rely on typosquatting</description>
      <pubDate>Thu, 28 May 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/attackers-beyond-typosquatting/</guid>
    </item>
    <item>
      <title>Microsoft Condemns "Uncoordinated" Zero Day Disclosures</title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-uncoordinated-zeroday/</link>
      <description>Microsoft warned the disclosure of several unpatched vulnerabilities without notice has put “customers at unnecessary risk”</description>
      <pubDate>Thu, 28 May 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-uncoordinated-zeroday/</guid>
    </item>
    <item>
      <title>New Threat Actor Jinx-0164 Targets Crypto Developers on macOS</title>
      <link>https://www.infosecurity-magazine.com/news/jinx-0164-crypto-developers-macos/</link>
      <description>New actor Jinx-0164 hit crypto developers with fake recruiter lures and macOS malware</description>
      <pubDate>Thu, 28 May 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/jinx-0164-crypto-developers-macos/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Cybersecurity Staff Prefer CISOs With Real Attack Response Experience, Study Reveals </title>
      <link>https://www.infosecurity-magazine.com/news/infosecurity-europe-isc2/</link>
      <description>ISC2 survey of cybersecurity professionals suggests that staff want their information security leaders to have experienced reacting to a significant cyber incident</description>
      <pubDate>Thu, 28 May 2026 10:01:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/infosecurity-europe-isc2/</guid>
    </item>
    <item>
      <title>GCHQ Chief Urges Action as AI Reshapes Cyber Threats</title>
      <link>https://www.infosecurity-magazine.com/news/gchq-keast-butler-cyber-action-ai/</link>
      <description>GCHQ director urges urgent business cyber action as AI and quantum reshape the threat</description>
      <pubDate>Thu, 28 May 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gchq-keast-butler-cyber-action-ai/</guid>
    </item>
    <item>
      <title>CrowdStrike, Google Take Down Glassworm Botnet</title>
      <link>https://www.infosecurity-magazine.com/news/crowdstrike-google-takedown/</link>
      <description>Operators of the malicious Glassworm botnet have been targeting software developers since at least early 2025</description>
      <pubDate>Wed, 27 May 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/crowdstrike-google-takedown/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Why Burnout in Cybersecurity Demands Risk-Based Response</title>
      <link>https://www.infosecurity-magazine.com/news/why-burnout-cybersecurity-risk/</link>
      <description>Cybermindz warns that cybersecurity burnout is a growing risk, urging organizations to move beyond wellness initiatives and adopt a measurable, risk-based approach to workforce stress</description>
      <pubDate>Wed, 27 May 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/why-burnout-cybersecurity-risk/</guid>
    </item>
    <item>
      <title>All Major LLMs Exposed to Multi-Turn Manipulation, Warn Researchers</title>
      <link>https://www.infosecurity-magazine.com/news/all-major-llms-exposed-to-multi/</link>
      <description />
      <pubDate>Wed, 27 May 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/all-major-llms-exposed-to-multi/</guid>
    </item>
    <item>
      <title>Thousands of Fake FIFA Domains Target World Cup Fans</title>
      <link>https://www.infosecurity-magazine.com/news/ghost-stadium-fifa-world-cup-fraud/</link>
      <description>Group-IB uncovered Ghost Stadium phishing and 4300 fake FIFA World Cup domains targeting fans</description>
      <pubDate>Wed, 27 May 2026 11:28:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ghost-stadium-fifa-world-cup-fraud/</guid>
    </item>
    <item>
      <title>68% of UK Firms Plan to Increase Cyber Spending as AI Risks Rise</title>
      <link>https://www.infosecurity-magazine.com/news/uk-firms-cyber-spending-ai-risks/</link>
      <description>UK firms plan higher cyber spending as AI adoption raises security concerns</description>
      <pubDate>Wed, 27 May 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-firms-cyber-spending-ai-risks/</guid>
    </item>
    <item>
      <title>PureLogs Variant Steals Data via Purchase Order Lures</title>
      <link>https://www.infosecurity-magazine.com/news/purelogs-phishing-purchase-order/</link>
      <description>FortiGuard Labs detailed a PureLogs campaign using JavaScript, PowerShell and process hollowing</description>
      <pubDate>Wed, 27 May 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/purelogs-phishing-purchase-order/</guid>
    </item>
    <item>
      <title>Chinese Threat Actors Ditch Static Phishing Pages for Live Credential Interception</title>
      <link>https://www.infosecurity-magazine.com/news/chinese-phishing-live-credential/</link>
      <description>Almost all organizations impersonated by Chinese phishing platforms are non-Chinese entities, suggesting operators deliberately avoid domestic targets </description>
      <pubDate>Tue, 26 May 2026 14:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chinese-phishing-live-credential/</guid>
    </item>
    <item>
      <title>BTMOB Android RAT Spreads Through No-Code Builder Tooling</title>
      <link>https://www.infosecurity-magazine.com/news/btmob-android-rat-maas-builder/</link>
      <description>BTMOB Android RAT sold as a service with a no-code builder for fast, regional phishing lures</description>
      <pubDate>Tue, 26 May 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/btmob-android-rat-maas-builder/</guid>
    </item>
    <item>
      <title>India's CERT-In Sets 12-Hour Patch Deadline for Exposed Flaws</title>
      <link>https://www.infosecurity-magazine.com/news/cert-in-12-hour-patch-deadline-ai/</link>
      <description>CERT-In urges 12-hour patching of exposed flaws as AI compresses exploitation timelines</description>
      <pubDate>Tue, 26 May 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cert-in-12-hour-patch-deadline-ai/</guid>
    </item>
    <item>
      <title>Iran-Linked Hackers Target US Aviation with Phishing and SEO Poisoning Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/iranian-hackers-us-aviation/</link>
      <description>Iran's Nimbus Manticore pushes AI-built MiniFast backdoor via phishing and SEO poisoning</description>
      <pubDate>Tue, 26 May 2026 09:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/iranian-hackers-us-aviation/</guid>
    </item>
    <item>
      <title>FBI Warns 'Kali365' Phishing Kit Hijacks Microsoft 365 OAuth Tokens</title>
      <link>https://www.infosecurity-magazine.com/news/fbi-kali365-phishing-kit-m365/</link>
      <description>The Kali365 phishing-as-a-service platform lowers the barrier of entry for cybercriminals, said the FBI</description>
      <pubDate>Mon, 25 May 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fbi-kali365-phishing-kit-m365/</guid>
    </item>
    <item>
      <title>Fake Streams, Counterfeit Merch and Other Scams: How Fraudsters Target F1 Fans</title>
      <link>https://www.infosecurity-magazine.com/news/how-fraudsters-target-f1-fans/</link>
      <description>From fake F1 streams to counterfeit merch, fraudsters are exploiting fans online and the Bitdefender Cybersecurity Grand Prix Fan Threat Index details how</description>
      <pubDate>Mon, 25 May 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/how-fraudsters-target-f1-fans/</guid>
    </item>
    <item>
      <title>Fake Gemini and Claude Code Sites Spread Infostealers Through SEO Poisoning</title>
      <link>https://www.infosecurity-magazine.com/news/gemini-claude-infostealers-seo/</link>
      <description>The infostealer payload in this campaign collect a vast amount of data, from collaboration authentication keys to cryptocurrency wallets</description>
      <pubDate>Fri, 22 May 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gemini-claude-infostealers-seo/</guid>
    </item>
    <item>
      <title>Apple Blocked $2.2bn in App Store Fraud in the Last Year</title>
      <link>https://www.infosecurity-magazine.com/news/apple-blocked-2bn-app-store-fraud/</link>
      <description>Total figure for fraudulent transactions Apple has blocked since 2020 now stands at over $11bn</description>
      <pubDate>Fri, 22 May 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/apple-blocked-2bn-app-store-fraud/</guid>
    </item>
    <item>
      <title>Cybercriminal VPN Dismantled in Europol Crackdown</title>
      <link>https://www.infosecurity-magazine.com/news/first-vpn-takedown-europol/</link>
      <description>First VPN, a service used by ransomware actors and fraudsters, was dismantled by Europol</description>
      <pubDate>Thu, 21 May 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/first-vpn-takedown-europol/</guid>
    </item>
    <item>
      <title>GitHub Breach Traced to Malicious 'Nx Console' VS Code Extension</title>
      <link>https://www.infosecurity-magazine.com/news/github-breach-nx-console-vs-code/</link>
      <description>A threat actor compromised an Nx developer and posed as a legitimate maintainer to publish a malicious extension on Visual Studio Marketplace</description>
      <pubDate>Thu, 21 May 2026 14:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/github-breach-nx-console-vs-code/</guid>
    </item>
    <item>
      <title>Three-Quarters of Firms Knowingly Ship Vulnerable Code</title>
      <link>https://www.infosecurity-magazine.com/news/threequarters-knowingly-ship/</link>
      <description>AI risks threaten to permeate supply chains through unvetted code and unaudited suppliers</description>
      <pubDate>Thu, 21 May 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/threequarters-knowingly-ship/</guid>
    </item>
    <item>
      <title>Nine-Year-Old Linux Kernel Flaw Leaks SSH Keys and Password Hashes</title>
      <link>https://www.infosecurity-magazine.com/news/linux-kernel-ptrace-flaw-ssh-keys/</link>
      <description>Qualys finds nine-year-old Linux ptrace flaw exposing SSH keys and password hashes locally</description>
      <pubDate>Thu, 21 May 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/linux-kernel-ptrace-flaw-ssh-keys/</guid>
    </item>
    <item>
      <title>Grafana Labs Says Code Breach Stemmed from TanStack Attack</title>
      <link>https://www.infosecurity-magazine.com/news/grafana-labs-code-breach-tanstack/</link>
      <description>Grafana Labs has confirmed a recent data breach was caused by the TanStack supply chain attack</description>
      <pubDate>Thu, 21 May 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/grafana-labs-code-breach-tanstack/</guid>
    </item>
    <item>
      <title>Android Malware Campaign Used Hundreds of Fake Apps to Silently Charge Users</title>
      <link>https://www.infosecurity-magazine.com/news/android-carrier-billing-fraud-four/</link>
      <description>Premium Deception campaign uses 250 Android apps to silently sign victims up to paid services</description>
      <pubDate>Wed, 20 May 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/android-carrier-billing-fraud-four/</guid>
    </item>
    <item>
      <title>Mini Shai-Hulud Hits Hundreds of npm Packages in AntV Ecosystem</title>
      <link>https://www.infosecurity-magazine.com/news/antv-npm-mini-shai-hulud-largest/</link>
      <description>Mini Shai-Hulud worm hits Alibaba AntV ecosystem in largest npm supply chain wave to date</description>
      <pubDate>Wed, 20 May 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/antv-npm-mini-shai-hulud-largest/</guid>
    </item>
    <item>
      <title>China-Linked Webworm APT Evolves Tactics, Expands to European Targets </title>
      <link>https://www.infosecurity-magazine.com/news/webworm-apt-evolves-tactics/</link>
      <description>China-linked Webworm APT expands beyond Asia, targeting European government organizations and refining its cyber espionage tactics, according to ESET research</description>
      <pubDate>Wed, 20 May 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/webworm-apt-evolves-tactics/</guid>
    </item>
    <item>
      <title>GitHub Confirms Breach of Internal Repositories Via Malicious VS Code Extension</title>
      <link>https://www.infosecurity-magazine.com/news/github-confirms-breach-vs-code/</link>
      <description>The prolific threat group TeamPCP has claimed a hack into GitHub’s internal repositories</description>
      <pubDate>Wed, 20 May 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/github-confirms-breach-vs-code/</guid>
    </item>
    <item>
      <title>Researchers Warn CypherLoc Scareware Has Targeted Millions of Users </title>
      <link>https://www.infosecurity-magazine.com/news/researchers-cypherloc-scareware/</link>
      <description>Barracuda reveals new CypherLoc scareware has featured in nearly three million attacks</description>
      <pubDate>Wed, 20 May 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/researchers-cypherloc-scareware/</guid>
    </item>
    <item>
      <title>Verizon DBIR: Vulnerability Exploits Overtake Credentials as Top Access Vector</title>
      <link>https://www.infosecurity-magazine.com/news/verizon-dbir-exploits-top-access/</link>
      <description>Verizon DBIR finds 31% of data breaches began with software flaws last year</description>
      <pubDate>Wed, 20 May 2026 08:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/verizon-dbir-exploits-top-access/</guid>
    </item>
    <item>
      <title>Microsoft Takes Down Fox Tempest for Providing Ransomware-Enabling Signing Tool</title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-takes-down-fox-tempest/</link>
      <description>Microsoft’s Digital Crimes Unit has taken down the infrastructure of Fox Tempest, a prolific cybercrime-enabling threat group</description>
      <pubDate>Tue, 19 May 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-takes-down-fox-tempest/</guid>
    </item>
    <item>
      <title>AI Raises the Bar on Vulnerability Awareness and Secure-by-Design Software</title>
      <link>https://www.infosecurity-magazine.com/news/ai-raises-vulnerability-awareness/</link>
      <description>AI-powered vulnerability scanning leaves no excuse for unpatched bugs as the EU Cyber Resilience Act pushes firms toward secure-by-design software</description>
      <pubDate>Tue, 19 May 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-raises-vulnerability-awareness/</guid>
    </item>
    <item>
      <title>Agentic AI Accelerates Software Builds and Mobile App Attacks </title>
      <link>https://www.infosecurity-magazine.com/news/agentic-ai-accelerates-software/</link>
      <description>Digital.ai data reveals 87% of apps were attacked over the past year</description>
      <pubDate>Tue, 19 May 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/agentic-ai-accelerates-software/</guid>
    </item>
    <item>
      <title>Grafana Labs Confirms Hackers Stole Source Code</title>
      <link>https://www.infosecurity-magazine.com/news/grafana-labs-confirms-hackers/</link>
      <description>Open source tool maker Grafana says hackers stole codebase via GitHub breach</description>
      <pubDate>Tue, 19 May 2026 09:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/grafana-labs-confirms-hackers/</guid>
    </item>
    <item>
      <title>Hackers Bypass Security Tools to Target Users Directly</title>
      <link>https://www.infosecurity-magazine.com/news/hackers-bypass-security-tools/</link>
      <description>Bridewell report calls out emergence of “fix-style” attacks</description>
      <pubDate>Tue, 19 May 2026 08:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hackers-bypass-security-tools/</guid>
    </item>
    <item>
      <title>Interpol Launches Sweeping Cybercrime Crackdown in MENA Region</title>
      <link>https://www.infosecurity-magazine.com/news/interpol-cybercrime-crackdown-mena/</link>
      <description>Over 200 people were arrested in an anti-cybercrime operation that spanned 13 countries across the Middle East and North Africa</description>
      <pubDate>Mon, 18 May 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/interpol-cybercrime-crackdown-mena/</guid>
    </item>
    <item>
      <title>The Infosecurity Europe Cyber Startup Competition: Meet the Finalists </title>
      <link>https://www.infosecurity-magazine.com/news/infosec-europe-cyber-startup/</link>
      <description>New for 2026, the Infosecurity Europe Startup competition will see five finalists pitch their ideas in front of a live audience, including senior industry leaders, investors and buyers</description>
      <pubDate>Mon, 18 May 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/infosec-europe-cyber-startup/</guid>
    </item>
    <item>
      <title>NCSC Publishes Guidance on Securing Agentic AI Use</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-publishes-guidance-securing/</link>
      <description>The UK’s National Cyber Security Centre is helping organizations to understand agentic AI security risks</description>
      <pubDate>Mon, 18 May 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-publishes-guidance-securing/</guid>
    </item>
    <item>
      <title>Security Researchers Find 47 Zero-Days at Pwn2Own Berlin</title>
      <link>https://www.infosecurity-magazine.com/news/security-researchers-47-zerodays/</link>
      <description>The research community was awarded $1.3m as it found dozens of novel vulnerabilities at Pwn2Own Berlin</description>
      <pubDate>Mon, 18 May 2026 09:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/security-researchers-47-zerodays/</guid>
    </item>
    <item>
      <title>Bank of England, FCA and Treasury Raise Alarm Over Frontier AI</title>
      <link>https://www.infosecurity-magazine.com/news/bank-england-fca-treasury-alarm/</link>
      <description>The UK’s financial authorities have set expectations for the sector on cybersecurity and operational resilience</description>
      <pubDate>Mon, 18 May 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/bank-england-fca-treasury-alarm/</guid>
    </item>
    <item>
      <title>Gremlin Stealer Evolves into Modular Threat with Advanced Evasion Capabilities </title>
      <link>https://www.infosecurity-magazine.com/news/gremlin-stealer-evolves-into/</link>
      <description>A new Gremlin stealer variant has evolved into a modular toolkit with advanced evasion and data theft capabilities, according to new Unit 42 research </description>
      <pubDate>Fri, 15 May 2026 14:19:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gremlin-stealer-evolves-into/</guid>
    </item>
    <item>
      <title>Microsoft Reports Severe Zero-Day Flaw in On-Prem Exchange Servers</title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-zeroday-exchange-servers/</link>
      <description>The zero-day vulnerability affects on-premises installations for all versions of Exchange Server 2016, 2019 and Subscription Edition</description>
      <pubDate>Fri, 15 May 2026 12:35:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-zeroday-exchange-servers/</guid>
    </item>
    <item>
      <title>China-Linked Hackers Deploy New TencShell Malware Against Global Manufacturer</title>
      <link>https://www.infosecurity-magazine.com/news/china-hackers-tencshell-malware/</link>
      <description>A suspected China-linked threat actor targeted the Indian branch of a global manufacturer leveraging an open source offensive toolkit</description>
      <pubDate>Fri, 15 May 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/china-hackers-tencshell-malware/</guid>
    </item>
    <item>
      <title>Mustang Panda Linked to Updated FDMTP Backdoor in Asia-Pacific Espionage Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/mustang-panda-fdmtp-backdoor-apj/</link>
      <description>Mustang Panda campaign deploys updated FDMTP backdoor against Asia-Pacific and Japan networks</description>
      <pubDate>Thu, 14 May 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/mustang-panda-fdmtp-backdoor-apj/</guid>
    </item>
    <item>
      <title>Google Launches Android Spyware Forensics Tool for High-Risk Users</title>
      <link>https://www.infosecurity-magazine.com/news/google-launches-android-spyware/</link>
      <description>Google’s Android Advanced Protection Mode is getting a new feature allowing trusted security experts to investigate potential spyware infections</description>
      <pubDate>Thu, 14 May 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/google-launches-android-spyware/</guid>
    </item>
    <item>
      <title>New Fragnesia Flaw Hands Linux Local Users Root Access</title>
      <link>https://www.infosecurity-magazine.com/news/fragnesia-linux-kernel-lpe-root/</link>
      <description>New Fragnesia kernel flaw lets unprivileged local users escalate to root on Linux systems</description>
      <pubDate>Thu, 14 May 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fragnesia-linux-kernel-lpe-root/</guid>
    </item>
    <item>
      <title>Most Organizations Now Use AI Agents for Sensitive Security Tasks</title>
      <link>https://www.infosecurity-magazine.com/news/most-organizations-ai-agents/</link>
      <description>Semperis study finds 74% of organizations believe AI will increase attacks on identity infrastructure</description>
      <pubDate>Thu, 14 May 2026 09:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/most-organizations-ai-agents/</guid>
    </item>
    <item>
      <title>ICO Publishes Five-Step Plan to Counter Emerging AI-Powered Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/ico-steps-in-advice-handling-ai/</link>
      <description>The Information Commissioner’s Office has released new guidance on how to mitigate the risk of AI-powered attacks</description>
      <pubDate>Thu, 14 May 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ico-steps-in-advice-handling-ai/</guid>
    </item>
    <item>
      <title>Canvas Owner Reaches Agreement With Cybercriminals After Ransomware Attack</title>
      <link>https://www.infosecurity-magazine.com/news/canvas-cybercriminals-agreement/</link>
      <description>Instructure says it reached an agreement with ShinyHunters over the Canvas breach data</description>
      <pubDate>Wed, 13 May 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/canvas-cybercriminals-agreement/</guid>
    </item>
    <item>
      <title>Avada Builder Flaws Expose One Million WordPress Sites</title>
      <link>https://www.infosecurity-magazine.com/news/avada-builder-flaws-one-million/</link>
      <description>Avada Builder flaws allowed file read and SQL injection on one million WordPress sites</description>
      <pubDate>Wed, 13 May 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/avada-builder-flaws-one-million/</guid>
    </item>
    <item>
      <title>Ransomware: Over Half of CISOs Would Consider Paying Ransom to Hackers</title>
      <link>https://www.infosecurity-magazine.com/news/ransomware-over-half-cisos-would/</link>
      <description>Survey of cybersecurity leaders suggests that majority would strongly consider paying cybercriminals, if that’s what it took to help restore encrypted systems</description>
      <pubDate>Wed, 13 May 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ransomware-over-half-cisos-would/</guid>
    </item>
    <item>
      <title>Global Cyber Agencies Issue New SBOMs for AI Guidance to Tackle AI Supply Chain Risks</title>
      <link>https://www.infosecurity-magazine.com/news/new-sboms-for-ai-guidance-2026/</link>
      <description>The G7 Cybersecurity Working Group releases new SBOM for AI guidance, outlining seven key data clusters to boost transparency and security across AI supply chains</description>
      <pubDate>Wed, 13 May 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/new-sboms-for-ai-guidance-2026/</guid>
    </item>
  </channel>
</rss>