https://www.infosecurity-magazine.com/physical-and-information-security-convergence/ Copyright © 2026 Reed Exhibitions Ltd. All Rights Reserved. https://www.infosecurity-magazine.com/news/guidance-verify-quantum-safe/ TCG has released new guidance to help proving that trusted platform modules genuinely meet essential quantum-safe requirements Mon, 24 Aug 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/guidance-verify-quantum-safe/ https://www.infosecurity-magazine.com/news/cni-iranian-attack-shuts-uk-power/ Experts argue Iranian cyber-attack on UK power plant lays bare frailty of critical national infrastructure Mon, 24 Aug 2026 09:01:00 GMT https://www.infosecurity-magazine.com/news/cni-iranian-attack-shuts-uk-power/ https://www.infosecurity-magazine.com/news/nasa-ground-control-software-flaw/ Critical AIT-GUI flaws expose spacecraft commands and scripts to unauthenticated attackers Tue, 18 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/nasa-ground-control-software-flaw/ https://www.infosecurity-magazine.com/news/unisoc-modem-flaw-rce-calls/ UNISOC modem flaw enabled kernel-level code execution through video calls Mon, 17 Aug 2026 15:45:00 GMT https://www.infosecurity-magazine.com/news/unisoc-modem-flaw-rce-calls/ https://www.infosecurity-magazine.com/news/wordpress-plugin-flaw-40000-sites/ Critical User Profile Builder flaw let unauthenticated attackers access administrator accounts Mon, 17 Aug 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/wordpress-plugin-flaw-40000-sites/ https://www.infosecurity-magazine.com/news/attack-polish-power-plant-2025-led/ The Polish CERT has released details of another 2025 attack on a combined heat and power plant in the country Wed, 12 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/attack-polish-power-plant-2025-led/ https://www.infosecurity-magazine.com/news/cursor-security-bug-command/ Cursor fixed a pre-trust code execution path in three days then closed the report as informative Tue, 11 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/cursor-security-bug-command/ https://www.infosecurity-magazine.com/news/half-uk-manufacturers-cyber/ Make UK reveals major cyber resilience gaps as 30% of UK manufacturers report recent cyber incidents Tue, 11 Aug 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/half-uk-manufacturers-cyber/ https://www.infosecurity-magazine.com/news/violent-physical-crypto-thefts/ So-called “wrench attacks” have resulted in $30m in losses so far in 2026, says Chainalysis Thu, 06 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/violent-physical-crypto-thefts/ https://www.infosecurity-magazine.com/news/paperclip-ai-vulnerabilities-rce/ 3 Paperclip flaws exposed data & allowed unauthenticated command execution in two deployment modes Wed, 05 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/paperclip-ai-vulnerabilities-rce/ https://www.infosecurity-magazine.com/news/hugging-face-diffusers-trust/ Three CVEs in Hugging Face diffusers let a malicious model repo run code on any machine that loads it Tue, 28 Jul 2026 15:15:00 GMT https://www.infosecurity-magazine.com/news/hugging-face-diffusers-trust/ https://www.infosecurity-magazine.com/news/crest-ai-pentesting-accreditation/ CREST’s new AI standards are optional add-on requirements for cybersecurity service providers wishing to demonstrate responsible AI usage Tue, 28 Jul 2026 08:57:00 GMT https://www.infosecurity-magazine.com/news/crest-ai-pentesting-accreditation/ https://www.infosecurity-magazine.com/news/iran-hackers-siemen-schneider-ics/ US government agencies have warned that Iranian cyber actors are targeting US-based Siemens and Schneider industrial equipment Thu, 23 Jul 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/iran-hackers-siemen-schneider-ics/ https://www.infosecurity-magazine.com/news/ubuntu-snap-confine-local-root-cve/ New Ubuntu snap-confine race condition lets local users escalate to root on default installs Wed, 22 Jul 2026 10:50:00 GMT https://www.infosecurity-magazine.com/news/ubuntu-snap-confine-local-root-cve/ https://www.infosecurity-magazine.com/news/trim-jailbroken-claude-ai-pentest/ Russian-speaking actor Trim built a commercial offensive AI pentest tool on jailbroken Claude models Tue, 21 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/trim-jailbroken-claude-ai-pentest/ https://www.infosecurity-magazine.com/news/uefi-shims-secure-boot-bypass/ Eleven forgotten Microsoft-signed UEFI shims can bypass Secure Boot on almost any machine Wed, 15 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/uefi-shims-secure-boot-bypass/ https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/ Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA Mon, 13 Jul 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/ https://www.infosecurity-magazine.com/news/ghostapproval-flaw-ai-coding/ Wiz discovered GhostApproval, a symlink flaw in six major AI coding assistants that bypasses approval Thu, 09 Jul 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/ghostapproval-flaw-ai-coding/ https://www.infosecurity-magazine.com/interviews/google-cloud-new-ciso-chris-betz/ In his very first interview since assuming the CISO title at Google Cloud, Cris Betz shares his vision for the role AI will play in defending global enterprises Tue, 07 Jul 2026 08:30:00 GMT https://www.infosecurity-magazine.com/interviews/google-cloud-new-ciso-chris-betz/ https://www.infosecurity-magazine.com/news/indirect-prompt-injection-web/ Zscaler found sites hiding prompt-injection text to manipulate AI agents into crypto payments Mon, 06 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/indirect-prompt-injection-web/ https://www.infosecurity-magazine.com/news/opera-gx-flaw-gx-mods-css/ Opera GX flaw let sites automatically install mods to steal data from other pages, now patched Mon, 06 Jul 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/opera-gx-flaw-gx-mods-css/ https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/ The NCSC has shared best practice advice from pen testers which could help improve system resilience Thu, 02 Jul 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/ https://www.infosecurity-magazine.com/news/openai-gpt-5-6-sol-limited-preview/ OpenAI is previewing its GPT-5.6 Sol model to a vetted few at the US government's request Mon, 29 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/openai-gpt-5-6-sol-limited-preview/ https://www.infosecurity-magazine.com/news/macos-xpc-flaw-disable-edr-mdm/ macos-xpc-flaw-disable-edr-mdm-standard-user-xm-cyber Thu, 25 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/macos-xpc-flaw-disable-edr-mdm/ https://www.infosecurity-magazine.com/news/bioshocking-ai-browser-prompt/ LayerX tricked AI browsers including ChatGPT Atlas and Comet into bypassing their guardrails Wed, 24 Jun 2026 16:05:00 GMT https://www.infosecurity-magazine.com/news/bioshocking-ai-browser-prompt/ https://www.infosecurity-magazine.com/news/openai-daybreak-gpt-5-5-cyber/ OpenAI expanded Daybreak with a full GPT-5.5-Cyber release to help defenders patch software flaws Tue, 23 Jun 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/openai-daybreak-gpt-5-5-cyber/ https://www.infosecurity-magazine.com/news/apple-bootrom-exploit-a12-a13/ Apple BootROM exploit exposes unpatchable USB flaw on A12 and A13 devices Mon, 22 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/apple-bootrom-exploit-a12-a13/ https://www.infosecurity-magazine.com/news/north-korea-it-worker-fraud-ai/ Nisos infiltrated a North Korean IT-worker fraud cell running on AI interviews and a US laptop farm Wed, 17 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/north-korea-it-worker-fraud-ai/ https://www.infosecurity-magazine.com/news/cisa-orders-agencies-to-patch-by/ New CISA directive tells federal agencies to patch by real-world risk, not CVSS severity scores Thu, 11 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cisa-orders-agencies-to-patch-by/ https://www.infosecurity-magazine.com/news/phpbb-authentication-bypass/ Critical phpBB authentication bypass lets attackers hijack any account with one request Tue, 09 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/phpbb-authentication-bypass/ https://www.infosecurity-magazine.com/news/everest-forms-pro-rce-actively/ Critical Everest Forms Pro RCE flaw exploited to create rogue WordPress admin accounts Thu, 04 Jun 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/everest-forms-pro-rce-actively/ https://www.infosecurity-magazine.com/news/trump-eo-voluntary-frontier-ai/ Trump's executive order invites voluntary pre-release review of frontier AI models Wed, 03 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/trump-eo-voluntary-frontier-ai/ https://www.infosecurity-magazine.com/news/anthropic-glasswing-expansion/ Anthropic widens Project Glasswing access to 150 more firms as patching becomes the bottleneck Wed, 03 Jun 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/anthropic-glasswing-expansion/ https://www.infosecurity-magazine.com/news/execs-cisos-must-treat-cyber/ Private firms are being targeted by nation-state groups for reasons beyond finance, argued ISACA’s Bharat Thakrar Wed, 03 Jun 2026 08:15:00 GMT https://www.infosecurity-magazine.com/news/execs-cisos-must-treat-cyber/ https://www.infosecurity-magazine.com/news/flowise-mcp-rce-poc/ Obsidian publishes PoC for a 1-click Flowise RCE that can fully compromise self-hosted servers Mon, 01 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/flowise-mcp-rce-poc/ https://www.infosecurity-magazine.com/opinions/beginning-of-the-end-human-pen/ There’s nothing inherently wrong with human pen testers, but there are many drawbacks. AI pen testing could change everything. Fri, 29 May 2026 10:00:00 GMT https://www.infosecurity-magazine.com/opinions/beginning-of-the-end-human-pen/ https://www.infosecurity-magazine.com/news/uk-firms-cyber-spending-ai-risks/ UK firms plan higher cyber spending as AI adoption raises security concerns Wed, 27 May 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/uk-firms-cyber-spending-ai-risks/ https://www.infosecurity-magazine.com/news/cert-in-12-hour-patch-deadline-ai/ CERT-In urges 12-hour patching of exposed flaws as AI compresses exploitation timelines Tue, 26 May 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/cert-in-12-hour-patch-deadline-ai/ https://www.infosecurity-magazine.com/news/linux-kernel-ptrace-flaw-ssh-keys/ Qualys finds nine-year-old Linux ptrace flaw exposing SSH keys and password hashes locally Thu, 21 May 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/linux-kernel-ptrace-flaw-ssh-keys/ https://www.infosecurity-magazine.com/news/fragnesia-linux-kernel-lpe-root/ New Fragnesia kernel flaw lets unprivileged local users escalate to root on Linux systems Thu, 14 May 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/fragnesia-linux-kernel-lpe-root/ https://www.infosecurity-magazine.com/news/ico-steps-in-advice-handling-ai/ The Information Commissioner’s Office has released new guidance on how to mitigate the risk of AI-powered attacks Thu, 14 May 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/ico-steps-in-advice-handling-ai/ https://www.infosecurity-magazine.com/news/avada-builder-flaws-one-million/ Avada Builder flaws allowed file read and SQL injection on one million WordPress sites Wed, 13 May 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/avada-builder-flaws-one-million/ https://www.infosecurity-magazine.com/news/cline-kanban-websocket-hijack-ai/ Oasis Security finds critical Cline kanban WebSocket flaw exposing AI coding agents to hijack Thu, 07 May 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/cline-kanban-websocket-hijack-ai/ https://www.infosecurity-magazine.com/news/llm-critical-infrastructure/ Commercial AI models were used to help plan and conduct cyber-attack against operational technology of a water and drainage facility, say researchers Thu, 07 May 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/llm-critical-infrastructure/ https://www.infosecurity-magazine.com/opinions/lessons-learned-from-colonial/ In May 2021, a coordinated government response helped contain the ransomware attack that disrupted America’s gas supply. Are we ready for the next major attack against critical infrastructure? Wed, 06 May 2026 13:30:00 GMT https://www.infosecurity-magazine.com/opinions/lessons-learned-from-colonial/ https://www.infosecurity-magazine.com/news/cisa-ci-fortify-isolation-recovery/ CISA’s CI Fortify initiative aim for critical infrastructure operators to build isolation & recovery Wed, 06 May 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/cisa-ci-fortify-isolation-recovery/ https://www.infosecurity-magazine.com/news/zero-day-2017-linux-kernel/ A researcher from offensive security firm Theori has found a nine-year-old flaw in the Linux kernel with the help of AI Fri, 01 May 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/zero-day-2017-linux-kernel/ https://www.infosecurity-magazine.com/news/zero-trust-guidance-operational/ A new CISA‑led guide explains how zero‑trust security can be applied to operational technology, balancing cyber defence with safety and system availability Thu, 30 Apr 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/zero-trust-guidance-operational/ https://www.infosecurity-magazine.com/interviews/interview-ykk-securing-largest/ Infosecurity spoke to YKK Americas’ cybersecurity leader Rod Goldsmith about securing the world’s largest zipper manufacturer and protecting a global apparel supply chain Thu, 30 Apr 2026 11:30:00 GMT https://www.infosecurity-magazine.com/interviews/interview-ykk-securing-largest/ https://www.infosecurity-magazine.com/news/cursor-extension-flaw-exposes-api/ Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX Wed, 29 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cursor-extension-flaw-exposes-api/ https://www.infosecurity-magazine.com/news/quarter-healthcare-medical-device/ RunSafe report reveals most attacks on medical devices disrupt patient care Wed, 29 Apr 2026 10:05:00 GMT https://www.infosecurity-magazine.com/news/quarter-healthcare-medical-device/ https://www.infosecurity-magazine.com/opinions/rising-risk-landscape-for-critical/ Cyber resilience in critical infrastructure is essential to critical services running. A stronger mindset is needed to protect against attacks Thu, 23 Apr 2026 10:00:00 GMT https://www.infosecurity-magazine.com/opinions/rising-risk-landscape-for-critical/ https://www.infosecurity-magazine.com/news/zionsiphon-malware-water/ ZionSiphon malware targets OT water systems with sabotage and ICS scanning capabilities Mon, 20 Apr 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/zionsiphon-malware-water/ https://www.infosecurity-magazine.com/news/flaw-ninja-forms-wordpress/ Ninja Forms File Upload RCE via unauthenticated arbitrary file upload; update to 3.3.27 immediately Wed, 08 Apr 2026 15:10:00 GMT https://www.infosecurity-magazine.com/news/flaw-ninja-forms-wordpress/ https://www.infosecurity-magazine.com/news/iranbacked-hackers-cni-ot-assets/ CISA has revealed Iranian attacks causing disruption and financial loss at US critical infrastructure firms Wed, 08 Apr 2026 08:15:00 GMT https://www.infosecurity-magazine.com/news/iranbacked-hackers-cni-ot-assets/ https://www.infosecurity-magazine.com/news/gpu-based-rowhammer-attack/ GPUBreach uses GPU Rowhammer on GDDR6 to flip bits, corrupt page tables and escalate to system root Tue, 07 Apr 2026 15:05:00 GMT https://www.infosecurity-magazine.com/news/gpu-based-rowhammer-attack/ https://www.infosecurity-magazine.com/opinions/when-world-splits-are-businesses/ Geopolitical rifts are becoming more frequent, more complex and more interconnected. Businesses cannot control global politics, but they can control their preparedness Mon, 06 Apr 2026 14:01:00 GMT https://www.infosecurity-magazine.com/opinions/when-world-splits-are-businesses/ https://www.infosecurity-magazine.com/opinions/uk-cyber-bill-what-ot-it-needs-now/ While the bill’s fine points may still evolve, its overall direction is clear. OT operators should act now. Fri, 03 Apr 2026 10:01:00 GMT https://www.infosecurity-magazine.com/opinions/uk-cyber-bill-what-ot-it-needs-now/ https://www.infosecurity-magazine.com/opinions/it-and-ot-are-not-equal/ It’s high time that OT cybersecurity got the attention and investment it deserves, writes Secolve's Aaron Singleton-Martin Fri, 27 Mar 2026 10:01:00 GMT https://www.infosecurity-magazine.com/opinions/it-and-ot-are-not-equal/ https://www.infosecurity-magazine.com/news/critical-oracle-weblogic-rce/ Attackers rapidly exploited a critical Oracle WebLogic RCE flaw the same day exploit code was released, according to a CloudSEK honeypot study Thu, 26 Mar 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/critical-oracle-weblogic-rce/ https://www.infosecurity-magazine.com/news/us-fcc-bans-foreign-made-routers/ The US Federal Communications Commission has placed all “consumer-grade” internet routers produced outside the US on its “covered list” Wed, 25 Mar 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/us-fcc-bans-foreign-made-routers/ https://www.infosecurity-magazine.com/news/ubuntu-flaw-enables-root-access/ CVE-2026-3888 Ubuntu snap flaw lets local users escalate to root via timing-based exploit Wed, 18 Mar 2026 15:45:00 GMT https://www.infosecurity-magazine.com/news/ubuntu-flaw-enables-root-access/ https://www.infosecurity-magazine.com/news/android-attack-bypasses-payment/ Android’s LSPosed-based attack hijacks payment apps via runtime manipulation and SIM-binding bypass Tue, 17 Mar 2026 16:30:00 GMT https://www.infosecurity-magazine.com/news/android-attack-bypasses-payment/ https://www.infosecurity-magazine.com/news/cursor-jack-attack-path-ai/ CursorJack shows how malicious MCP deeplinks in Cursor IDE can trigger user-approved code execution Tue, 17 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cursor-jack-attack-path-ai/ https://www.infosecurity-magazine.com/news/crackarmor-linux-privilege/ CrackArmor AppArmor flaws let local Linux users gain root, break containers and enable DoS attacks Mon, 16 Mar 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/crackarmor-linux-privilege/ https://www.infosecurity-magazine.com/news/security-flaw-aws-bedrock/ DNS-based attack in AWS Bedrock AgentCore lets AI sandboxes exfiltrate cloud data Mon, 16 Mar 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/security-flaw-aws-bedrock/ https://www.infosecurity-magazine.com/news/google-looker-studios-security-gaps/ LeakyLooker flaws in Google Looker Studio let attackers run cross-tenant SQL attacks on cloud data Wed, 11 Mar 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/google-looker-studios-security-gaps/ https://www.infosecurity-magazine.com/news/ai-security-startups-cyber/ Over one in five winners of IT-Harvest’s 2026 Cyber 150 are AI security companies Mon, 09 Mar 2026 13:25:00 GMT https://www.infosecurity-magazine.com/news/ai-security-startups-cyber/ https://www.infosecurity-magazine.com/news/contextcrush-ai-development-tools/ Critical flaw "ContextCrush" in Context7 MCP Server could allow malicious instructions into AI tools Thu, 05 Mar 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/contextcrush-ai-development-tools/ https://www.infosecurity-magazine.com/news/project-compass-com-arrests/ International law enforcement operation led by Europol targets network of teenagers and young adults involved in ransomware attacks, extortion and other crimes Fri, 27 Feb 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/project-compass-com-arrests/ https://www.infosecurity-magazine.com/opinions/fftir-cyberattack-to-burglary/ The impact of data breaches isn't just felt in cyberspace. Criminals use leaks to facilitate physical crimes too Fri, 27 Feb 2026 10:00:00 GMT https://www.infosecurity-magazine.com/opinions/fftir-cyberattack-to-burglary/ https://www.infosecurity-magazine.com/news/app-exploits-surge-ai-speeds/ IBM's 2026 X-Force report reveals 44% rise in cyber-attacks on public apps, driven by AI and flaws Wed, 25 Feb 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/app-exploits-surge-ai-speeds/ https://www.infosecurity-magazine.com/news/malicious-nuget-package-stripe-devs/ Malicious NuGet package mimicking Stripe's library targeted developers Wed, 25 Feb 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/malicious-nuget-package-stripe-devs/ https://www.infosecurity-magazine.com/news/jackpotting-surge-costs-banks-20m/ A new FBI Flash alert claims $20m was lost to ATM jackpotting attacks in 2025 alone Mon, 23 Feb 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/jackpotting-surge-costs-banks-20m/ https://www.infosecurity-magazine.com/news/industrial-control-system-vulns/ Forescout paper reveals ICS advisories hit a record 508 in 2025 Thu, 19 Feb 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/industrial-control-system-vulns/ https://www.infosecurity-magazine.com/news/ai-assistants-covert-c2-relays/ AIs like Grok and Microsoft Copilot can be exploited as covert C2 channels for malware communication Wed, 18 Feb 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/ai-assistants-covert-c2-relays/ https://www.infosecurity-magazine.com/interviews/national-gas-cto-darren-curley-it/ In conversation with Infosecurity, National Gas CTO Darren Curley explains why more security solutions don’t always mean better protection Wed, 18 Feb 2026 13:00:00 GMT https://www.infosecurity-magazine.com/interviews/national-gas-cto-darren-curley-it/ https://www.infosecurity-magazine.com/news/rise-in-ransomware-targeting/ Dragos annual report warns of a surge in ransomware attacks causing increased operational disruption in industrial environments Tue, 17 Feb 2026 12:50:00 GMT https://www.infosecurity-magazine.com/news/rise-in-ransomware-targeting/ https://www.infosecurity-magazine.com/opinions/safeguarding-solar-through-smarter/ Solar energy has been recognised by EU Institutions as critical infrastructure. This is what the industry must do to better protect itself from cyber threats. Fri, 13 Feb 2026 10:00:00 GMT https://www.infosecurity-magazine.com/opinions/safeguarding-solar-through-smarter/ https://www.infosecurity-magazine.com/news/ncsc-warning-severe-cyberattacks/ NCSC call firms to ‘act now’ following disruptive malware attacks targeting Polish energy providers Tue, 10 Feb 2026 11:50:00 GMT https://www.infosecurity-magazine.com/news/ncsc-warning-severe-cyberattacks/ https://www.infosecurity-magazine.com/news/voidlink-malware-multi-cloud-ai/ VoidLink, a Linux-based C2 framework, facilitates credential theft, data exfiltration across clouds Mon, 09 Feb 2026 15:25:00 GMT https://www.infosecurity-magazine.com/news/voidlink-malware-multi-cloud-ai/ https://www.infosecurity-magazine.com/news/wordpress-sql-injection-flaw-40000/ 40,000 WordPress sites are vulnerable to SQL injection in Quiz and Survey Master plugin Tue, 03 Feb 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/wordpress-sql-injection-flaw-40000/ https://www.infosecurity-magazine.com/news/dockerdash-weakness-dockers-ask/ DockerDash vulnerability allows RCE and data exfiltration via unverified metadata in Ask Gordon Tue, 03 Feb 2026 15:15:00 GMT https://www.infosecurity-magazine.com/news/dockerdash-weakness-dockers-ask/ https://www.infosecurity-magazine.com/news/over-80-of-ethical-hackers-now-use/ Bugcrowd study reveals 82% of security researchers now use AI, a big increase from 2023 figures Tue, 27 Jan 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/over-80-of-ethical-hackers-now-use/ https://www.infosecurity-magazine.com/news/wiper-attack-polish-power-grid/ A destructive cyber attack targeting Poland’s energy sector has been linked to Russian APT group Sandworm Mon, 26 Jan 2026 10:55:00 GMT https://www.infosecurity-magazine.com/news/wiper-attack-polish-power-grid/ https://www.infosecurity-magazine.com/news/realhomes-crm-plugin-flaw/ Security flaw in RealHomes CRM plugin allowed file uploads; patches released for 30,000+ sites Thu, 22 Jan 2026 15:10:00 GMT https://www.infosecurity-magazine.com/news/realhomes-crm-plugin-flaw/ https://www.infosecurity-magazine.com/news/global-agencies-secure-industrial/ CISA, NCSC and the FBI have released a new security guide to enhance protection for OT environments Thu, 15 Jan 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/global-agencies-secure-industrial/ https://www.infosecurity-magazine.com/news/cyber-threat-actors-ramp-up-ics/ Hacktivists and cybercriminals have intensified their efforts to exploit vulnerabilities in industrial systems, according to a Cyble report Thu, 15 Jan 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cyber-threat-actors-ramp-up-ics/ https://www.infosecurity-magazine.com/news/hackers-disconnect-brightspeed/ A hacking collective claims it has disconnected customers of US ISP Brightspeed Wed, 07 Jan 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/hackers-disconnect-brightspeed/ https://www.infosecurity-magazine.com/news/jlr-q3-sales-crash-cyberattack/ JLR’s wholesale sales plunged 43% and retail drops 25% in the third quarter of 2025 following the 2025 cyber-attack Tue, 06 Jan 2026 11:15:00 GMT https://www.infosecurity-magazine.com/news/jlr-q3-sales-crash-cyberattack/ https://www.infosecurity-magazine.com/news/servicenow-78bn-ot-security/ ServiceNow is set to acquire Armis for $7.75bn in a cash-only deal expected to close in the second half of 2026 Wed, 24 Dec 2025 10:15:00 GMT https://www.infosecurity-magazine.com/news/servicenow-78bn-ot-security/ https://www.infosecurity-magazine.com/news/motors-wordpress-flaw-takeover/ A critical flaw in the Motors WordPress theme affecting more than 20,000 installations allows low-privileged users to gain full control of websites Wed, 17 Dec 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/motors-wordpress-flaw-takeover/ https://www.infosecurity-magazine.com/news/openai-enhances-defensive-models/ OpenAI has reported a surge in performance as GPT-5.1-Codex-Max reaching 76% in capability assessments, and warned of upcoming cyber-risks Thu, 11 Dec 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/openai-enhances-defensive-models/ https://www.infosecurity-magazine.com/news/russia-hackers-target-us-critical/ Pro-Russia hacktivist groups have been observed exploiting exposed virtual network computing connections to breach OT systems Wed, 10 Dec 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/russia-hackers-target-us-critical/ https://www.infosecurity-magazine.com/news/mod-worlds-first-military-gaming/ The International Defence Esports Games (IDEG) will help sharpen cyber and battlefield skills for allied soldiers Mon, 24 Nov 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/mod-worlds-first-military-gaming/ https://www.infosecurity-magazine.com/news/multi-turn-attacks-llm-models/ A new Cisco report exposed large language models to multi-turn adversarial attacks with 90% success rates Thu, 06 Nov 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/multi-turn-attacks-llm-models/ https://www.infosecurity-magazine.com/news/google-cyberphysical-attacks/ Europe will likely face a combination of heightened cyber-physical attacks and information operations coming from nation-state groups in 2026 Thu, 06 Nov 2025 09:00:00 GMT https://www.infosecurity-magazine.com/news/google-cyberphysical-attacks/ https://www.infosecurity-magazine.com/news/hackers-organized-crime-cargo/ Proofpoint researchers have observed recent hacking campaigns supporting cargo theft Mon, 03 Nov 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/hackers-organized-crime-cargo/ https://www.infosecurity-magazine.com/news/adaptixc2-malicious-payload/ Cybercriminals are abusing AdaptixC2, a legitimate emulation framework, in ransomware campaigns Thu, 30 Oct 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/adaptixc2-malicious-payload/ https://www.infosecurity-magazine.com/news/flaw-slider-revolution-plugin/ A flaw in the Slider Revolution plugin has exposed millions of WordPress sites to unauthorized file access Wed, 15 Oct 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/flaw-slider-revolution-plugin/ https://www.infosecurity-magazine.com/news/broadcom-patches-vmware-nsx-vcenter/ Broadcom has released security patches for critical flaws affecting several VMware products Wed, 01 Oct 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/broadcom-patches-vmware-nsx-vcenter/ https://www.infosecurity-magazine.com/news/national-cyber-authorities-ot/ The Five Eyes countries, Germany and the Netherlands are launching a standard for managing OT security Mon, 29 Sep 2025 14:45:00 GMT https://www.infosecurity-magazine.com/news/national-cyber-authorities-ot/ https://www.infosecurity-magazine.com/news/critical-flaw-salesforce-agentforce/ Critical flaw ForcedLeak in Salesforce's AgentForce allows CRM data theft via prompt injection Thu, 25 Sep 2025 17:00:00 GMT https://www.infosecurity-magazine.com/news/critical-flaw-salesforce-agentforce/ https://www.infosecurity-magazine.com/news/cves-chaos-mesh-cluster-code/ A trio of critical vulnerabilities in the Chaos-Mesh platform allow in-cluster attackers to run arbitrary code, even in default configuration Wed, 17 Sep 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/cves-chaos-mesh-cluster-code/ https://www.infosecurity-magazine.com/news/chinese-ai-villager-pen-testing/ AI-native Villager, which automates Kali and DeepSeek penetration tests, has reached 11,000 PyPI downloads fueling dual-use threat Tue, 16 Sep 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/chinese-ai-villager-pen-testing/ https://www.infosecurity-magazine.com/news/vs-code-extensions-exploit-name/ Visual Studio Code extensions have been identified exploiting a loophole that allows reuse of names from removed packages Thu, 28 Aug 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/vs-code-extensions-exploit-name/ https://www.infosecurity-magazine.com/news/us-canada-australia-nz-ot-security/ Germany, the Netherlands and four of the Five Eyes countries share a common asset inventory for industrial cybersecurity Fri, 15 Aug 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/us-canada-australia-nz-ot-security/ https://www.infosecurity-magazine.com/news/erlangotp-ssh-flaw-sees/ A critical RCE vulnerability in Erlang’s OTP SSH daemon has been identified that allows unauthenticated command execution Wed, 13 Aug 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/erlangotp-ssh-flaw-sees/ https://www.infosecurity-magazine.com/news/dod-contractors-nsa-cyber-services/ The NSA’s CAPT program, launched in 2024 with Horizon3.ai, now benefits 1000 of the 300,000 US Defense Industrial Base companies Thu, 07 Aug 2025 21:12:00 GMT https://www.infosecurity-magazine.com/news/dod-contractors-nsa-cyber-services/ https://www.infosecurity-magazine.com/news/bhusa-critical-flaws-axis-cctv/ Claroty researchers have uncovered four vulnerabilities in a proprietary protocol used by surveillance equipment manufacturer Axis Communications Wed, 06 Aug 2025 22:30:00 GMT https://www.infosecurity-magazine.com/news/bhusa-critical-flaws-axis-cctv/ https://www.infosecurity-magazine.com/news/pwn2own-1m-zeroclick-whatsapp/ The Pwn2Own competition is offering a $1m reward to any teams able to unearth a WhatsApp code execution exploit Mon, 04 Aug 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/pwn2own-1m-zeroclick-whatsapp/ https://www.infosecurity-magazine.com/news/backdoor-atm-network-raspberry-pi/ A covert ATM attack used a Raspberry Pi to breach bank systems, employing stealthy malware and anti-forensics techniques Wed, 30 Jul 2025 16:00:00 GMT https://www.infosecurity-magazine.com/news/backdoor-atm-network-raspberry-pi/ https://www.infosecurity-magazine.com/news/ukraine-hacktivists-dozens/ Two pro-Ukraine hacktivists have claimed responsibility for a destructive attack on Aeroflot Tue, 29 Jul 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/ukraine-hacktivists-dozens/ https://www.infosecurity-magazine.com/news/flaws-wordpress-plugin-expose/ 10,000 WordPress sites vulnerable to takeover due to critical flaws in HT Contact Form Widget plugin Mon, 28 Jul 2025 16:05:00 GMT https://www.infosecurity-magazine.com/news/flaws-wordpress-plugin-expose/ https://www.infosecurity-magazine.com/news/grok-4-jailbroken-two-days-release/ Grok-4 was jailbroken 48 hours post-launch using Echo Chamber and Crescendo attack methods Mon, 14 Jul 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/grok-4-jailbroken-two-days-release/ https://www.infosecurity-magazine.com/news/red-team-tool-dev-shellter-misuse/ The company behind AV/EDR evasion tool Shellter has confirmed the product is being used by threat actors Tue, 08 Jul 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/red-team-tool-dev-shellter-misuse/ https://www.infosecurity-magazine.com/news/china-hikvision-fight-canadian-ban/ China’s Hikvision vows legal battle after Canada bans its operations, citing national security concerns Tue, 08 Jul 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/china-hikvision-fight-canadian-ban/ https://www.infosecurity-magazine.com/blogs/why-oneoff-pen-tests-could-be/ Annual penetration test only provides security validation for a single moment in time and might lead to undiscovered vulnerabilities. Could combining in-depth penetration tests with continuous monitoring on the other hand, help alleviate this issue? Tue, 24 Jun 2025 10:45:00 GMT https://www.infosecurity-magazine.com/blogs/why-oneoff-pen-tests-could-be/ https://www.infosecurity-magazine.com/news/wholesale-food-giant-unfi-admits/ UNFI says it is investigating unauthorized network activity, and that some operations are affected Tue, 10 Jun 2025 09:50:00 GMT https://www.infosecurity-magazine.com/news/wholesale-food-giant-unfi-admits/ https://www.infosecurity-magazine.com/news/infosec2025-ransomware-drill-water/ Semperis will host an immersive ransomware simulation focused on water utilities during Infosecurity Europe 2025 Mon, 02 Jun 2025 14:00:00 GMT https://www.infosecurity-magazine.com/news/infosec2025-ransomware-drill-water/ https://www.infosecurity-magazine.com/news/thousands-asus-routers-compromised/ A threat actor has used ASUS routers’ legitimate features to create persistent backdoors that survive firmware updates and reboots Thu, 29 May 2025 13:05:00 GMT https://www.infosecurity-magazine.com/news/thousands-asus-routers-compromised/ https://www.infosecurity-magazine.com/news/us-alert-unsophisticated-ot-cyber/ Cyber incidents targeting OT in US critical infrastructure have prompted renewed federal action Thu, 08 May 2025 16:45:00 GMT https://www.infosecurity-magazine.com/news/us-alert-unsophisticated-ot-cyber/ https://www.infosecurity-magazine.com/news/uk-cyber-essentials-falling-short/ The UK government is set to prioritize increasing the number of UK organizations who are Cyber Essentials certified over the coming year Thu, 08 May 2025 12:20:00 GMT https://www.infosecurity-magazine.com/news/uk-cyber-essentials-falling-short/ https://www.infosecurity-magazine.com/news/dutch-warn-whole-society-russia/ Dutch intelligence report warns of growing Russian aggression with hybrid warfare Wed, 23 Apr 2025 09:45:00 GMT https://www.infosecurity-magazine.com/news/dutch-warn-whole-society-russia/ https://www.infosecurity-magazine.com/interviews/permanent-digital-pandemic/ In conversation with Infosecurity, Antonio Russu, Head of Cybersecurity, Resillion, underscores the necessity of cultivating a robust cybersecurity culture, akin to the societal approaches employed during the Covid-19 pandemic Thu, 10 Apr 2025 10:30:00 GMT https://www.infosecurity-magazine.com/interviews/permanent-digital-pandemic/ https://www.infosecurity-magazine.com/news/half-attacks-electricity-water/ Semperis claims 62% of water and electricity providers were hit by cyber-attacks in the past year Thu, 03 Apr 2025 10:05:00 GMT https://www.infosecurity-magazine.com/news/half-attacks-electricity-water/ https://www.infosecurity-magazine.com/news/ukraine-russia-railway-hack/ The CERT-UA investigation concluded that the attack’s techniques were “characteristic of Russian intelligence services” Tue, 01 Apr 2025 15:00:00 GMT https://www.infosecurity-magazine.com/news/ukraine-russia-railway-hack/ https://www.infosecurity-magazine.com/news/healthcare-vulnerable-iot-devices/ Claroty revealed that 89% of healthcare organizations use the top 1% of riskiest Internet-of-Medical-Things (IoMT) devices Fri, 28 Mar 2025 14:50:00 GMT https://www.infosecurity-magazine.com/news/healthcare-vulnerable-iot-devices/ https://www.infosecurity-magazine.com/news/enisa-probes-space-threat/ EU security agency ENISA has released a new report outlining the threats and potential mitigations for the space sector Wed, 26 Mar 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/enisa-probes-space-threat/ https://www.infosecurity-magazine.com/news/ukraine-railway-systems-targeted/ Ukraine’s national railway company has suffered a “large-scale” cyber-attack, disrupting online services and operations Mon, 24 Mar 2025 16:30:00 GMT https://www.infosecurity-magazine.com/news/ukraine-railway-systems-targeted/ https://www.infosecurity-magazine.com/news/uk-cni-survey-bridewell-cyber/ Bridewell has released its annual report on critical infrastructure security leaders’ perceived cybersecurity maturity and threats Thu, 20 Mar 2025 12:00:00 GMT https://www.infosecurity-magazine.com/news/uk-cni-survey-bridewell-cyber/ https://www.infosecurity-magazine.com/news/common-passwords-rdp-attacks/ Report reveals common password use in RDP attacks, highlighting weak credentials remain a major security flaw Tue, 18 Mar 2025 14:45:00 GMT https://www.infosecurity-magazine.com/news/common-passwords-rdp-attacks/ https://www.infosecurity-magazine.com/news/volt-typhoon-threatens-us-ot/ Volt Typhoon's ten-month intrusion of Littleton Electric Light and Water Departments exposes vulnerabilities in the US electric grid Thu, 13 Mar 2025 17:15:00 GMT https://www.infosecurity-magazine.com/news/volt-typhoon-threatens-us-ot/ https://www.infosecurity-magazine.com/news/number-unauthorized-cobalt-strike/ Fortra claims the number of unauthorized Cobalt Strike licenses in the wild fell 80% over two years Mon, 10 Mar 2025 09:30:00 GMT https://www.infosecurity-magazine.com/news/number-unauthorized-cobalt-strike/ https://www.infosecurity-magazine.com/news/half-organizations-serious-ot/ New SANS Institute research finds that 50% of global organizations were hit by an OT security incident in the past year Wed, 05 Mar 2025 10:30:00 GMT https://www.infosecurity-magazine.com/news/half-organizations-serious-ot/ https://www.infosecurity-magazine.com/news/elementor-plugin-vulnerability-2m/ Elementor plugin flaw puts 2m WordPress websites at risk, allowing XSS attacks via malicious scripts Mon, 24 Feb 2025 17:00:00 GMT https://www.infosecurity-magazine.com/news/elementor-plugin-vulnerability-2m/ https://www.infosecurity-magazine.com/news/iot-data-breach-exposes-27-billion/ Massive IoT data breach exposed 2.7 billion records including Wi-Fi credentials Wed, 12 Feb 2025 14:30:00 GMT https://www.infosecurity-magazine.com/news/iot-data-breach-exposes-27-billion/ https://www.infosecurity-magazine.com/news/new-chinese-hacking-ip-theft/ Chinese hackers are infiltrating the networks of suppliers of “sensitive” manufacturers, according to a Check Point report to be published in the coming weeks Tue, 11 Feb 2025 16:15:00 GMT https://www.infosecurity-magazine.com/news/new-chinese-hacking-ip-theft/ https://www.infosecurity-magazine.com/news/cisa-warns-backdoor-contec-patient/ CISA has identified a backdoor in Contec CMS8000 devices that could allow unauthorized access to patient data and disrupt monitoring functions Mon, 03 Feb 2025 17:15:00 GMT https://www.infosecurity-magazine.com/news/cisa-warns-backdoor-contec-patient/ https://www.infosecurity-magazine.com/news/tata-technologies-ransomware-attack/ The Indian tech giant temporarily suspended some of its IT services, which have now been restored Fri, 31 Jan 2025 12:45:00 GMT https://www.infosecurity-magazine.com/news/tata-technologies-ransomware-attack/ https://www.infosecurity-magazine.com/news/subaru-bug-remote-vehicle-tracking/ A now-patched vulnerability could have enabled threat actors to remotely control Subaru cars Mon, 27 Jan 2025 11:00:00 GMT https://www.infosecurity-magazine.com/news/subaru-bug-remote-vehicle-tracking/ https://www.infosecurity-magazine.com/news/zendesk-subdomains-facilitate/ A CloudSEK report revealed Zendesk's platform can be exploited for phishing and investment scams Tue, 21 Jan 2025 15:45:00 GMT https://www.infosecurity-magazine.com/news/zendesk-subdomains-facilitate/ https://www.infosecurity-magazine.com/news/fancy-product-designer-plugin-flaws/ Critical Fancy Product Designer plugin flaws risk remote code execution and SQL injection attacks on WordPress sites Thu, 09 Jan 2025 17:15:00 GMT https://www.infosecurity-magazine.com/news/fancy-product-designer-plugin-flaws/ https://www.infosecurity-magazine.com/news/moxa-urges-updates-security/ Moxa has reported two critical vulnerabilities in its routers and network security appliances that could allow system compromise and arbitrary code execution Tue, 07 Jan 2025 16:30:00 GMT https://www.infosecurity-magazine.com/news/moxa-urges-updates-security/ https://www.infosecurity-magazine.com/news/global-campaign-targets-plugx/ Sekoia’s innovative PlugX malware disinfection campaign removed active threats across ten countries Thu, 02 Jan 2025 17:15:00 GMT https://www.infosecurity-magazine.com/news/global-campaign-targets-plugx/ https://www.infosecurity-magazine.com/blogs/crafting-strategic-cybersecurity/ Sushila Nair sets out the key areas that should be included to craft an effective cybersecurity budget in 2025 Tue, 31 Dec 2024 13:00:00 GMT https://www.infosecurity-magazine.com/blogs/crafting-strategic-cybersecurity/ https://www.infosecurity-magazine.com/news/cisa-epa-warn-cyberrisks-water/ CISA and EPA have published guidance for operators of water and wastewater systems to protect against cyber-attacks Mon, 16 Dec 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/cisa-epa-warn-cyberrisks-water/ https://www.infosecurity-magazine.com/news/russia-recruits-ukrainian-children/ Ukrainian officials say Russian intelligence is using video games to trick children into helping the enemy Mon, 16 Dec 2024 09:30:00 GMT https://www.infosecurity-magazine.com/news/russia-recruits-ukrainian-children/ https://www.infosecurity-magazine.com/news/malware-nation-sate-industrial/ IOCONTROL, a custom-built IoT/OT malware, was used by Iran-affiliated groups to attack Israel- and US-based OT/IoT devices, according to Claroty Fri, 13 Dec 2024 11:15:00 GMT https://www.infosecurity-magazine.com/news/malware-nation-sate-industrial/ https://www.infosecurity-magazine.com/news/security-flaws-wordpress-woffice/ Two Woffice theme vulnerabilities have been identified that allow attackers to gain unauthorized access and control of unpatched websites Thu, 12 Dec 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/security-flaws-wordpress-woffice/ https://www.infosecurity-magazine.com/news/ransomware-manufacturing-dollar17b/ Ransomware attacks cost manufacturing $17bn in downtime since 2018, with $1.9m daily losses, according to Comparitech Wed, 04 Dec 2024 18:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-manufacturing-dollar17b/ https://www.infosecurity-magazine.com/news/ransomware-disrupts-us-contractor/ ENGlobal has been hit by a ransomware attack, taking its IT systems offline since November 25 Tue, 03 Dec 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/ransomware-disrupts-us-contractor/ https://www.infosecurity-magazine.com/news/uk-cyberattacks-surge-ncsc/ In 2024, the UK National Cyber Security Centre issued over 500 notifications to UK organizations about cyber incidents – double the number recorded in 2023 Tue, 03 Dec 2024 08:43:00 GMT https://www.infosecurity-magazine.com/news/uk-cyberattacks-surge-ncsc/ https://www.infosecurity-magazine.com/news/cryptocom-launches-2m-bug-bounty/ Crypto.com has launched a massive $2m bug bounty program on HackerOne, the largest ever offered on the platform, to enhance platform security Mon, 02 Dec 2024 15:30:00 GMT https://www.infosecurity-magazine.com/news/cryptocom-launches-2m-bug-bounty/ https://www.infosecurity-magazine.com/news/nuclear-decommissioning-authority/ The UK’s Nuclear Decommissioning Authority has opened a new hub dedicated to cybersecurity knowledge sharing Wed, 27 Nov 2024 10:15:00 GMT https://www.infosecurity-magazine.com/news/nuclear-decommissioning-authority/ https://www.infosecurity-magazine.com/news/iot-device-traffic-malware-attacks/ Zscaler’s latest report finds 54.5% of IoT attacks target manufacturing, with the industry suffering more than three times the weekly attacks of other sectors Mon, 25 Nov 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/iot-device-traffic-malware-attacks/ https://www.infosecurity-magazine.com/news/5-privilege-escalation-flaws/ Five LPE flaws in Ubuntu’s needrestart utility enable attackers to gain root access in versions prior to 3.8 Wed, 20 Nov 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/5-privilege-escalation-flaws/ https://www.infosecurity-magazine.com/news/microsoft-power-pages/ Misconfigurations in Microsoft Power Pages granting excessive access permissions expose sensitive data, risking PII to unauthorized users Thu, 14 Nov 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/microsoft-power-pages/ https://www.infosecurity-magazine.com/news/energy-giant-halliburton-35m/ Halliburton has reported a $35m loss associated with an August ransomware breach Tue, 12 Nov 2024 09:30:00 GMT https://www.infosecurity-magazine.com/news/energy-giant-halliburton-35m/ https://www.infosecurity-magazine.com/news/cisa-critical-vulnerabilities-ics/ Multiple vulnerabilities in Rockwell Automation and Mitsubishi products could allow ICS cyber-attacks Fri, 01 Nov 2024 11:45:00 GMT https://www.infosecurity-magazine.com/news/cisa-critical-vulnerabilities-ics/ https://www.infosecurity-magazine.com/news/aipowered-bec-scams-manufacturers/ Vipre research reveals that 10% of emails targeting the manufacturing sector are BEC attempts Mon, 28 Oct 2024 09:30:00 GMT https://www.infosecurity-magazine.com/news/aipowered-bec-scams-manufacturers/ https://www.infosecurity-magazine.com/news/lazarus-group-exploits-google/ Lazarus Group exploited Google Chrome zero-day, infecting systems with Manuscrypt malware Thu, 24 Oct 2024 17:00:00 GMT https://www.infosecurity-magazine.com/news/lazarus-group-exploits-google/ https://www.infosecurity-magazine.com/news/flaws-e2ee-cloud-storage-services/ The cryptographic vulnerabilities were found in Sync, pCloud, Icedrive and Seafile by ETH Zurich Mon, 21 Oct 2024 17:00:00 GMT https://www.infosecurity-magazine.com/news/flaws-e2ee-cloud-storage-services/ https://www.infosecurity-magazine.com/news/american-water-cyberattack-billing/ American Water, the largest water utility in the US, discovered a cyber-attack impacting internal systems on October 3 Tue, 08 Oct 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/american-water-cyberattack-billing/ https://www.infosecurity-magazine.com/news/acsc-cisa-launch-ot-guidelines/ The ACSC, in collaboration with CISA and international partners, has released a guide for securing operational technology in critical sectors Wed, 02 Oct 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/acsc-cisa-launch-ot-guidelines/ https://www.infosecurity-magazine.com/news/incident-arkansas-city-water/ Arkansas City’s water treatment facility faced a cyber incident on Sunday and has since switched to manual operations Tue, 24 Sep 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/incident-arkansas-city-water/ https://www.infosecurity-magazine.com/news/us-ban-russian-chinese-connected/ The US Commerce Department wants to prohibit the sale or import of connected vehicles with Russian or Chinese-made hardware and software Tue, 24 Sep 2024 12:00:00 GMT https://www.infosecurity-magazine.com/news/us-ban-russian-chinese-connected/ https://www.infosecurity-magazine.com/news/ot-open-cyberattack/ Excessive use of remote access tools is leaving operational technology devices vulnerable, with even basic security features missing Wed, 11 Sep 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/ot-open-cyberattack/ https://www.infosecurity-magazine.com/news/china-target-taiwan-military/ TIDRONE group targets military, drone and satellite industries in Taiwan Tue, 10 Sep 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/china-target-taiwan-military/ https://www.infosecurity-magazine.com/news/us-authorities-ransomhub/ Agencies under the #Stopransomware banner publish details of RansomHub group’s tactics, indicators of compromise and essential mitigations Mon, 02 Sep 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/us-authorities-ransomhub/ https://www.infosecurity-magazine.com/news/3400-high-threats-recorded/ The United States bore most of these cyber-threats, with a 46.15% rise in attacks compared to 2023 Thu, 22 Aug 2024 14:30:00 GMT https://www.infosecurity-magazine.com/news/3400-high-threats-recorded/ https://www.infosecurity-magazine.com/news/backdoor-mifare-smart-cards-open/ Quarklabs researchers claim millions of contactless key cards could be cloned via a backdoor Thu, 22 Aug 2024 10:00:00 GMT https://www.infosecurity-magazine.com/news/backdoor-mifare-smart-cards-open/ https://www.infosecurity-magazine.com/news-features/post-compromise-security-hackers-in/ Attackers are engaging in extensive post-compromise activity and organizations need to place a greater focus on this aspect of their cybersecurity Tue, 20 Aug 2024 13:00:00 GMT https://www.infosecurity-magazine.com/news-features/post-compromise-security-hackers-in/ https://www.infosecurity-magazine.com/news/research-uncovers-new-microsoft/ CVE-2024-38173 is a medium severity RCE flaw in Microsoft Outlook, similar to CVE-2024-30103 Wed, 14 Aug 2024 16:00:00 GMT https://www.infosecurity-magazine.com/news/research-uncovers-new-microsoft/ https://www.infosecurity-magazine.com/news/gold-miner-evolution-mining/ In a Monday filing with the ASX, Evolution Mining stated that the incident was contained Tue, 13 Aug 2024 17:00:00 GMT https://www.infosecurity-magazine.com/news/gold-miner-evolution-mining/ https://www.infosecurity-magazine.com/news/vulnerability-windows-driver/ The CVE-2024-6768 flaw in the Windows CLFS.sys driver can lead to BSOD Mon, 12 Aug 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/vulnerability-windows-driver/ https://www.infosecurity-magazine.com/news/microsoft-365-phishing-alert/ Microsoft 365's anti-phishing tip can be hidden via CSS, as shown by Certitude's Moody and Ettlinger Wed, 07 Aug 2024 16:45:00 GMT https://www.infosecurity-magazine.com/news/microsoft-365-phishing-alert/ https://www.infosecurity-magazine.com/news/microsoft-outlook-zero-click-rce/ For trusted senders, the flaw is zero-click, but requires one-click interactions for untrusted ones Wed, 10 Jul 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/microsoft-outlook-zero-click-rce/ https://www.infosecurity-magazine.com/news/microsoft-uncovers-flaws-rockwell/ The vulnerabilities stem from manipulable custom classes in PanelView Plus Wed, 03 Jul 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/microsoft-uncovers-flaws-rockwell/ https://www.infosecurity-magazine.com/news/cyber-workforce-grows-15-large/ From an average of one cybersecurity expert for 1285 employees in 2023, large organizations now have one for every 1086 employees, according to Wavestone Fri, 28 Jun 2024 13:00:00 GMT https://www.infosecurity-magazine.com/news/cyber-workforce-grows-15-large/ https://www.infosecurity-magazine.com/news/firms-prioritize-savings-long-term/ The data from Bugcrowd also reveals 40% of CISOs think most firms don't understand breach risks Thu, 27 Jun 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/firms-prioritize-savings-long-term/ https://www.infosecurity-magazine.com/news/sellafield-pleads-guilty/ UK’s most hazardous nuclear site, Sellafield, has admitted criminal charges related to IT security failings Mon, 24 Jun 2024 09:30:00 GMT https://www.infosecurity-magazine.com/news/sellafield-pleads-guilty/ https://www.infosecurity-magazine.com/news/chinese-operation-crimson-palace/ Sophos said the campaign aimed to maintain prolonged network access for espionage purposes Wed, 05 Jun 2024 17:15:00 GMT https://www.infosecurity-magazine.com/news/chinese-operation-crimson-palace/ https://www.infosecurity-magazine.com/news/xss-flaws-wordpress-plugin-slider/ Slider Revolution is a widely used premium Wordpress plugin with over 9 million active users Tue, 28 May 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/xss-flaws-wordpress-plugin-slider/ https://www.infosecurity-magazine.com/news/critical-vulnerabilities-cinterion/ The flaws include CVE-2023-47610, a security weakness within the modem’s SUPL message handlers Mon, 13 May 2024 17:00:00 GMT https://www.infosecurity-magazine.com/news/critical-vulnerabilities-cinterion/ https://www.infosecurity-magazine.com/news/mallox-ransomware-deployed-via-ms/ Analyzing Mallox samples, Sekoia identified two distinct affiliates using different approaches Mon, 13 May 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/mallox-ransomware-deployed-via-ms/ https://www.infosecurity-magazine.com/news/us-uk-warn-disruptive-russian-ot/ The US and its allies claim Russian hacktivists are disruptive operations in water, energy, food and agriculture sectors Thu, 02 May 2024 09:30:00 GMT https://www.infosecurity-magazine.com/news/us-uk-warn-disruptive-russian-ot/ https://www.infosecurity-magazine.com/news/judge0-sandbox-flaws-systems/ Tanto Security uncovered three vulnerabilities which could allow attackers to execute sandbox escapes and gain root permissions on host machines Mon, 29 Apr 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/judge0-sandbox-flaws-systems/ https://www.infosecurity-magazine.com/news/dependency-confusion-flaw-found/ This occurs when a private package fetches a similar public one, leading to exploit due to misconfigurations in package managers Mon, 22 Apr 2024 14:30:00 GMT https://www.infosecurity-magazine.com/news/dependency-confusion-flaw-found/ https://www.infosecurity-magazine.com/news/quishing-attacks-tenfold/ The figures come from Egress’s latest report, which also suggests secure email gateways lag behind tech advancements Thu, 18 Apr 2024 18:00:00 GMT https://www.infosecurity-magazine.com/news/quishing-attacks-tenfold/ https://www.infosecurity-magazine.com/news/trust-cyber-cni-budgets-flatline/ Bridewell report reveals critical infrastructure firms are losing faith in their defensive tooling Thu, 18 Apr 2024 10:15:00 GMT https://www.infosecurity-magazine.com/news/trust-cyber-cni-budgets-flatline/ https://www.infosecurity-magazine.com/news/93-breaches-lead-downtime-data-loss/ According to Pentera, firms are allocating 13% of their total IT security budgets to pentesting Tue, 16 Apr 2024 15:00:00 GMT https://www.infosecurity-magazine.com/news/93-breaches-lead-downtime-data-loss/ https://www.infosecurity-magazine.com/news/lg-tv-vulnerabilities-expose-91000/ The issues identified permit unauthorized access to the TV’s root system by bypassing authorization mechanisms Wed, 10 Apr 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/lg-tv-vulnerabilities-expose-91000/ https://www.infosecurity-magazine.com/news/cisa-update-circia-us-defense/ CISA has revealed the first draft for an update of the Cyber Incident Reporting for Critical Infrastructure (CIRCIA) Act of 2022 Fri, 29 Mar 2024 14:00:00 GMT https://www.infosecurity-magazine.com/news/cisa-update-circia-us-defense/ https://www.infosecurity-magazine.com/news/cisa-warns-critical-infrastructure/ The agency has issued a fact sheet about the threat actor, emphasizing the importance of cyber-risk as a core business concern Wed, 20 Mar 2024 17:00:00 GMT https://www.infosecurity-magazine.com/news/cisa-warns-critical-infrastructure/ https://www.infosecurity-magazine.com/news/white-house-states-water-sector/ The Biden administration is inviting state representatives to urgently discuss the security of the water sector Wed, 20 Mar 2024 09:30:00 GMT https://www.infosecurity-magazine.com/news/white-house-states-water-sector/ https://www.infosecurity-magazine.com/news/ncsc-security-guidance-cloudhosted/ The UK’s National Cyber Security Centre wants to help organizations migrate their SCADA systems to the cloud Tue, 19 Mar 2024 10:15:00 GMT https://www.infosecurity-magazine.com/news/ncsc-security-guidance-cloudhosted/ https://www.infosecurity-magazine.com/news/50000-vulnerabilities-discovered/ Seven years into its ethical hacking program, the Pentagon received its 50,000th vulnerability report on March 15 Mon, 18 Mar 2024 15:00:00 GMT https://www.infosecurity-magazine.com/news/50000-vulnerabilities-discovered/ https://www.infosecurity-magazine.com/news/three-vulnerabilities-uncovered/ The flaws, identified by KTrust, enable attackers to bypass rate limits and brute force protection mechanisms Mon, 18 Mar 2024 14:00:00 GMT https://www.infosecurity-magazine.com/news/three-vulnerabilities-uncovered/ https://www.infosecurity-magazine.com/news/google-paid-10m-bug-bounties/ Google revealed it paid $10m in bug bounty payments to more than 600 researchers in 2023, with the highest single payment being £113,337 Thu, 14 Mar 2024 11:30:00 GMT https://www.infosecurity-magazine.com/news/google-paid-10m-bug-bounties/ https://www.infosecurity-magazine.com/news/top-vulnerabilities-corporate-web/ Kaspersky said access control weaknesses and failures in data protection accounted for 70% of all flaws Tue, 12 Mar 2024 17:45:00 GMT https://www.infosecurity-magazine.com/news/top-vulnerabilities-corporate-web/ https://www.infosecurity-magazine.com/news/us-intelligence-predicts-cyber/ The Office of the Director of National Intelligence (ODNI) has unveiled an unclassified version of its Annual Threat Assessment of the US Intelligence Community Tue, 12 Mar 2024 17:00:00 GMT https://www.infosecurity-magazine.com/news/us-intelligence-predicts-cyber/ https://www.infosecurity-magazine.com/news/bianlian-shifts-focus-extortion/ GuidePoint said the threat actor gained initial access via vulnerabilities in a TeamCity server Mon, 11 Mar 2024 16:15:00 GMT https://www.infosecurity-magazine.com/news/bianlian-shifts-focus-extortion/ https://www.infosecurity-magazine.com/news/40-firms-struggle-cybersecurity/ Kaspersky’s recent report said the shortage is particularly acute in Europe, Russia and Latin America Wed, 21 Feb 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/40-firms-struggle-cybersecurity/ https://www.infosecurity-magazine.com/news/israeli-aircraft-survive/ Hackers have attempted to divert two commercial Israeli aircraft in recent days, reports claim Mon, 19 Feb 2024 10:15:00 GMT https://www.infosecurity-magazine.com/news/israeli-aircraft-survive/ https://www.infosecurity-magazine.com/news/linux-devs-patch-critical-shim/ The flaw allows the installation of malware that operates at the firmware level Thu, 08 Feb 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/linux-devs-patch-critical-shim/ https://www.infosecurity-magazine.com/news/critical-manufacturing-surge/ Nozomi Networks reveals increasingly sophisticated attacks targeting bugs and other vectors in IoT and OT environments Thu, 08 Feb 2024 13:00:00 GMT https://www.infosecurity-magazine.com/news/critical-manufacturing-surge/ https://www.infosecurity-magazine.com/news/resumelooters-gang-retail-job-site/ Group-IB uncovers mass data theft campaign from Chinese-speaking ResumeLooters hackers Tue, 06 Feb 2024 09:40:00 GMT https://www.infosecurity-magazine.com/news/resumelooters-gang-retail-job-site/ https://www.infosecurity-magazine.com/news/googles-bazel-command-injection/ Cycode stressed securing software supply chains amid complex dependencies and third-party actions Thu, 01 Feb 2024 14:30:00 GMT https://www.infosecurity-magazine.com/news/googles-bazel-command-injection/ https://www.infosecurity-magazine.com/news/us-thwarts-volt-typhoon-espionage/ US government agencies took down the botnet of Chinese APT Volt Typhoon, used to target critical infrastructure for nation-state espionage Thu, 01 Feb 2024 12:35:00 GMT https://www.infosecurity-magazine.com/news/us-thwarts-volt-typhoon-espionage/ https://www.infosecurity-magazine.com/news/government-security/ Bugcrowd’s latest report also recorded a 30% surge in web submissions in 2023 Thu, 25 Jan 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/government-security/ https://www.infosecurity-magazine.com/news/hackers-target-atlassian/ Shadowserver reported over 39,000 exploitation attempts from 600 unique IP addresses, mainly Russian Tue, 23 Jan 2024 16:30:00 GMT https://www.infosecurity-magazine.com/news/hackers-target-atlassian/ https://www.infosecurity-magazine.com/news/ncsc-cyber-league-threat-tracking/ The UK’s National Cyber Security Centre has launched a Cyber League to monitor emerging cyber-threats Thu, 18 Jan 2024 09:30:00 GMT https://www.infosecurity-magazine.com/news/ncsc-cyber-league-threat-tracking/ https://www.infosecurity-magazine.com/news/nist-chatbots-self-driving-cars/ This effort is the first step in NIST’s broader mission to support the development of trustworthy AI Fri, 05 Jan 2024 12:30:00 GMT https://www.infosecurity-magazine.com/news/nist-chatbots-self-driving-cars/ https://www.infosecurity-magazine.com/news-features/top-ten-cybersecurity-predictions/ Infosecurity selected ten cyber predictions for 2024 made by our panel of four cybersecurity professionals during our Online Summit Tue, 26 Dec 2023 12:00:00 GMT https://www.infosecurity-magazine.com/news-features/top-ten-cybersecurity-predictions/ https://www.infosecurity-magazine.com/news-features/top-ciso-challenges-2023/ Nine CISOs and cybersecurity professionals share some of the biggest challenges they face Thu, 21 Dec 2023 12:00:00 GMT https://www.infosecurity-magazine.com/news-features/top-ciso-challenges-2023/ https://www.infosecurity-magazine.com/news/iranian-fuel-supplies-crippled-by/ Iranian minister confirms cyber-attack was cause of widespread disruption at petrol stations Tue, 19 Dec 2023 09:30:00 GMT https://www.infosecurity-magazine.com/news/iranian-fuel-supplies-crippled-by/ https://www.infosecurity-magazine.com/news/technology-manufacturers-eliminate/ New CISA document promotes secure-by-design shift to ditch default password use Mon, 18 Dec 2023 09:30:00 GMT https://www.infosecurity-magazine.com/news/technology-manufacturers-eliminate/ https://www.infosecurity-magazine.com/news/mitre-critical-infrastructure/ MITRE’s EMB3D provides industrial manufacturers with a shared understanding to mitigate cyber threats Wed, 13 Dec 2023 15:30:00 GMT https://www.infosecurity-magazine.com/news/mitre-critical-infrastructure/ https://www.infosecurity-magazine.com/news/ukraine-claims-paralyzed-russias/ Ukrainian Ministry of Defense says cyber-attack wiped Russian tax system servers Wed, 13 Dec 2023 09:30:00 GMT https://www.infosecurity-magazine.com/news/ukraine-claims-paralyzed-russias/ https://www.infosecurity-magazine.com/news/ninety-percent-energy-companies/ Forty-three of the world’s 48 largest energy companies were hit by a third-party data breach over the past year Thu, 07 Dec 2023 10:30:00 GMT https://www.infosecurity-magazine.com/news/ninety-percent-energy-companies/ https://www.infosecurity-magazine.com/news/sellafield-covering-up-major-cyber/ Europe’s largest nuclear site, Sellafield, is accused of consistent security failings Tue, 05 Dec 2023 09:40:00 GMT https://www.infosecurity-magazine.com/news/sellafield-covering-up-major-cyber/ https://www.infosecurity-magazine.com/news/us-confirms-iranian-attacks-water/ State-backed CyberAveng3rs group hits Unitronics installations Mon, 04 Dec 2023 09:30:00 GMT https://www.infosecurity-magazine.com/news/us-confirms-iranian-attacks-water/ https://www.infosecurity-magazine.com/news/ncsc-uk-water-companies-secure/ Guidance follows US incident involving Unitronics programmable logic controllers Fri, 01 Dec 2023 11:00:00 GMT https://www.infosecurity-magazine.com/news/ncsc-uk-water-companies-secure/ https://www.infosecurity-magazine.com/news/gotitan-botnet-prctrl-rat-exploit/ Fortiguard Labs identified multiple threat actors leveraging CVE-2023-46604 Wed, 29 Nov 2023 17:00:00 GMT https://www.infosecurity-magazine.com/news/gotitan-botnet-prctrl-rat-exploit/ https://www.infosecurity-magazine.com/news/cisa-warns-congress-chemical/ Security agency wants to resume critical CFATS inspections Tue, 28 Nov 2023 10:15:00 GMT https://www.infosecurity-magazine.com/news/cisa-warns-congress-chemical/ https://www.infosecurity-magazine.com/news/infectedslurs-botnet-mirai-zero/ The investigation conducted by Akamai in late October 2023 revealed a specific HTTP exploit path Thu, 23 Nov 2023 17:00:00 GMT https://www.infosecurity-magazine.com/news/infectedslurs-botnet-mirai-zero/ https://www.infosecurity-magazine.com/news/microsoft-defender-bug-bounty/ Ethical hackers could win cash prizes of up to $20,000 Wed, 22 Nov 2023 10:30:00 GMT https://www.infosecurity-magazine.com/news/microsoft-defender-bug-bounty/ https://www.infosecurity-magazine.com/news/us-cybersecurity-lab-major-data/ Idaho National Laboratory is also a center for nuclear research Tue, 21 Nov 2023 09:30:00 GMT https://www.infosecurity-magazine.com/news/us-cybersecurity-lab-major-data/ https://www.infosecurity-magazine.com/news/ncsc-uk-enduring-significant/ Critical infrastructure providers under pressure from state-backed groups Tue, 14 Nov 2023 09:30:00 GMT https://www.infosecurity-magazine.com/news/ncsc-uk-enduring-significant/ https://www.infosecurity-magazine.com/news/signature-techniques-of-asian-apt/ Kaspersky said the primary focus of these actors is cyber-espionage and information gathering Thu, 09 Nov 2023 17:00:00 GMT https://www.infosecurity-magazine.com/news/signature-techniques-of-asian-apt/ https://www.infosecurity-magazine.com/news/russia-sandworm-disrupted-power/ This previously undocumented attack suggests a growing maturity of Russia’s offensive OT arsenal Thu, 09 Nov 2023 08:00:00 GMT https://www.infosecurity-magazine.com/news/russia-sandworm-disrupted-power/ https://www.infosecurity-magazine.com/news/us-critical-infrastructure-firms/ Government campaign aims to promote cyber-resilience Wed, 08 Nov 2023 10:30:00 GMT https://www.infosecurity-magazine.com/news/us-critical-infrastructure-firms/ https://www.infosecurity-magazine.com/news/people-hacker-ai-social/ Jenny Radcliffe talks to Infosecurity about the changing nature of social engineering scams and the threats posed by AI Thu, 02 Nov 2023 14:00:00 GMT https://www.infosecurity-magazine.com/news/people-hacker-ai-social/ https://www.infosecurity-magazine.com/news/kill-switch-shuts-down-mozi-iot/ ESET said the kill switch demonstrated various functions, including disabling the parent process Wed, 01 Nov 2023 16:30:00 GMT https://www.infosecurity-magazine.com/news/kill-switch-shuts-down-mozi-iot/ https://www.infosecurity-magazine.com/news/uk-parliament-opens-inquiry/ Critical infrastructure providers will come under the spotlight Thu, 26 Oct 2023 09:30:00 GMT https://www.infosecurity-magazine.com/news/uk-parliament-opens-inquiry/ https://www.infosecurity-magazine.com/news/red-cross-issues-wartime/ Non-profit warns of blurring between military and civilian attacks Wed, 04 Oct 2023 09:30:00 GMT https://www.infosecurity-magazine.com/news/red-cross-issues-wartime/ https://www.infosecurity-magazine.com/news/eu-cyber-resilience-act/ The open letter, signed by 50 leading cybersecurity figures, urges the EU to reconsider its proposals around vulnerability disclosure requirements Tue, 03 Oct 2023 15:30:00 GMT https://www.infosecurity-magazine.com/news/eu-cyber-resilience-act/ https://www.infosecurity-magazine.com/news/industrial-control-systems-exposed/ A new report from Bitsight has highlighted how thousands of physical critical infrastructure organizations are vulnerable to cyber-attacks Mon, 02 Oct 2023 15:00:00 GMT https://www.infosecurity-magazine.com/news/industrial-control-systems-exposed/ https://www.infosecurity-magazine.com/news/voting-equipment-giants-security/ The move aims to combat the rampant spread of misinformation among American voters Mon, 25 Sep 2023 16:30:00 GMT https://www.infosecurity-magazine.com/news/voting-equipment-giants-security/ https://www.infosecurity-magazine.com/news/cisa-nfl-secure-super-bowl/ Tabletop exercise assessed the cybersecurity response capabilities, plans and procedures for the event Fri, 22 Sep 2023 17:30:00 GMT https://www.infosecurity-magazine.com/news/cisa-nfl-secure-super-bowl/ https://www.infosecurity-magazine.com/news/700-dark-web-ads-offer-ddos/ Kaspersky said these services range from $20 per day to $10,000 a month Fri, 22 Sep 2023 17:00:00 GMT https://www.infosecurity-magazine.com/news/700-dark-web-ads-offer-ddos/ https://www.infosecurity-magazine.com/news/sandman-apt-targets-telecom-giants/ SentinelLabs said the group’s tactics focus on stealthy lateral movements and minimal interactions Fri, 22 Sep 2023 16:30:00 GMT https://www.infosecurity-magazine.com/news/sandman-apt-targets-telecom-giants/ https://www.infosecurity-magazine.com/opinions/steal-password-type-zoom-call/ Alex Haynes highlights the challenges of communicating cybersecurity to a largely non-technical mass audience Fri, 22 Sep 2023 13:00:00 GMT https://www.infosecurity-magazine.com/opinions/steal-password-type-zoom-call/ https://www.infosecurity-magazine.com/news/mgm-security-failures-blackcat/ The malware researchers' collective Vx-underground claimed that ALPHV/BlackCat was behind the attack against the casino giant Wed, 13 Sep 2023 13:47:00 GMT https://www.infosecurity-magazine.com/news/mgm-security-failures-blackcat/ https://www.infosecurity-magazine.com/news/redfly-group-compromises-national/ Symantec warns of mounting threat to critical infrastructure Tue, 12 Sep 2023 11:00:00 GMT https://www.infosecurity-magazine.com/news/redfly-group-compromises-national/ https://www.infosecurity-magazine.com/news/russian-nine-year-sentence-hacking/ Vladislav Klyushin hacked into US filing agents to discover non-public information about hundreds of companies on the US stock exchange Fri, 08 Sep 2023 15:00:00 GMT https://www.infosecurity-magazine.com/news/russian-nine-year-sentence-hacking/ https://www.infosecurity-magazine.com/news/mitre-cisa-ot-attack-emulation-tool/ The open source tool will enable cyber teams to consistently test and boost the defenses of ICS environments Wed, 06 Sep 2023 16:00:00 GMT https://www.infosecurity-magazine.com/news/mitre-cisa-ot-attack-emulation-tool/ https://www.infosecurity-magazine.com/news/electoral-commission-fails/ Auditors cited outdated software and unsupported iPhones as key reasons for the failed test Tue, 05 Sep 2023 16:08:00 GMT https://www.infosecurity-magazine.com/news/electoral-commission-fails/ https://www.infosecurity-magazine.com/news/sensitive-data-uk-army-potentially/ Zaun, the UK’s only manufacturer of fencing systems, saw its IT systems being compromised in early August Mon, 04 Sep 2023 12:15:00 GMT https://www.infosecurity-magazine.com/news/sensitive-data-uk-army-potentially/