<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <link>https://www.infosecurity-magazine.com/risk-management/</link>
    <copyright>Copyright © 2026 Reed Exhibitions Ltd. All Rights Reserved.</copyright>
    <item>
      <title>Australia Warns of Active Exploitation of Critical TeamCity Server Flaw</title>
      <link>https://www.infosecurity-magazine.com/news/australia-exploitation-teamcity/</link>
      <description>Australian officials are urging TeamCity customers to patch an actively exploited critical flaw, which follows a similar warning from the US government</description>
      <pubDate>Tue, 25 Aug 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/australia-exploitation-teamcity/</guid>
    </item>
    <item>
      <title>New Guidance Helps Businesses Verify Quantum-Safe Hardware Claims</title>
      <link>https://www.infosecurity-magazine.com/news/guidance-verify-quantum-safe/</link>
      <description>TCG has released new guidance to help proving that trusted platform modules genuinely meet essential quantum-safe requirements</description>
      <pubDate>Mon, 24 Aug 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/guidance-verify-quantum-safe/</guid>
    </item>
    <item>
      <title>NIST Warns of Unique Security Risks in Multi-Cloud Environments</title>
      <link>https://www.infosecurity-magazine.com/news/nist-risks-multi-cloud/</link>
      <description>NIST has set out 23 novel challenges that arise in multi-cloud environments and has encouraged the cyber community to find solutions</description>
      <pubDate>Mon, 24 Aug 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nist-risks-multi-cloud/</guid>
    </item>
    <item>
      <title>US Defense Contractors Admit Their Rising CMMC Scores May Not Be Accurate</title>
      <link>https://www.infosecurity-magazine.com/news/us-defense-contractors-cmmc-scores/</link>
      <description>Defense contractors in the US are doubting their own self-assessment scores under CMMC Phase I, even as those scores hit an all-time high</description>
      <pubDate>Thu, 20 Aug 2026 12:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-defense-contractors-cmmc-scores/</guid>
    </item>
    <item>
      <title>ICS Operators Warned of AI-Driven Attacks on Siemens PLCs</title>
      <link>https://www.infosecurity-magazine.com/news/ics-ai-attacks-siemens/</link>
      <description>A US government advisory warned that attackers are deploying AI-generated exploitation scripts against exposed Siemens S7 Series PLCs</description>
      <pubDate>Thu, 20 Aug 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ics-ai-attacks-siemens/</guid>
    </item>
    <item>
      <title>Exclusive: Linux Foundation's Akrites to Go Live in September</title>
      <link>https://www.infosecurity-magazine.com/news/linux-foundations-akrites-go-live/</link>
      <description>The Linux Foundation's Akrites initiative will become operational in September, when it will begin accepting AI-powered vulnerability reports for open-source projects</description>
      <pubDate>Wed, 19 Aug 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/linux-foundations-akrites-go-live/</guid>
    </item>
    <item>
      <title>ICO Urges Police to Improve Data Governance in Facial Recognition Rollouts</title>
      <link>https://www.infosecurity-magazine.com/news/ico-police-data-governance-facial/</link>
      <description>The UK’s privacy watchdog has called on police using facial recognition to follow its recommendations</description>
      <pubDate>Wed, 19 Aug 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ico-police-data-governance-facial/</guid>
    </item>
    <item>
      <title>Wiz AI Agent Finds Critical Snowflake GitHub Repo Flaw Advanced Security Missed</title>
      <link>https://www.infosecurity-magazine.com/news/wiz-ai-agent-finds-snowflake/</link>
      <description>The security flaw in Snowflake’s GitHub Actions workflow had been missed by a GitHub Advanced Security scan, said a Wiz researcher</description>
      <pubDate>Tue, 18 Aug 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/wiz-ai-agent-finds-snowflake/</guid>
    </item>
    <item>
      <title>Enterprise Applications Carry 4.31x More Critical and High Vulnerabilities</title>
      <link>https://www.infosecurity-magazine.com/news/enterprise-apps-critical-high/</link>
      <description>Enterprise software creation has accelerated as vulnerability levels rise, Sonatype finds</description>
      <pubDate>Tue, 18 Aug 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/enterprise-apps-critical-high/</guid>
    </item>
    <item>
      <title>NASA Ground Control Software Flaw Enables Unauthenticated Commands</title>
      <link>https://www.infosecurity-magazine.com/news/nasa-ground-control-software-flaw/</link>
      <description>Critical AIT-GUI flaws expose spacecraft commands and scripts to unauthenticated attackers</description>
      <pubDate>Tue, 18 Aug 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nasa-ground-control-software-flaw/</guid>
    </item>
    <item>
      <title>UNISOC Modem Flaw Enables Remote Code Execution via Video Calls</title>
      <link>https://www.infosecurity-magazine.com/news/unisoc-modem-flaw-rce-calls/</link>
      <description>UNISOC modem flaw enabled kernel-level code execution through video calls</description>
      <pubDate>Mon, 17 Aug 2026 15:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/unisoc-modem-flaw-rce-calls/</guid>
    </item>
    <item>
      <title>ETSI Proposes 17 Cybersecurity Standards to Support Cyber Resilience Act</title>
      <link>https://www.infosecurity-magazine.com/news/etsi-proposes-17-cybersecurity/</link>
      <description>The European Telecommunications Standards Institute has launched an approval process for standards vendors will have to meet under the Cyber Resilience Act</description>
      <pubDate>Mon, 17 Aug 2026 11:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/etsi-proposes-17-cybersecurity/</guid>
    </item>
    <item>
      <title>Infostealers Harvest 1.7 Billion Credentials in Six Months</title>
      <link>https://www.infosecurity-magazine.com/news/infostealers-17-billion/</link>
      <description>Flashpoint data reveals infostealers were responsible for taking 1.7 billion credentials in the first half of 2026</description>
      <pubDate>Mon, 17 Aug 2026 07:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/infostealers-17-billion/</guid>
    </item>
    <item>
      <title>Google Cloud Targets 2027 for First Major Post-Quantum Security Milestone</title>
      <link>https://www.infosecurity-magazine.com/news/google-cloud-post-quantum-roadmap/</link>
      <description>Google Cloud has set a 2027 deadline to mitigate store-now-decrypt-later risks as part of its post-quantum cryptography roadmap, with wider migration goals extending through 2028</description>
      <pubDate>Thu, 13 Aug 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/google-cloud-post-quantum-roadmap/</guid>
    </item>
    <item>
      <title>vCenter Flaw Exploited Just Five Days After Disclosure</title>
      <link>https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/</link>
      <description>Attackers exploited a critical-severity vCenter flaw five days after Broadcom disclosed it</description>
      <pubDate>Thu, 13 Aug 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/</guid>
    </item>
    <item>
      <title>Akira Affiliate Crashes Ransomware After Attempting EDR Evasion</title>
      <link>https://www.infosecurity-magazine.com/news/akira-affiliate-crashes-ransomware/</link>
      <description>Huntress documents how a ransomware affiliate sabotaged its own attack with an anti-EDR effort</description>
      <pubDate>Thu, 13 Aug 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/akira-affiliate-crashes-ransomware/</guid>
    </item>
    <item>
      <title>ICO Reprimands Criminal Records Office After 2023 Breach</title>
      <link>https://www.infosecurity-magazine.com/news/ico-reprimands-acro-records-office/</link>
      <description>The ICO has issued a formal reprimand to ACRO after patching and security monitoring failures led to a breach</description>
      <pubDate>Thu, 13 Aug 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ico-reprimands-acro-records-office/</guid>
    </item>
    <item>
      <title>Gunra Ransomware Exploits Fortinet Flaws to Target Critical Infrastructure</title>
      <link>https://www.infosecurity-magazine.com/news/gunra-ransomware-fortinet-flaws/</link>
      <description>Gunra actors are using stealth to exfiltrate vast volumes of data from Microsoft services, US and Korean agencies have warned</description>
      <pubDate>Wed, 12 Aug 2026 13:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gunra-ransomware-fortinet-flaws/</guid>
    </item>
    <item>
      <title>NIST Seeks Public Input on AI-Ready NVD Modernization</title>
      <link>https://www.infosecurity-magazine.com/news/nist-seeks-public-input-ai-nvd/</link>
      <description>The US National Institute for Standards and Technology wants to modernize its National Vulnerability Database to embrace AI-powered vulnerability research</description>
      <pubDate>Wed, 12 Aug 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nist-seeks-public-input-ai-nvd/</guid>
    </item>
    <item>
      <title>Microsoft Fixes 400 Flaws on August Patch Tuesday </title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-fixes-400-flaws-august/</link>
      <description>Microsoft has issued another massive batch of security updates with 400 fixed in the August Patch Tuesday </description>
      <pubDate>Wed, 12 Aug 2026 08:12:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-fixes-400-flaws-august/</guid>
    </item>
    <item>
      <title>Cursor Security Bug Allowed Repositories to Execute Commands Before Trust Verification</title>
      <link>https://www.infosecurity-magazine.com/news/cursor-security-bug-command/</link>
      <description>Cursor fixed a pre-trust code execution path in three days then closed the report as informative</description>
      <pubDate>Tue, 11 Aug 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cursor-security-bug-command/</guid>
    </item>
    <item>
      <title>OpenAI Launches Two-Tier Security Access Program Alongside GPT 5.6 Cyber</title>
      <link>https://www.infosecurity-magazine.com/news/openai-daybreak-blue-red-gpt-cyber/</link>
      <description>Daybreak Blue removes some OpenAI-made guardrails while Daybreak Red grants the use of cyber-focused frontier AI models</description>
      <pubDate>Tue, 11 Aug 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/openai-daybreak-blue-red-gpt-cyber/</guid>
    </item>
    <item>
      <title>OpenAI Pauses Some Development of Astra Model on Security Concerns</title>
      <link>https://www.infosecurity-magazine.com/news/openai-pauses-development-astra/</link>
      <description>OpenAI is tightening restrictions on testing of its upcoming Astra model due to security concerns</description>
      <pubDate>Tue, 11 Aug 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/openai-pauses-development-astra/</guid>
    </item>
    <item>
      <title>Only Half of UK Manufacturers Have a Cyber Incident Response Plan</title>
      <link>https://www.infosecurity-magazine.com/news/half-uk-manufacturers-cyber/</link>
      <description>Make UK reveals major cyber resilience gaps as 30% of UK manufacturers report recent cyber incidents</description>
      <pubDate>Tue, 11 Aug 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/half-uk-manufacturers-cyber/</guid>
    </item>
    <item>
      <title>WordPress Plugins Compromised Without a Single File Change</title>
      <link>https://www.infosecurity-magazine.com/news/bdthemes-wordpress-poisoned-api/</link>
      <description>Poisoned JSON feed let attackers backdoor WordPress sites without changing any plugin files</description>
      <pubDate>Mon, 10 Aug 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/bdthemes-wordpress-poisoned-api/</guid>
    </item>
    <item>
      <title>“Ghostjacking” Exploits AI Agents’ Trusted Access to Evade Firewall Controls</title>
      <link>https://www.infosecurity-magazine.com/news/ghostjacking-ai-gents-access/</link>
      <description>Tenet reported that half of Fortune 500 companies are vulnerable to the Ghostjacking technique, which involves tricking AI agents with fake reports</description>
      <pubDate>Mon, 10 Aug 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ghostjacking-ai-gents-access/</guid>
    </item>
    <item>
      <title>NVIDIA Group Proposes SAFE Initiative for Agentic Threat Intel Sharing</title>
      <link>https://www.infosecurity-magazine.com/news/safe-initiative-agentic-threat/</link>
      <description>The Open Secure AI Alliance has announced plans for the Shared AI Findings Exchange (SAFE)</description>
      <pubDate>Thu, 06 Aug 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/safe-initiative-agentic-threat/</guid>
    </item>
    <item>
      <title>Paperclip AI Flaws Let Unauthenticated Attackers Run Commands</title>
      <link>https://www.infosecurity-magazine.com/news/paperclip-ai-vulnerabilities-rce/</link>
      <description>3 Paperclip flaws exposed data &amp; allowed unauthenticated command execution in two deployment modes</description>
      <pubDate>Wed, 05 Aug 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/paperclip-ai-vulnerabilities-rce/</guid>
    </item>
    <item>
      <title>ChainDrop Worm Hits 400+ npm Packages with Two Billion Monthly Installs</title>
      <link>https://www.infosecurity-magazine.com/news/chaindrop-worm-400-npm-two-billion/</link>
      <description>A new npm worm has compromised packages with over two billion monthly installs</description>
      <pubDate>Wed, 05 Aug 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chaindrop-worm-400-npm-two-billion/</guid>
    </item>
    <item>
      <title>Frontier Models Engage in Unsanctioned Behavior During Testing</title>
      <link>https://www.infosecurity-magazine.com/news/frontier-models-unsanctioned/</link>
      <description>Anthropic and OpenAI models attacked “real people and organizations” during AI Security Institute tests </description>
      <pubDate>Wed, 05 Aug 2026 08:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/frontier-models-unsanctioned/</guid>
    </item>
    <item>
      <title>AI Accounts for Over Half of Cybercrime in Africa, Says Interpol</title>
      <link>https://www.infosecurity-magazine.com/news/ai-accounts-over-half-cybercrime/</link>
      <description>Interpol claims AI is driving a surge in cybercrime in Africa, with related losses doubling</description>
      <pubDate>Tue, 04 Aug 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-accounts-over-half-cybercrime/</guid>
    </item>
    <item>
      <title>How Cybersecurity Vendors Are Preparing for the Post-Quantum Era</title>
      <link>https://www.infosecurity-magazine.com/news-features/how-cybersecurity-vendors-prepare/</link>
      <description>Infosecurity has contacted over a dozen cybersecurity vendors to examine how they are integrating NIST-approved quantum-safe algorithms into their roadmaps </description>
      <pubDate>Mon, 03 Aug 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news-features/how-cybersecurity-vendors-prepare/</guid>
    </item>
    <item>
      <title>AWS Blames North Korean Group for Axios and Other npm Supply Chain Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/aws-north-korea-axios-npm-supply/</link>
      <description>AWS has linked North Korea to the axios campaign to other attacks on npm libraries</description>
      <pubDate>Fri, 31 Jul 2026 09:50:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/aws-north-korea-axios-npm-supply/</guid>
    </item>
    <item>
      <title>Anthropic Reveals Claude Escaped Testing, Breaching Three Companies</title>
      <link>https://www.infosecurity-magazine.com/news/anthropic-claude-breached-three/</link>
      <description>Anthropic has revealed that Claude AI models compromised third-party organizations</description>
      <pubDate>Fri, 31 Jul 2026 08:35:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/anthropic-claude-breached-three/</guid>
    </item>
    <item>
      <title>AI and Automation Fall Short of Sysadmin Expectations</title>
      <link>https://www.infosecurity-magazine.com/news/ai-automation-fall-short-sysadmin/</link>
      <description>Action1 report finds sysadmins overestimated their use of AI in predictions made two years ago</description>
      <pubDate>Thu, 30 Jul 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-automation-fall-short-sysadmin/</guid>
    </item>
    <item>
      <title>Google Releases Patches for 370 Vulnerabilities in Chrome 151</title>
      <link>https://www.infosecurity-magazine.com/news/google-patches-370-vulnerabilities/</link>
      <description>The new version of Chrome, 151, comes with 370 vulnerability patches, including for seven critical flaws</description>
      <pubDate>Thu, 30 Jul 2026 09:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/google-patches-370-vulnerabilities/</guid>
    </item>
    <item>
      <title>Just 1% of AI-Discovered Vulnerabilities Exploited in the Wild, Research Shows</title>
      <link>https://www.infosecurity-magazine.com/news/one-percent-ai-vulnerabilities/</link>
      <description>For now, the use of AI benefits vulnerability research more than vulnerability exploitation, a VulnCheck researcher said</description>
      <pubDate>Wed, 29 Jul 2026 10:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/one-percent-ai-vulnerabilities/</guid>
    </item>
    <item>
      <title>NCSC Publishes Guidance to Aid Incident Response and Recovery</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-publishes-guidance-incident/</link>
      <description>The National Cyber Security Centre has released a detailed framework to assist with incident response and recovery</description>
      <pubDate>Wed, 29 Jul 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-publishes-guidance-incident/</guid>
    </item>
    <item>
      <title>AI-Assisted Bug Hunt Uncovers Linux Kernel 0-Day in net/sched</title>
      <link>https://www.infosecurity-magazine.com/news/ai-linux-kernel-zero-day-net-sched/</link>
      <description>AI-assisted research uncovered Linux kernel use-after-free allowing root escalation</description>
      <pubDate>Tue, 28 Jul 2026 14:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-linux-kernel-zero-day-net-sched/</guid>
    </item>
    <item>
      <title>NVIDIA’s Open Secure AI Alliance Is Missing Some Big Names</title>
      <link>https://www.infosecurity-magazine.com/news/nvidia-open-security-ai-alliance/</link>
      <description>NVIDIA has launched a new Open Secure AI Alliance to build an “open defense stack for agents”</description>
      <pubDate>Tue, 28 Jul 2026 09:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nvidia-open-security-ai-alliance/</guid>
    </item>
    <item>
      <title>Ubuntu snap-confine Vulnerability Enables Local Root Access</title>
      <link>https://www.infosecurity-magazine.com/news/ubuntu-snap-confine-local-root-cve/</link>
      <description>New Ubuntu snap-confine race condition lets local users escalate to root on default installs</description>
      <pubDate>Wed, 22 Jul 2026 10:50:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ubuntu-snap-confine-local-root-cve/</guid>
    </item>
    <item>
      <title>Russian Hacker Turns Jailbroken Claude Into Pentest Platform</title>
      <link>https://www.infosecurity-magazine.com/news/trim-jailbroken-claude-ai-pentest/</link>
      <description>Russian-speaking actor Trim built a commercial offensive AI pentest tool on jailbroken Claude models</description>
      <pubDate>Tue, 21 Jul 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trim-jailbroken-claude-ai-pentest/</guid>
    </item>
    <item>
      <title>Researchers Build WordPress Exploit Using OpenAI's GPT</title>
      <link>https://www.infosecurity-magazine.com/news/researchers-wordpress-exploit/</link>
      <description>A researcher who discovered a critical vulnerability in WordPress has used OpenAI’s latest model to develop an exploit chain</description>
      <pubDate>Mon, 20 Jul 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/researchers-wordpress-exploit/</guid>
    </item>
    <item>
      <title>From FBI Cybercrime to Barbie’s CISO: a Leadership Story for Execs Under Pressure</title>
      <link>https://www.infosecurity-magazine.com/opinions/from-fbi-cybercrime-to-barbie-ciso/</link>
      <description>Mattel CISO Jill Knesek on what working as a Special Agent at the FBI taught her about cybersecurity leadership</description>
      <pubDate>Mon, 20 Jul 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/from-fbi-cybercrime-to-barbie-ciso/</guid>
    </item>
    <item>
      <title>CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities</title>
      <link>https://www.infosecurity-magazine.com/news/cisa-urgent-patch-fortinet/</link>
      <description>US government agencies have until July 19 to patch two critical Fortinet vulnerabilities</description>
      <pubDate>Fri, 17 Jul 2026 09:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisa-urgent-patch-fortinet/</guid>
    </item>
    <item>
      <title>Eleven Vulnerable UEFI Shims Enable Secure Boot Bypass</title>
      <link>https://www.infosecurity-magazine.com/news/uefi-shims-secure-boot-bypass/</link>
      <description>Eleven forgotten Microsoft-signed UEFI shims can bypass Secure Boot on almost any machine</description>
      <pubDate>Wed, 15 Jul 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uefi-shims-secure-boot-bypass/</guid>
    </item>
    <item>
      <title>Progress Restores ShareFile Storage Zones Access After Security Warning</title>
      <link>https://www.infosecurity-magazine.com/news/progress-restores-sharefile/</link>
      <description>Progress has restored access to its ShareFile Storage Zones Controller after a four-day suspension triggered by a credible external security threat</description>
      <pubDate>Wed, 15 Jul 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/progress-restores-sharefile/</guid>
    </item>
    <item>
      <title>US: Pentagon Suspends CMMC Phase II Requirements for Defense Contractors</title>
      <link>https://www.infosecurity-magazine.com/news/us-pentagon-suspends-cmmc-2/</link>
      <description>The US Department of Defense announced the immediate suspension of the CMMC Phase II requirements until further review</description>
      <pubDate>Tue, 14 Jul 2026 15:28:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-pentagon-suspends-cmmc-2/</guid>
    </item>
    <item>
      <title>Progress Software Warns of "External Security Threat" to ShareFile</title>
      <link>https://www.infosecurity-magazine.com/news/progress-warns-security-threat/</link>
      <description>Progress Software, the provider of the popular file-sharing and data storage solutions, has urged customers to shut down the server hosting their Storage Zone Controller</description>
      <pubDate>Mon, 13 Jul 2026 12:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/progress-warns-security-threat/</guid>
    </item>
    <item>
      <title>Anthropic and OpenAI Security Tools Could Fuel Cyber-Attacks, Researchers Warn</title>
      <link>https://www.infosecurity-magazine.com/news/anthropic-openai-report-exploit/</link>
      <description>Researchers at the AI Now Institute developed a proof-of-concept exploit showing common AI tools used for security could backfire</description>
      <pubDate>Fri, 10 Jul 2026 13:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/anthropic-openai-report-exploit/</guid>
    </item>
    <item>
      <title>GhostApproval Flaw Hits Six Major AI Coding Assistants</title>
      <link>https://www.infosecurity-magazine.com/news/ghostapproval-flaw-ai-coding/</link>
      <description>Wiz discovered GhostApproval, a symlink flaw in six major AI coding assistants that bypasses approval</description>
      <pubDate>Thu, 09 Jul 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ghostapproval-flaw-ai-coding/</guid>
    </item>
    <item>
      <title>New AI Security Charter Backed by Over 70 Cyber Firms</title>
      <link>https://www.infosecurity-magazine.com/news/crest-ai-security-charter-cyber/</link>
      <description>Over 70 cybersecurity organizations have signed the CREST AI Charter detailing responsible use of AI for security</description>
      <pubDate>Thu, 09 Jul 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/crest-ai-security-charter-cyber/</guid>
    </item>
    <item>
      <title>China-Linked APT Expands Proxy Network With New Malware</title>
      <link>https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/</link>
      <description>Cisco Talos said China-linked APT UAT-7810 is growing its proxy relay network with new malware</description>
      <pubDate>Wed, 08 Jul 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/</guid>
    </item>
    <item>
      <title>Threat Actors Uses Agentic AI to Rapidly Compromise Cloud Target</title>
      <link>https://www.infosecurity-magazine.com/news/threat-actor-agentic-ai-cloud/</link>
      <description>Sygnia report details how agentic AI accelerated weeks-long attack to just 72 hours</description>
      <pubDate>Wed, 08 Jul 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/threat-actor-agentic-ai-cloud/</guid>
    </item>
    <item>
      <title>How Faster Cyber-Attacks Are Reshaping Enterprise Cybersecurity Strategies</title>
      <link>https://www.infosecurity-magazine.com/news-features/faster-cyberattacks-reshape/</link>
      <description>Hackers can get in and out of enterprise networks faster than ever. Here's why - and hat it means for your cybersecurity strategy</description>
      <pubDate>Wed, 08 Jul 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news-features/faster-cyberattacks-reshape/</guid>
    </item>
    <item>
      <title>NCSC Touts National Scale, AI-Powered “Cyber Shield” for Defense</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-national-cyber-sheild-ai/</link>
      <description>The National Cyber Security Centre wants to work with AI partners to build a new “Cyber Shield” to defend the UK</description>
      <pubDate>Wed, 08 Jul 2026 08:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-national-cyber-sheild-ai/</guid>
    </item>
    <item>
      <title>Suspected Chinese Threat Group Targets Universities via Vulnerable Roundcube Servers</title>
      <link>https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/</link>
      <description>A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and Canada and harvest user credentials</description>
      <pubDate>Tue, 07 Jul 2026 15:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/</guid>
    </item>
    <item>
      <title>UK Government Launches Cyber Resilience Pledge, Claiming 60+ Signatories</title>
      <link>https://www.infosecurity-magazine.com/news/uk-gov-launches-cyber-resilience/</link>
      <description>More than 60 organizations, including M&amp;S, Microsoft UK and Vodafone, have signed the UK government's Cyber Resilience Pledge, a new initiative aimed at boosting cyber security and resilience across British businesses</description>
      <pubDate>Tue, 07 Jul 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-gov-launches-cyber-resilience/</guid>
    </item>
    <item>
      <title>Google Cloud's New CISO Chris Betz on Integrating AI in Cyber Defenses</title>
      <link>https://www.infosecurity-magazine.com/interviews/google-cloud-new-ciso-chris-betz/</link>
      <description>In his very first interview since assuming the CISO title at Google Cloud, Cris Betz shares his vision for the role AI will play in defending global enterprises</description>
      <pubDate>Tue, 07 Jul 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/interviews/google-cloud-new-ciso-chris-betz/</guid>
    </item>
    <item>
      <title>Hackers Exploit Maximum Severity Adobe ColdFusion Flaw</title>
      <link>https://www.infosecurity-magazine.com/news/exploit-maximum-severity-adobe/</link>
      <description>Threat actors are exploiting an Adobe ColdFusion vulnerability which has a CVSS score of 10.0</description>
      <pubDate>Tue, 07 Jul 2026 08:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/exploit-maximum-severity-adobe/</guid>
    </item>
    <item>
      <title>Opera GX Flaw Let Sites Auto-Install Mods to Steal Data</title>
      <link>https://www.infosecurity-magazine.com/news/opera-gx-flaw-gx-mods-css/</link>
      <description>Opera GX flaw let sites automatically install mods to steal data from other pages, now patched</description>
      <pubDate>Mon, 06 Jul 2026 14:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/opera-gx-flaw-gx-mods-css/</guid>
    </item>
    <item>
      <title>Researchers Claim First Fully Agentic Ransomware: JadePuffer</title>
      <link>https://www.infosecurity-magazine.com/news/researchers-first-agentic/</link>
      <description>Researchers have revealed JadePuffer, the first agentic AI-powered ransomware campaign, highlighting how autonomous agents can automate cyber-attacks</description>
      <pubDate>Mon, 06 Jul 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/researchers-first-agentic/</guid>
    </item>
    <item>
      <title>Researcher Behind 'Exploitarium' Explains Release of Undisclosed Zero-Day Exploits</title>
      <link>https://www.infosecurity-magazine.com/news/researcher-exploitarium-exploits/</link>
      <description>Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities first</description>
      <pubDate>Thu, 02 Jul 2026 12:51:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/researcher-exploitarium-exploits/</guid>
    </item>
    <item>
      <title>NCSC Shares Tips on How to Make a Pen Tester’s Job Harder</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/</link>
      <description>The NCSC has shared best practice advice from pen testers which could help improve system resilience</description>
      <pubDate>Thu, 02 Jul 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-tips-make-pen-testers-job/</guid>
    </item>
    <item>
      <title>Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day</title>
      <link>https://www.infosecurity-magazine.com/news/nissan-oracle-peoplesoft-zero-day/</link>
      <description>Nissan says employees' data was stolen via the Oracle PeopleSoft zero-day campaign</description>
      <pubDate>Tue, 30 Jun 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nissan-oracle-peoplesoft-zero-day/</guid>
    </item>
    <item>
      <title>Critical SimpleHelp Vulnerability Exploited For Malware Delivery</title>
      <link>https://www.infosecurity-magazine.com/news/simplehelp-rmm-vulnerability/</link>
      <description>Attackers exploited a critical SimpleHelp RMM bug to deploy TaskWeaver and Djinn Stealer malware</description>
      <pubDate>Tue, 30 Jun 2026 15:34:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/simplehelp-rmm-vulnerability/</guid>
    </item>
    <item>
      <title>UK Healthcare Sector Records Tenfold Increase in Cyber-Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/uk-healthcare-tenfold-increase/</link>
      <description>SonicWall records 264,000 events in first five months of 2026 as UK hospitals come under siege </description>
      <pubDate>Tue, 30 Jun 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-healthcare-tenfold-increase/</guid>
    </item>
    <item>
      <title>OpenAI Reveals GPT-5.6 Sol Cybersecurity Model, Restricts Early Access</title>
      <link>https://www.infosecurity-magazine.com/news/openai-gpt-5-6-sol-limited-preview/</link>
      <description>OpenAI is previewing its GPT-5.6 Sol model to a vetted few at the US government's request</description>
      <pubDate>Mon, 29 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/openai-gpt-5-6-sol-limited-preview/</guid>
    </item>
    <item>
      <title>US Federal Insurance Regulator Confirms Data Breach Via Oracle Flaw</title>
      <link>https://www.infosecurity-magazine.com/news/us-insurance-regulator-confirms/</link>
      <description>An attacker has exploited a zero day in Oracle Peoplesoft to gain access to the IT systems of the NAIC, the standard-setting association for the US federal insurance system</description>
      <pubDate>Mon, 29 Jun 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-insurance-regulator-confirms/</guid>
    </item>
    <item>
      <title>Cisco Vulnerability Exploited Months Before Disclosure, Google Warns</title>
      <link>https://www.infosecurity-magazine.com/news/cisco-vulnerability-exploited/</link>
      <description>A high-severity flaw in Cisco Catalyst SD-WAN Manager disclosed in early June was exploited as early as March</description>
      <pubDate>Thu, 25 Jun 2026 14:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisco-vulnerability-exploited/</guid>
    </item>
    <item>
      <title>Trust in Automated AI Vulnerability Scanning Collapses to 9%, New Study Finds </title>
      <link>https://www.infosecurity-magazine.com/news/trust-ai-vulnerability-scanning/</link>
      <description>Cobalt study finds 20-percentage-point drop in number of organizations relying solely on AI automation for testing</description>
      <pubDate>Thu, 25 Jun 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trust-ai-vulnerability-scanning/</guid>
    </item>
    <item>
      <title>macOS Flaw Lets Standard Users Disable EDR and MDM</title>
      <link>https://www.infosecurity-magazine.com/news/macos-xpc-flaw-disable-edr-mdm/</link>
      <description>macos-xpc-flaw-disable-edr-mdm-standard-user-xm-cyber</description>
      <pubDate>Thu, 25 Jun 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/macos-xpc-flaw-disable-edr-mdm/</guid>
    </item>
    <item>
      <title>Researchers Trick AI Browsers Into Leaking Credentials</title>
      <link>https://www.infosecurity-magazine.com/news/bioshocking-ai-browser-prompt/</link>
      <description>LayerX tricked AI browsers including ChatGPT Atlas and Comet into bypassing their guardrails</description>
      <pubDate>Wed, 24 Jun 2026 16:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/bioshocking-ai-browser-prompt/</guid>
    </item>
    <item>
      <title>AI Is Making Attacks Cheaper, Faster and More Covert, Says ReliaQuest</title>
      <link>https://www.infosecurity-magazine.com/news/ai-attacks-cheaper-faster-covert/</link>
      <description>New ReliaQuest study reveals the six ways AI is practically being used in attacks today</description>
      <pubDate>Wed, 24 Jun 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-attacks-cheaper-faster-covert/</guid>
    </item>
    <item>
      <title>UK Museums Face Cybersecurity Risks, MPs Warn</title>
      <link>https://www.infosecurity-magazine.com/news/mps-criticize-government-museum/</link>
      <description>Public Accounts Committee (PAC) warns that museums and galleries aren’t getting enough government support on cyber</description>
      <pubDate>Wed, 24 Jun 2026 08:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/mps-criticize-government-museum/</guid>
    </item>
    <item>
      <title>Interview: Shopify CISO Andrew Dunbar on Securing an E-Commerce Giant Against Cyber Threats</title>
      <link>https://www.infosecurity-magazine.com/interviews/interview-shopify-ciso-andrew/</link>
      <description>Millions of online stores, from global brands to independent retailers, rely on Shopify’s platform to sell their products. This is how the company deploys zero trust, bug bounties, AI and more to keep itself and its customers safe from evolving hacker threats</description>
      <pubDate>Wed, 24 Jun 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/interviews/interview-shopify-ciso-andrew/</guid>
    </item>
    <item>
      <title>OpenAI Expands Daybreak to Help Defenders Patch Flaws</title>
      <link>https://www.infosecurity-magazine.com/news/openai-daybreak-gpt-5-5-cyber/</link>
      <description>OpenAI expanded Daybreak with a full GPT-5.5-Cyber release to help defenders patch software flaws</description>
      <pubDate>Tue, 23 Jun 2026 14:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/openai-daybreak-gpt-5-5-cyber/</guid>
    </item>
    <item>
      <title>Five Eyes Group Issues Urgent Call to Tackle Frontier AI Threats</title>
      <link>https://www.infosecurity-magazine.com/news/five-eyes-issues-urgent-call/</link>
      <description>The Five Eyes Alliance has published a rare call to action for organizations facing AI threats</description>
      <pubDate>Tue, 23 Jun 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/five-eyes-issues-urgent-call/</guid>
    </item>
    <item>
      <title>Unpatchable BootROM Flaw Impacts Apple A12, A13 Chips </title>
      <link>https://www.infosecurity-magazine.com/news/apple-bootrom-exploit-a12-a13/</link>
      <description>Apple BootROM exploit exposes unpatchable USB flaw on A12 and A13 devices</description>
      <pubDate>Mon, 22 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/apple-bootrom-exploit-a12-a13/</guid>
    </item>
    <item>
      <title>NCSC Urges Fortinet Customers to Tackle FortiBleed Fallout</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-fortinet-customers-tackle/</link>
      <description>The NCSC has released guidance for Fortinet customers impacted by the FortiBleed threat campaign</description>
      <pubDate>Mon, 22 Jun 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-fortinet-customers-tackle/</guid>
    </item>
    <item>
      <title>AWS Unveils 'Continuum,' an AI-Powered Vulnerability Management Platform</title>
      <link>https://www.infosecurity-magazine.com/news/aws-continuum-ai-vulnerability/</link>
      <description>Working with frontier AI models, this new platform aims to help discovering, prioritizing, validating and remediating code vulnerabilities</description>
      <pubDate>Fri, 19 Jun 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/aws-continuum-ai-vulnerability/</guid>
    </item>
    <item>
      <title>LATAM Infrastructure Hit by Fortinet and Ivanti Exploits</title>
      <link>https://www.infosecurity-magazine.com/news/operation-escaneo-cloudsek-latam/</link>
      <description>CloudSEK maps Operation Escaneo, a campaign hitting Latin American infrastructure via perimeter bugs</description>
      <pubDate>Thu, 18 Jun 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/operation-escaneo-cloudsek-latam/</guid>
    </item>
    <item>
      <title>Staffing Is Top SOC Challenge Even as AI Proliferates, Says SANS</title>
      <link>https://www.infosecurity-magazine.com/news/staffing-top-soc-challenge-ai/</link>
      <description>SANS Institute study finds few SOCs have built AI into defined workflows, despite widespread adoption</description>
      <pubDate>Wed, 17 Jun 2026 08:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/staffing-top-soc-challenge-ai/</guid>
    </item>
    <item>
      <title>Chainguard, JPMorgan, BNY Team Up to Secure Open Source from AI Threats</title>
      <link>https://www.infosecurity-magazine.com/news/chainguard-bny-open-source-athena/</link>
      <description>Athena is a new an industry coalition to fix the vulnerabilities frontier AI models find before attackers can exploit them</description>
      <pubDate>Tue, 16 Jun 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chainguard-bny-open-source-athena/</guid>
    </item>
    <item>
      <title>Cybersecurity Experts Urge US to Lift Ban on Anthropic's Frontier AI Models</title>
      <link>https://www.infosecurity-magazine.com/news/cyber-experts-urge-us-lift-ban/</link>
      <description>Access to two Anthropic large language models, Mythos 5 and Fable 5, has effectively been banned to any non-US nationals by the Trump administration</description>
      <pubDate>Mon, 15 Jun 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cyber-experts-urge-us-lift-ban/</guid>
    </item>
    <item>
      <title>UK Government Finds 400+ Vulnerabilities in AI Hackathons</title>
      <link>https://www.infosecurity-magazine.com/news/uk-government-400-vulnerabilities/</link>
      <description>Government departments find hundreds of vulnerabilities after testing frontier models</description>
      <pubDate>Mon, 15 Jun 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-government-400-vulnerabilities/</guid>
    </item>
    <item>
      <title>Maine Takes Breach Reporting Portal Offline After Fake Entries</title>
      <link>https://www.infosecurity-magazine.com/news/maine-breach-reporting-portal/</link>
      <description>The Office of the Maine Attorney General has suspended its breach reporting portal</description>
      <pubDate>Mon, 15 Jun 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/maine-breach-reporting-portal/</guid>
    </item>
    <item>
      <title>CISA Orders Agencies to Patch by Risk, Not Severity</title>
      <link>https://www.infosecurity-magazine.com/news/cisa-orders-agencies-to-patch-by/</link>
      <description>New CISA directive tells federal agencies to patch by real-world risk, not CVSS severity scores</description>
      <pubDate>Thu, 11 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisa-orders-agencies-to-patch-by/</guid>
    </item>
    <item>
      <title>Most Cybersecurity Teams Struggle to Find Time for Training on New Cyber Threats</title>
      <link>https://www.infosecurity-magazine.com/news/cybersecurity-training-time/</link>
      <description>Organizations are aware of the challenges that new technologies like AI bring: but cybersecurity staff struggle to make time for the required training during working hours</description>
      <pubDate>Thu, 11 Jun 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybersecurity-training-time/</guid>
    </item>
    <item>
      <title>Extortion-Only Attacks Increase, With Data Theft Dominating Ransomware Claims</title>
      <link>https://www.infosecurity-magazine.com/news/extortion-only-attacks-surge/</link>
      <description>Extortion-only attacks are increasing as data theft drives most ransomware claims, with many organizations unable to stop stolen data from being exposed</description>
      <pubDate>Thu, 11 Jun 2026 10:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/extortion-only-attacks-surge/</guid>
    </item>
    <item>
      <title>New Fable 5 Is a "Mythos-Class" LLM Available to All, Anthropic Announces</title>
      <link>https://www.infosecurity-magazine.com/news/fable-5-mythos-class-anthropic/</link>
      <description>Anthropic unveils Claude Mythos 5 and Fable 5, a restricted-access frontier AI model and guardrailed version for everyone to use</description>
      <pubDate>Wed, 10 Jun 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fable-5-mythos-class-anthropic/</guid>
    </item>
    <item>
      <title>Microsoft Fixes 200 CVEs in June Patch Tuesday </title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-fixes-200-cves-in-june/</link>
      <description>Microsoft has patched 200 vulnerabilities including three zero-days</description>
      <pubDate>Wed, 10 Jun 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-fixes-200-cves-in-june/</guid>
    </item>
    <item>
      <title>75% of Firms Deploy Vulnerable Code Amid Pressure on CISOs, Report Finds</title>
      <link>https://www.infosecurity-magazine.com/news/firms-deploy-vulnerable-code/</link>
      <description>Checkmarx report warns that business pressure is among the reason security leaders let security compliance slip</description>
      <pubDate>Tue, 09 Jun 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/firms-deploy-vulnerable-code/</guid>
    </item>
    <item>
      <title>AI Coding Adoption Hits 97% but Governance Lags Behind</title>
      <link>https://www.infosecurity-magazine.com/news/ai-coding-adoption-governance-lags/</link>
      <description>Most dev teams use AI coding assistants but only 30% have full governance in place</description>
      <pubDate>Tue, 09 Jun 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-coding-adoption-governance-lags/</guid>
    </item>
    <item>
      <title>Critical phpBB Flaw Lets Attackers Hijack Any Account with One Request</title>
      <link>https://www.infosecurity-magazine.com/news/phpbb-authentication-bypass/</link>
      <description>Critical phpBB authentication bypass lets attackers hijack any account with one request</description>
      <pubDate>Tue, 09 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/phpbb-authentication-bypass/</guid>
    </item>
    <item>
      <title>Google Releases Patch for Chrome Vulnerability Exploited in the Wild</title>
      <link>https://www.infosecurity-magazine.com/news/google-patch-chrome-vulnerability/</link>
      <description>The flaw, CVE-2026-11645, can allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page</description>
      <pubDate>Tue, 09 Jun 2026 10:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/google-patch-chrome-vulnerability/</guid>
    </item>
    <item>
      <title>Check Point Warns Critical Auth Bypass Bug Exploited in the Wild</title>
      <link>https://www.infosecurity-magazine.com/news/check-point-critical-auth-bypass/</link>
      <description>Check Point says a critical vulnerability in its Remote Access VPN and Mobile Access solutions has been exploited by Qilin</description>
      <pubDate>Tue, 09 Jun 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/check-point-critical-auth-bypass/</guid>
    </item>
    <item>
      <title>Two-Thirds of Open Source Community Unaware of Cyber Resilience Act</title>
      <link>https://www.infosecurity-magazine.com/news/open-source-unaware-cyber/</link>
      <description />
      <pubDate>Mon, 08 Jun 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/open-source-unaware-cyber/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Practical Lessons From Lloyds' Agentic AI Security Playbook</title>
      <link>https://www.infosecurity-magazine.com/news/lloyds-agentic-ai-security-playbook/</link>
      <description>Lloyds Banking Group shared its approach for securing agentic AI workflows, with a mix of hands on experimentation and cross functional governance</description>
      <pubDate>Fri, 05 Jun 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/lloyds-agentic-ai-security-playbook/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: AI Coding Tools Need Built-In Security for Agentic Development Era</title>
      <link>https://www.infosecurity-magazine.com/news/ai-coding-tools-security-agentic/</link>
      <description>Ox Security field CTO, Boaz Barzel, makes the case for vibe security to tackle AI agent coding risks</description>
      <pubDate>Fri, 05 Jun 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-coding-tools-security-agentic/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Reactive Security Is Failing Healthcare Organizations, Experts Warn</title>
      <link>https://www.infosecurity-magazine.com/news/reactive-security-failing/</link>
      <description>A perfect storm of legacy devices, hyper connectivity and human fatigue is bad news for the healthcare sector, warns Cyber Salus</description>
      <pubDate>Fri, 05 Jun 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/reactive-security-failing/</guid>
    </item>
    <item>
      <title>Everest Forms Pro Vulnerability Allows Remote Code Execution on WordPress Sites</title>
      <link>https://www.infosecurity-magazine.com/news/everest-forms-pro-rce-actively/</link>
      <description>Critical Everest Forms Pro RCE flaw exploited to create rogue WordPress admin accounts</description>
      <pubDate>Thu, 04 Jun 2026 16:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/everest-forms-pro-rce-actively/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Mythos Outperforms GPT5.5 on Google Chrome Vulnerability Exploits, Says New Benchmark</title>
      <link>https://www.infosecurity-magazine.com/news/mythos-gpt-chrome-exploits/</link>
      <description>A Bugcrowd researcher has unveiled ExploitBench, an independent benchmark of AI models for vulnerability exploitation</description>
      <pubDate>Thu, 04 Jun 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/mythos-gpt-chrome-exploits/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: How Businesses Can Prepare for a Cybersecurity Crisis with Effective Plans</title>
      <link>https://www.infosecurity-magazine.com/news/infosecurity-europe-cybersecurity/</link>
      <description>Cybersecurity and business leaders with experience of dealing with major incidents from within the NCSC and at JLR detail what you need to prioritize if your organization is hit by a cyber-attack</description>
      <pubDate>Thu, 04 Jun 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/infosecurity-europe-cybersecurity/</guid>
    </item>
    <item>
      <title>Trump Signs Order Inviting Voluntary Review of Frontier AI Models</title>
      <link>https://www.infosecurity-magazine.com/news/trump-eo-voluntary-frontier-ai/</link>
      <description>Trump's executive order invites voluntary pre-release review of frontier AI models</description>
      <pubDate>Wed, 03 Jun 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trump-eo-voluntary-frontier-ai/</guid>
    </item>
    <item>
      <title>Anthropic Expands Mythos Access to 150 More Organizations</title>
      <link>https://www.infosecurity-magazine.com/news/anthropic-glasswing-expansion/</link>
      <description>Anthropic widens Project Glasswing access to 150 more firms as patching becomes the bottleneck</description>
      <pubDate>Wed, 03 Jun 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/anthropic-glasswing-expansion/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Patch Responsibility Remains Up for Grabs as AI Unearths Decades of Flaws</title>
      <link>https://www.infosecurity-magazine.com/news/patch-responsibility-ai-infosec/</link>
      <description>The emergence of AI models capable to autonomously find and fix vulnerabilities at scale is having a significant impact on patching management, experts say</description>
      <pubDate>Wed, 03 Jun 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/patch-responsibility-ai-infosec/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Execs Must Treat Cyber Threats as Statecraft, ISACA Expert Say</title>
      <link>https://www.infosecurity-magazine.com/news/execs-cisos-must-treat-cyber/</link>
      <description>Private firms are being targeted by nation-state groups for reasons beyond finance, argued ISACA’s Bharat Thakrar</description>
      <pubDate>Wed, 03 Jun 2026 08:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/execs-cisos-must-treat-cyber/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: AI-Powered Cybercrime Tools Surge on Dark Web</title>
      <link>https://www.infosecurity-magazine.com/news/cybercrime-ai-tools-surge-3800/</link>
      <description>Halcyon’s Cynthia Kaiser lifts the lid on the dark web market for AI cybercrime tools</description>
      <pubDate>Wed, 03 Jun 2026 07:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybercrime-ai-tools-surge-3800/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: NCSC Urges Immediate Action to Boost Resilience as Uncertainty Persists</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-resilience-certainty-is-never/</link>
      <description>NCSC director of operations, Paul Chichester, says it’s time to future-proof cybersecurity today</description>
      <pubDate>Tue, 02 Jun 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-resilience-certainty-is-never/</guid>
    </item>
    <item>
      <title>Critical Flowise Flaw Gives Attackers Full Server Control</title>
      <link>https://www.infosecurity-magazine.com/news/flowise-mcp-rce-poc/</link>
      <description>Obsidian publishes PoC for a 1-click Flowise RCE that can fully compromise self-hosted servers</description>
      <pubDate>Mon, 01 Jun 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/flowise-mcp-rce-poc/</guid>
    </item>
    <item>
      <title>FSB Group Gamaredon Hides Worm in Windows Data Streams</title>
      <link>https://www.infosecurity-magazine.com/news/gamaredon-worm-ntfs-data-streams/</link>
      <description>FSB-linked Gamaredon concealed a fileless worm in NTFS data streams to spy on Ukraine targets</description>
      <pubDate>Mon, 01 Jun 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gamaredon-worm-ntfs-data-streams/</guid>
    </item>
    <item>
      <title>Palo Alto Warns High-Severity Bug Is Being Actively Exploited</title>
      <link>https://www.infosecurity-magazine.com/news/palo-alto-highseverity-bug/</link>
      <description>A vulnerability in Palo Alto Networks’ PAN-OS software is being exploited in attacks</description>
      <pubDate>Mon, 01 Jun 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/palo-alto-highseverity-bug/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: CyCOS Project Expands to Support UK SMEs as CIISec Takes Over</title>
      <link>https://www.infosecurity-magazine.com/news/cycos-expands-uk-smes-ciisec/</link>
      <description>From a research-driven pilot, the Cybersecurity Communities of Support (CyCOS) is about to be handed over to CIISec</description>
      <pubDate>Fri, 29 May 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cycos-expands-uk-smes-ciisec/</guid>
    </item>
    <item>
      <title>Microsoft Condemns "Uncoordinated" Zero Day Disclosures</title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-uncoordinated-zeroday/</link>
      <description>Microsoft warned the disclosure of several unpatched vulnerabilities without notice has put “customers at unnecessary risk”</description>
      <pubDate>Thu, 28 May 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-uncoordinated-zeroday/</guid>
    </item>
    <item>
      <title>Infosecurity Europe: Cybersecurity Staff Prefer CISOs With Real Attack Response Experience, Study Reveals </title>
      <link>https://www.infosecurity-magazine.com/news/infosecurity-europe-isc2/</link>
      <description>ISC2 survey of cybersecurity professionals suggests that staff want their information security leaders to have experienced reacting to a significant cyber incident</description>
      <pubDate>Thu, 28 May 2026 10:01:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/infosecurity-europe-isc2/</guid>
    </item>
    <item>
      <title>GCHQ Chief Urges Action as AI Reshapes Cyber Threats</title>
      <link>https://www.infosecurity-magazine.com/news/gchq-keast-butler-cyber-action-ai/</link>
      <description>GCHQ director urges urgent business cyber action as AI and quantum reshape the threat</description>
      <pubDate>Thu, 28 May 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gchq-keast-butler-cyber-action-ai/</guid>
    </item>
    <item>
      <title>India's CERT-In Sets 12-Hour Patch Deadline for Exposed Flaws</title>
      <link>https://www.infosecurity-magazine.com/news/cert-in-12-hour-patch-deadline-ai/</link>
      <description>CERT-In urges 12-hour patching of exposed flaws as AI compresses exploitation timelines</description>
      <pubDate>Tue, 26 May 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cert-in-12-hour-patch-deadline-ai/</guid>
    </item>
    <item>
      <title>Nine-Year-Old Linux Kernel Flaw Leaks SSH Keys and Password Hashes</title>
      <link>https://www.infosecurity-magazine.com/news/linux-kernel-ptrace-flaw-ssh-keys/</link>
      <description>Qualys finds nine-year-old Linux ptrace flaw exposing SSH keys and password hashes locally</description>
      <pubDate>Thu, 21 May 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/linux-kernel-ptrace-flaw-ssh-keys/</guid>
    </item>
    <item>
      <title>Verizon DBIR: Vulnerability Exploits Overtake Credentials as Top Access Vector</title>
      <link>https://www.infosecurity-magazine.com/news/verizon-dbir-exploits-top-access/</link>
      <description>Verizon DBIR finds 31% of data breaches began with software flaws last year</description>
      <pubDate>Wed, 20 May 2026 08:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/verizon-dbir-exploits-top-access/</guid>
    </item>
    <item>
      <title>NCSC Publishes Guidance on Securing Agentic AI Use</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-publishes-guidance-securing/</link>
      <description>The UK’s National Cyber Security Centre is helping organizations to understand agentic AI security risks</description>
      <pubDate>Mon, 18 May 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-publishes-guidance-securing/</guid>
    </item>
    <item>
      <title>Security Researchers Find 47 Zero-Days at Pwn2Own Berlin</title>
      <link>https://www.infosecurity-magazine.com/news/security-researchers-47-zerodays/</link>
      <description>The research community was awarded $1.3m as it found dozens of novel vulnerabilities at Pwn2Own Berlin</description>
      <pubDate>Mon, 18 May 2026 09:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/security-researchers-47-zerodays/</guid>
    </item>
    <item>
      <title>Bank of England, FCA and Treasury Raise Alarm Over Frontier AI</title>
      <link>https://www.infosecurity-magazine.com/news/bank-england-fca-treasury-alarm/</link>
      <description>The UK’s financial authorities have set expectations for the sector on cybersecurity and operational resilience</description>
      <pubDate>Mon, 18 May 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/bank-england-fca-treasury-alarm/</guid>
    </item>
    <item>
      <title>Microsoft Reports Severe Zero-Day Flaw in On-Prem Exchange Servers</title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-zeroday-exchange-servers/</link>
      <description>The zero-day vulnerability affects on-premises installations for all versions of Exchange Server 2016, 2019 and Subscription Edition</description>
      <pubDate>Fri, 15 May 2026 12:35:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-zeroday-exchange-servers/</guid>
    </item>
    <item>
      <title>What Fronter AI Models Like Mythos and GPT-Cyber Mean for Modern Cybersecurity</title>
      <link>https://www.infosecurity-magazine.com/news-features/what-mythos-gptcybe-ai-mean-for/</link>
      <description>OpenAI and Anthropic’s frontier AI models appear to have upended how we will think about cybersecurity. Infosecurity explores what this means for cyber practitioners</description>
      <pubDate>Fri, 15 May 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news-features/what-mythos-gptcybe-ai-mean-for/</guid>
    </item>
    <item>
      <title>New Fragnesia Flaw Hands Linux Local Users Root Access</title>
      <link>https://www.infosecurity-magazine.com/news/fragnesia-linux-kernel-lpe-root/</link>
      <description>New Fragnesia kernel flaw lets unprivileged local users escalate to root on Linux systems</description>
      <pubDate>Thu, 14 May 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fragnesia-linux-kernel-lpe-root/</guid>
    </item>
    <item>
      <title>Interview: How Alpine’s Head of IT Secures the High-Speed Environment of an F1 Team</title>
      <link>https://www.infosecurity-magazine.com/interviews/how-alpines-head-of-it-secures-an/</link>
      <description>In Formula 1 speed is of the essence and team members need secure, but swift, access to data at all times. Here’s how BWT Alpine Formula One Team ensures it meets that challenge all season long</description>
      <pubDate>Thu, 14 May 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/interviews/how-alpines-head-of-it-secures-an/</guid>
    </item>
    <item>
      <title>Most Organizations Now Use AI Agents for Sensitive Security Tasks</title>
      <link>https://www.infosecurity-magazine.com/news/most-organizations-ai-agents/</link>
      <description>Semperis study finds 74% of organizations believe AI will increase attacks on identity infrastructure</description>
      <pubDate>Thu, 14 May 2026 09:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/most-organizations-ai-agents/</guid>
    </item>
    <item>
      <title>ICO Publishes Five-Step Plan to Counter Emerging AI-Powered Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/ico-steps-in-advice-handling-ai/</link>
      <description>The Information Commissioner’s Office has released new guidance on how to mitigate the risk of AI-powered attacks</description>
      <pubDate>Thu, 14 May 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ico-steps-in-advice-handling-ai/</guid>
    </item>
    <item>
      <title>Avada Builder Flaws Expose One Million WordPress Sites</title>
      <link>https://www.infosecurity-magazine.com/news/avada-builder-flaws-one-million/</link>
      <description>Avada Builder flaws allowed file read and SQL injection on one million WordPress sites</description>
      <pubDate>Wed, 13 May 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/avada-builder-flaws-one-million/</guid>
    </item>
    <item>
      <title>UK Cybersecurity Market Expands to £14.7bn with Strong Growth in AI Security Firms</title>
      <link>https://www.infosecurity-magazine.com/news/uks-cyber-sector-grows-revenue-11/</link>
      <description>UK cybersecurity sector reaches £14.7bn in revenue, driven by rapid growth in AI security firms, increased investment and rising employment across the industry</description>
      <pubDate>Wed, 13 May 2026 09:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uks-cyber-sector-grows-revenue-11/</guid>
    </item>
    <item>
      <title>Microsoft Fixes 17 Critical Flaws in May Patch Tuesday</title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-17-critical-flaws-may/</link>
      <description>Microsoft has patched 120 vulnerabilities in this month’s security update round</description>
      <pubDate>Wed, 13 May 2026 08:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-17-critical-flaws-may/</guid>
    </item>
    <item>
      <title>OpenAI Launches 'Daybreak' to Help Build Secure By Design Software</title>
      <link>https://www.infosecurity-magazine.com/news/openai-daybreak-secure-by-design/</link>
      <description>With Daybreak, OpenAI wants its frontier AI models to be used to deploy secure by design software from the ground up</description>
      <pubDate>Tue, 12 May 2026 15:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/openai-daybreak-secure-by-design/</guid>
    </item>
    <item>
      <title>South Staffordshire Water Fined £1m After Data Breach</title>
      <link>https://www.infosecurity-magazine.com/news/south-staffordshire-water-fined-1m/</link>
      <description>The ICO has fined South Staffordshire Water nearly £1m for a series of data protection failings</description>
      <pubDate>Tue, 12 May 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/south-staffordshire-water-fined-1m/</guid>
    </item>
    <item>
      <title>Rushed Patches Follow Broken Embargo on New Linux Kernel Vulnerabilities</title>
      <link>https://www.infosecurity-magazine.com/news/dirty-frag-linux-kernel/</link>
      <description>Two new high-severity vulnerabilities, dubbed ’Dirty Frag’ when chained, have been found in the Linux kernel, affecting most Linux distributions </description>
      <pubDate>Mon, 11 May 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/dirty-frag-linux-kernel/</guid>
    </item>
    <item>
      <title>US: FCC Relaxes Foreign-Made Router Ban to Allow for Security Updates</title>
      <link>https://www.infosecurity-magazine.com/news/us-fcc-relaxes-foreign-router-ban/</link>
      <description>The same extension applies to security updates shipped to US-based users of foreign-made drones</description>
      <pubDate>Mon, 11 May 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-fcc-relaxes-foreign-router-ban/</guid>
    </item>
    <item>
      <title>Cline Kanban Flaw Lets Websites Hijack AI Coding Agents</title>
      <link>https://www.infosecurity-magazine.com/news/cline-kanban-websocket-hijack-ai/</link>
      <description>Oasis Security finds critical Cline kanban WebSocket flaw exposing AI coding agents to hijack</description>
      <pubDate>Thu, 07 May 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cline-kanban-websocket-hijack-ai/</guid>
    </item>
    <item>
      <title>CISA Urges Critical Infrastructure Providers to Make Plans to Remain Operational if hit by Cyber-Attack</title>
      <link>https://www.infosecurity-magazine.com/news/cisa-ci-fortify-isolation-recovery/</link>
      <description>CISA’s CI Fortify initiative aim for critical infrastructure operators to build isolation &amp; recovery</description>
      <pubDate>Wed, 06 May 2026 13:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisa-ci-fortify-isolation-recovery/</guid>
    </item>
    <item>
      <title>NCSC Warns of an AI-Fuelled “Vulnerability Patch Wave”</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-warns-aifuelled-vulnerability/</link>
      <description>The UK's National Cyber Security Centre is urging organizations to prepare for glut of new software updates</description>
      <pubDate>Tue, 05 May 2026 09:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-warns-aifuelled-vulnerability/</guid>
    </item>
    <item>
      <title>AI Accelerated Cyber-Attacks Aren’t New, But They Are Faster </title>
      <link>https://www.infosecurity-magazine.com/opinions/ai-attacks-not-new-but-are-faster/</link>
      <description>The fundamentals of compromise have not changed, but with AI, the pace of exploitation has</description>
      <pubDate>Mon, 04 May 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/ai-attacks-not-new-but-are-faster/</guid>
    </item>
    <item>
      <title>OpenAI To Extend Cyber Program to Government Agencies</title>
      <link>https://www.infosecurity-magazine.com/news/openai-extend-cyber-program/</link>
      <description>OpenAI announced its intention to expand the Trusted Access for Cyber program for cyber defenders at the federal, state and local government levels</description>
      <pubDate>Mon, 04 May 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/openai-extend-cyber-program/</guid>
    </item>
    <item>
      <title>Nine-Year-Old Zero-Day Flaw in Linux Kernel Discovered by AI-Equipped Security Researcher</title>
      <link>https://www.infosecurity-magazine.com/news/zero-day-2017-linux-kernel/</link>
      <description>A researcher from offensive security firm Theori has found a nine-year-old flaw in the Linux kernel with the help of AI</description>
      <pubDate>Fri, 01 May 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/zero-day-2017-linux-kernel/</guid>
    </item>
    <item>
      <title>Why Organizations Need to Adapt Their Defenses to Protect Against the Rise of Phishing-as-a-Service</title>
      <link>https://www.infosecurity-magazine.com/opinions/adapt-defenses-to-protect-against/</link>
      <description>Democratization of cybercrime is driving PhaaS expansion. Here's what you need to know to protect your network</description>
      <pubDate>Fri, 01 May 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/adapt-defenses-to-protect-against/</guid>
    </item>
    <item>
      <title>CISA and Partners Publish Zero Trust Guidance For OT Security</title>
      <link>https://www.infosecurity-magazine.com/news/zero-trust-guidance-operational/</link>
      <description>A new CISA‑led guide explains how zero‑trust security can be applied to operational technology, balancing cyber defence with safety and system availability</description>
      <pubDate>Thu, 30 Apr 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/zero-trust-guidance-operational/</guid>
    </item>
    <item>
      <title>UK: Education Sector Faces Surge in Cyber Breaches Despite Stable National Threat Levels</title>
      <link>https://www.infosecurity-magazine.com/news/uk-education-sector-faces-surge-in/</link>
      <description>The British public education sector has faced the nation’s most dramatic increase in cyber breach prevalence over the past year</description>
      <pubDate>Thu, 30 Apr 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-education-sector-faces-surge-in/</guid>
    </item>
    <item>
      <title>Interview: How YKK Is Securing the World’s Largest Zipper Manufacturing Operation</title>
      <link>https://www.infosecurity-magazine.com/interviews/interview-ykk-securing-largest/</link>
      <description>Infosecurity spoke to YKK  Americas’ cybersecurity leader Rod Goldsmith about securing the world’s largest zipper manufacturer and protecting a global apparel supply chain</description>
      <pubDate>Thu, 30 Apr 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/interviews/interview-ykk-securing-largest/</guid>
    </item>
    <item>
      <title>Cyber is the Number One Global “People Risk,” Says Marsh</title>
      <link>https://www.infosecurity-magazine.com/news/cyber-number-one-global-people/</link>
      <description>Marsh’s 2026 People Risks survey finds cyber‑related challenges dominate, as cyber‑threat literacy tops risks and cyber and AI skills shortages rise</description>
      <pubDate>Thu, 30 Apr 2026 09:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cyber-number-one-global-people/</guid>
    </item>
    <item>
      <title>Cursor Extension Flaw Exposes Developer API Keys</title>
      <link>https://www.infosecurity-magazine.com/news/cursor-extension-flaw-exposes-api/</link>
      <description>Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX</description>
      <pubDate>Wed, 29 Apr 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cursor-extension-flaw-exposes-api/</guid>
    </item>
    <item>
      <title>Researchers Track 2.9 Billion Compromised Credentials </title>
      <link>https://www.infosecurity-magazine.com/news/29-billion-compromised-credentials/</link>
      <description>KELA claims infostealers remained the primary access vector for attacks in 2025</description>
      <pubDate>Wed, 29 Apr 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/29-billion-compromised-credentials/</guid>
    </item>
    <item>
      <title>A Quarter of Healthcare Organizations Report Medical Device Cyber-Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/quarter-healthcare-medical-device/</link>
      <description>RunSafe report reveals most attacks on medical devices disrupt patient care</description>
      <pubDate>Wed, 29 Apr 2026 10:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/quarter-healthcare-medical-device/</guid>
    </item>
    <item>
      <title>Medtronic Confirms Data Breach After ShinyHunters Claims</title>
      <link>https://www.infosecurity-magazine.com/news/medtronic-data-breach-shinyhunters/</link>
      <description>Medtronic confirms IT breach as ShinyHunters claims millions of records accesseda</description>
      <pubDate>Tue, 28 Apr 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/medtronic-data-breach-shinyhunters/</guid>
    </item>
    <item>
      <title>Chinese National Extradited Over Silk Typhoon Cyber Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/chinese-national-extradited-silk/</link>
      <description>Extradition links alleged MSS-directed hacker to  Silk Typhoon and COVID-19 espionage</description>
      <pubDate>Tue, 28 Apr 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chinese-national-extradited-silk/</guid>
    </item>
    <item>
      <title>No Metrics Are Better Than Bad Metrics in the SOC, Says NCSC</title>
      <link>https://www.infosecurity-magazine.com/news/no-metrics-better-bad-metrics-soc/</link>
      <description>The National Cyber Security Centre has warned against measuring SOCs with ticket-based metrics</description>
      <pubDate>Tue, 28 Apr 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/no-metrics-better-bad-metrics-soc/</guid>
    </item>
    <item>
      <title>Most Cybersecurity  Professionals Feel Undervalued and Underpaid</title>
      <link>https://www.infosecurity-magazine.com/news/cybersecurity-pros-feel/</link>
      <description>A new report by global technology recruitment firm, Harvey Nash, found that three quarters of cybersecurity staff are pessimistic on pay and half are looking for a new job</description>
      <pubDate>Mon, 27 Apr 2026 11:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybersecurity-pros-feel/</guid>
    </item>
    <item>
      <title>BlackFile Group Targets Retail and Hospitality with Vishing Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/blackfile-group-targets-retail/</link>
      <description>Researchers uncover a new data theft and extortion group dubbed “BlackFile”</description>
      <pubDate>Mon, 27 Apr 2026 08:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/blackfile-group-targets-retail/</guid>
    </item>
    <item>
      <title>UK Biobank Data Breach: Health Data of 500,000 Listed for Sale in China</title>
      <link>https://www.infosecurity-magazine.com/news/uk-biobank-data-beach-health-data/</link>
      <description>UK government Minister confirms that breached health records of UK Biobank volunteers were up for sale on Chinese ecommerce platforms before being removed</description>
      <pubDate>Fri, 24 Apr 2026 13:25:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-biobank-data-beach-health-data/</guid>
    </item>
    <item>
      <title>Apple Fixes iOS Notification Bug Exposing Deleted Messages</title>
      <link>https://www.infosecurity-magazine.com/news/apple-ios-notification-bug-deleted/</link>
      <description>Apple patches iOS flaw that retained deleted notifications, exposing message data</description>
      <pubDate>Thu, 23 Apr 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/apple-ios-notification-bug-deleted/</guid>
    </item>
    <item>
      <title>Cyber-Attacks Surge 63% Annually in Education Sector </title>
      <link>https://www.infosecurity-magazine.com/news/cyberattacks-surge-63-annually/</link>
      <description>Quorum Cyber report finds higher and further education institutions experienced 63% increase in attacks over a year</description>
      <pubDate>Thu, 23 Apr 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cyberattacks-surge-63-annually/</guid>
    </item>
    <item>
      <title>The Rising Risk Landscape for Critical National Infrastructure
</title>
      <link>https://www.infosecurity-magazine.com/opinions/rising-risk-landscape-for-critical/</link>
      <description>Cyber resilience in critical infrastructure is essential to  critical services running. A stronger mindset is needed to protect against attacks</description>
      <pubDate>Thu, 23 Apr 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/rising-risk-landscape-for-critical/</guid>
    </item>
    <item>
      <title>NCSC Backs Passkeys, Hailing a New Era of Sign-in </title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-backs-passkeys-new-era-of/</link>
      <description>The UK’s NCSC has fully backed passkeys as consumers’ first choice for login, citing progress with FIDO and successful use across the NHS</description>
      <pubDate>Thu, 23 Apr 2026 08:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-backs-passkeys-new-era-of/</guid>
    </item>
    <item>
      <title>NCSC Unveils SilentGlass, a Plug-In Device to Protect Monitors from Cyber-Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-silentglass-a-plugin-stop/</link>
      <description>The UK’s cybersecurity agency said the devices will be available for purchase by organizations around the world</description>
      <pubDate>Wed, 22 Apr 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-silentglass-a-plugin-stop/</guid>
    </item>
    <item>
      <title>Unchecked AI Agents Cause Cybersecurity Incidents at Two Thirds of Firms </title>
      <link>https://www.infosecurity-magazine.com/news/unchecked-ai-agents-cause/</link>
      <description>Data exposure, operational disruption and financial losses among issues faced by businesses struggling with the rapid rise of AI agents, warns Cloud Security Alliance report </description>
      <pubDate>Tue, 21 Apr 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/unchecked-ai-agents-cause/</guid>
    </item>
    <item>
      <title>NCSC Outlines Coordinated Plan to Boost NHS Cyber Resilience</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-plan-boost-nhs-cyber/</link>
      <description>The National Cyber Security Centre has shared an update of its resilience-building efforts for the NHS</description>
      <pubDate>Mon, 20 Apr 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-plan-boost-nhs-cyber/</guid>
    </item>
    <item>
      <title>Commercial AI Models Show Rapid Gains in Vulnerability Research </title>
      <link>https://www.infosecurity-magazine.com/news/ai-models-rapid-gains/</link>
      <description>AI models are making rapid gains in vulnerability research and exploit development, raising new cybersecurity risks, a Forescout study finds</description>
      <pubDate>Fri, 17 Apr 2026 13:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-models-rapid-gains/</guid>
    </item>
    <item>
      <title>FIRST CEO Calls for Global CVE Collaboration amid AI Vulnerability Tsunami</title>
      <link>https://www.infosecurity-magazine.com/interviews/first-ceo-cve-collaboration-ai/</link>
      <description>FIRST CEO Chris Gibson urged global CVE collaboration and integrating AI companies to combat automated cyber threats</description>
      <pubDate>Fri, 17 Apr 2026 09:35:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/interviews/first-ceo-cve-collaboration-ai/</guid>
    </item>
    <item>
      <title>US Nationals Jailed for Operating Fake Remote Worker Laptop Farms for North Korea</title>
      <link>https://www.infosecurity-magazine.com/news/us-nationals-jailed-north-korea/</link>
      <description>US authorities jail two Americans for aiding North Korean laptop farm scams that infiltrated over 100 firms</description>
      <pubDate>Thu, 16 Apr 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-nationals-jailed-north-korea/</guid>
    </item>
    <item>
      <title>NIST Drops NVD Enrichment for Pre-March 2026 Vulnerabilities</title>
      <link>https://www.infosecurity-magazine.com/news/nvd-enrichment-premarch-2026/</link>
      <description>NIST’s National Vulnerability Database will now prioritize enriching new and exploited flaws to address the record growth of reported CVEs</description>
      <pubDate>Thu, 16 Apr 2026 12:43:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nvd-enrichment-premarch-2026/</guid>
    </item>
    <item>
      <title>CDW's Walt Powell on CISO 3.0 and Translating Cyber Risk into Business Value</title>
      <link>https://www.infosecurity-magazine.com/interviews/cdw-walt-powell-field-ciso/</link>
      <description>CDW lead field CISO Walt Powell urges modern security leaders to master risk quantification to secure the board buy-in and budgets needed to tackle emerging AI and post-quantum threats</description>
      <pubDate>Thu, 16 Apr 2026 12:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/interviews/cdw-walt-powell-field-ciso/</guid>
    </item>
    <item>
      <title>Systemic Flaw in MCP Protocol Could Expose 150 Million Downloads</title>
      <link>https://www.infosecurity-magazine.com/news/systemic-flaw-mcp-expose-150/</link>
      <description>Ox Security claims as many as 200,000 servers are exposed by newly discovered MCP vulnerability </description>
      <pubDate>Thu, 16 Apr 2026 09:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/systemic-flaw-mcp-expose-150/</guid>
    </item>
    <item>
      <title>European Cybersecurity Agency ENISA Seeks Top-Tier Status in CVE Program</title>
      <link>https://www.infosecurity-magazine.com/news/enisa-europe-seeks-top-level-root/</link>
      <description>The EU cybersecurity agency looks to become the third Top-Level Root CVE Numbering Authority, alongside CISA and MITRE</description>
      <pubDate>Wed, 15 Apr 2026 15:31:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/enisa-europe-seeks-top-level-root/</guid>
    </item>
    <item>
      <title>Critical Nginx-ui MCP Flaw Actively Exploited in the Wild</title>
      <link>https://www.infosecurity-magazine.com/news/nginx-ui-mcp-flaw-actively/</link>
      <description>Critical nginx-ui MCP authentication bypass CVE-2026-33032 actively exploited with CVSS 9.8</description>
      <pubDate>Wed, 15 Apr 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nginx-ui-mcp-flaw-actively/</guid>
    </item>
    <item>
      <title>AI Companies to Play Bigger Role in CVE Program, Says CISA</title>
      <link>https://www.infosecurity-magazine.com/news/ai-companies-to-play-bigger-role/</link>
      <description>At VulnCon, Lindsey Cerkovnik, head of vulnerability management at CISA, said AI companies should play a bigger role in vulnerability disclosures in the future</description>
      <pubDate>Wed, 15 Apr 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-companies-to-play-bigger-role/</guid>
    </item>
    <item>
      <title>Microsoft Fixes Two Zero-Days in April Patch Tuesday</title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-two-zerodays-april-patch/</link>
      <description>Microsoft has patched two zero-day flaws and over 160 others</description>
      <pubDate>Wed, 15 Apr 2026 09:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-two-zerodays-april-patch/</guid>
    </item>
    <item>
      <title>AI Security Institute Advocates Security Best Practices After Mythos Test</title>
      <link>https://www.infosecurity-magazine.com/news/ai-security-institute-best/</link>
      <description>The AISI has issued its judgement on Anthropic’s Mythos Preview model</description>
      <pubDate>Tue, 14 Apr 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-security-institute-best/</guid>
    </item>
    <item>
      <title>Governance Gaps Emerge as AI Agents Drive 76% Increase in NHIs</title>
      <link>https://www.infosecurity-magazine.com/news/governance-gaps-agents-76-increase/</link>
      <description>SANS Institute reveals that AI agents are behind a 76% surge in non-human identities</description>
      <pubDate>Thu, 09 Apr 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/governance-gaps-agents-76-increase/</guid>
    </item>
    <item>
      <title>Critical Vulnerability in Ninja Forms Exposes WordPress Sites</title>
      <link>https://www.infosecurity-magazine.com/news/flaw-ninja-forms-wordpress/</link>
      <description>Ninja Forms File Upload RCE via unauthenticated arbitrary file upload; update to 3.3.27 immediately</description>
      <pubDate>Wed, 08 Apr 2026 15:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/flaw-ninja-forms-wordpress/</guid>
    </item>
    <item>
      <title>Anthropic Launches Project Glasswing to Use AI to Find and Fix Critical Software Vulnerabilities</title>
      <link>https://www.infosecurity-magazine.com/news/anthropic-launch-project-glasswing/</link>
      <description>Anthropic launches Project Glasswing, using its Claude Mythos Preview AI to autonomously identify and fix undiscovered vulnerabilities in critical software</description>
      <pubDate>Wed, 08 Apr 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/anthropic-launch-project-glasswing/</guid>
    </item>
    <item>
      <title>Claude Discovers Apache ActiveMQ Bug Hidden for 13 Years</title>
      <link>https://www.infosecurity-magazine.com/news/claude-apache-activemq-bug-hidden/</link>
      <description>Anthropic’s Claude AI has helped researchers find a vulnerability in Apache ActiveMQ Classic</description>
      <pubDate>Wed, 08 Apr 2026 09:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/claude-apache-activemq-bug-hidden/</guid>
    </item>
    <item>
      <title>Iran‑Backed Threat Actors Hit US CNI Providers via Internet‑Facing OT Assets</title>
      <link>https://www.infosecurity-magazine.com/news/iranbacked-hackers-cni-ot-assets/</link>
      <description>CISA has revealed Iranian attacks causing disruption and financial loss at US critical infrastructure firms</description>
      <pubDate>Wed, 08 Apr 2026 08:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/iranbacked-hackers-cni-ot-assets/</guid>
    </item>
    <item>
      <title>GPU Rowhammer Attack Enables Privilege Escalation and Full System Compromise</title>
      <link>https://www.infosecurity-magazine.com/news/gpu-based-rowhammer-attack/</link>
      <description>GPUBreach uses GPU Rowhammer on GDDR6 to flip bits, corrupt page tables and escalate to system root</description>
      <pubDate>Tue, 07 Apr 2026 15:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gpu-based-rowhammer-attack/</guid>
    </item>
    <item>
      <title>When the World Splits: Are Businesses Really Ready?</title>
      <link>https://www.infosecurity-magazine.com/opinions/when-world-splits-are-businesses/</link>
      <description>Geopolitical rifts are becoming more frequent, more complex and more interconnected. Businesses cannot control global politics, but they can control their preparedness</description>
      <pubDate>Mon, 06 Apr 2026 14:01:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/when-world-splits-are-businesses/</guid>
    </item>
    <item>
      <title>How Security Leaders Can Safeguard Against Vibe Coding Security Risks</title>
      <link>https://www.infosecurity-magazine.com/news-features/how-safeguard-vibe-coding-security/</link>
      <description>Infosecurity outlines key recommendations for CISOs and security teams to implement safeguards for AI-assisted coding</description>
      <pubDate>Mon, 06 Apr 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news-features/how-safeguard-vibe-coding-security/</guid>
    </item>
    <item>
      <title>Apple Expands iOS 18 Security Updates Amid DarkSword Threat</title>
      <link>https://www.infosecurity-magazine.com/news/apple-ios-18-updates-darksword/</link>
      <description>iOS/iPadOS 18.7.7 updates expanded to protect older devices from DarkSword web exploit kit</description>
      <pubDate>Thu, 02 Apr 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/apple-ios-18-updates-darksword/</guid>
    </item>
    <item>
      <title>Researchers Observe Sub-One-Hour Ransomware Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/researchers-subonehour-ransomware/</link>
      <description>Halcyon says Akira is now capable of carrying out an entire ransomware attack in less than an hour</description>
      <pubDate>Thu, 02 Apr 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/researchers-subonehour-ransomware/</guid>
    </item>
    <item>
      <title>Most CNI Firms Face Up to £5m in Downtime from OT Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/most-cni-firms-5m-downtime-ot/</link>
      <description>E2e-assure says 80% of critical infrastructure providers could face millions in downtime from cyber-attacks</description>
      <pubDate>Thu, 02 Apr 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/most-cni-firms-5m-downtime-ot/</guid>
    </item>
    <item>
      <title>Eight in 10 UK Manufacturers Hit by Cyber Incident in a Year</title>
      <link>https://www.infosecurity-magazine.com/news/eight-10-uk-manufacturers-hit/</link>
      <description>Most UK manufacturers compromised last year suffered financial loss, says ESET</description>
      <pubDate>Wed, 01 Apr 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/eight-10-uk-manufacturers-hit/</guid>
    </item>
    <item>
      <title>ChatGPT Security Issue Enabled Data Theft via Single Prompt</title>
      <link>https://www.infosecurity-magazine.com/news/chatgpt-security-issue-steal-data/</link>
      <description>OpenAI has patched vulnerability, which Check Point said was because of a DNS loophole
</description>
      <pubDate>Tue, 31 Mar 2026 13:01:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chatgpt-security-issue-steal-data/</guid>
    </item>
    <item>
      <title>Employee Data Breaches Surge to Seven-Year High</title>
      <link>https://www.infosecurity-magazine.com/news/employee-data-breaches-surge/</link>
      <description>Analysis from law firm Nockolds suggests non-cyber incidents are driving up employee data breaches</description>
      <pubDate>Tue, 31 Mar 2026 10:01:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/employee-data-breaches-surge/</guid>
    </item>
    <item>
      <title>NCSC Urges Immediate Patching of F5 BIG-IP Bug</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-urges-immediate-patching-f5/</link>
      <description>The National Cyber Security Centre wants UK firms to patch CVE-2025-53521</description>
      <pubDate>Tue, 31 Mar 2026 08:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-urges-immediate-patching-f5/</guid>
    </item>
    <item>
      <title>Critical Citrix NetScaler Vulnerability Exploited in the Wild</title>
      <link>https://www.infosecurity-magazine.com/news/critical-citrix-netscaler/</link>
      <description>Researchers from watchTowr and Defused have found evidence that attackers are actively exploiting CVE-2026-3055, a critical NetScaler vulnerability</description>
      <pubDate>Mon, 30 Mar 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/critical-citrix-netscaler/</guid>
    </item>
    <item>
      <title>Security Researchers Sound the Alarm on Vulnerabilities in AI-Generated Code</title>
      <link>https://www.infosecurity-magazine.com/news/ai-generated-code-vulnerabilities/</link>
      <description>Security researchers from Georgia Tech have observed a surge in reported CVEs for which the flaw was introduced by AI-generated code</description>
      <pubDate>Thu, 26 Mar 2026 16:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-generated-code-vulnerabilities/</guid>
    </item>
    <item>
      <title>Attackers Rapidly Weaponize Critical Oracle WebLogic RCE, Honeypot Study Finds</title>
      <link>https://www.infosecurity-magazine.com/news/critical-oracle-weblogic-rce/</link>
      <description>Attackers rapidly exploited a critical Oracle WebLogic RCE flaw the same day exploit code was released, according to a CloudSEK honeypot study</description>
      <pubDate>Thu, 26 Mar 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/critical-oracle-weblogic-rce/</guid>
    </item>
    <item>
      <title>AI Becomes the Top Cybersecurity Priority for Defenders as Criminals Exploit It, PwC Warns</title>
      <link>https://www.infosecurity-magazine.com/news/ai-top-cyber-priority-defenders-pwc/</link>
      <description>PwC Annual Threat Dynamics report says AI-threats are the biggest concern of clients</description>
      <pubDate>Thu, 26 Mar 2026 13:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-top-cyber-priority-defenders-pwc/</guid>
    </item>
    <item>
      <title>Hackers Exploit Compromised Enterprise Identities at Industrial Scale, Warns SentinelOne</title>
      <link>https://www.infosecurity-magazine.com/news/hackers-exploit-id-industrial-scale/</link>
      <description>Cybersecurity company’s annual report issues warning over a “mass-marketed impersonation crisis” over attackers abusing legitimate credentials </description>
      <pubDate>Wed, 25 Mar 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hackers-exploit-id-industrial-scale/</guid>
    </item>
    <item>
      <title>Strengthening Supply Chain Cyber Resilience: A Leadership Imperative</title>
      <link>https://www.infosecurity-magazine.com/opinions/supply-chain-cyber-leadership/</link>
      <description>In an increasingly interconnected business environment, third-party resilience is no longer optional.</description>
      <pubDate>Wed, 25 Mar 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/supply-chain-cyber-leadership/</guid>
    </item>
    <item>
      <title>US: FCC Bans Foreign-Made Routers Over National Security Concerns</title>
      <link>https://www.infosecurity-magazine.com/news/us-fcc-bans-foreign-made-routers/</link>
      <description>The US Federal Communications Commission has placed all “consumer-grade” internet routers produced outside the US on its “covered list”</description>
      <pubDate>Wed, 25 Mar 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-fcc-bans-foreign-made-routers/</guid>
    </item>
    <item>
      <title>TeamPCP Expands Supply Chain Campaign With LiteLLM PyPI Compromise</title>
      <link>https://www.infosecurity-magazine.com/news/teampcp-litellm-pypi-supply-chain/</link>
      <description>Python package LiteLLM compromised with credential-stealing malware linked to TeamPCP threat group</description>
      <pubDate>Wed, 25 Mar 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/teampcp-litellm-pypi-supply-chain/</guid>
    </item>
    <item>
      <title>RSA Conference: UK NCSC Head Urges Industry to Develop Vibe Coding Safeguards</title>
      <link>https://www.infosecurity-magazine.com/news/rsac-uk-ncsc-urges-vibe-coding/</link>
      <description>The head of the UK’s NCSC is calling the cybersecurity industry to “seize the disruptive vibe coding opportunity” to make software more secure</description>
      <pubDate>Tue, 24 Mar 2026 21:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/rsac-uk-ncsc-urges-vibe-coding/</guid>
    </item>
    <item>
      <title>Citrix Urges Immediate Patching for Critical NetScaler Vulnerabilities</title>
      <link>https://www.infosecurity-magazine.com/news/citrix-patch-netscaler/</link>
      <description>A critical vulnerability in Citrix’s NetScaler products allows unauthenticated remote attackers to leak information from the appliance's memory</description>
      <pubDate>Tue, 24 Mar 2026 15:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/citrix-patch-netscaler/</guid>
    </item>
    <item>
      <title>Enterprise Cybersecurity Software Fails 20% of the Time, Warns Absolute Security</title>
      <link>https://www.infosecurity-magazine.com/news/cybersecurity-software-failure-20/</link>
      <description>Poor patch management, increasingly complex IT environments and continued use of obsolete software puts organizations at risk from cyber threats, says the Absolute Security 2026 Resilience Risk Index</description>
      <pubDate>Tue, 24 Mar 2026 13:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybersecurity-software-failure-20/</guid>
    </item>
    <item>
      <title>Most Cybersecurity Staff Don’t Know How Fast They Could Stop a Cyber-Attack on AI Systems</title>
      <link>https://www.infosecurity-magazine.com/news/cyber-staff-unsure-on-preventing/</link>
      <description>ISACA survey found that confusion over responsibility and lack of understanding around AI cyber-attacks makes containing them difficult</description>
      <pubDate>Mon, 23 Mar 2026 16:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cyber-staff-unsure-on-preventing/</guid>
    </item>
    <item>
      <title>High-Tech Sector Overtakes Finance as Top Target for Cyber-Attacks, Mandiant Reports</title>
      <link>https://www.infosecurity-magazine.com/news/high-tech-top-target-cyberattacks/</link>
      <description>High tech was the most frequently targeted industry in Mandiant investigations in 2025, overtaking financial services which led in 2023 and 2024</description>
      <pubDate>Mon, 23 Mar 2026 15:35:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/high-tech-top-target-cyberattacks/</guid>
    </item>
    <item>
      <title>Trivy Supply Chain Attack Expands With New Compromised Docker Images</title>
      <link>https://www.infosecurity-magazine.com/news/trivy-supply-chain-attack-expands/</link>
      <description>New Trivy Docker images 0.69.5 and 0.69.6 compromised with TeamPCP infostealer, impacting CI/CD scans</description>
      <pubDate>Mon, 23 Mar 2026 15:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trivy-supply-chain-attack-expands/</guid>
    </item>
    <item>
      <title>CISA Orders US Government to Patch Maximum Severity Cisco Flaw</title>
      <link>https://www.infosecurity-magazine.com/news/cisa-orders-us-government-patch/</link>
      <description>CISA added CVE-2026-20131 to its KEV catalog as it is being used in ransomware campaigns</description>
      <pubDate>Mon, 23 Mar 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisa-orders-us-government-patch/</guid>
    </item>
    <item>
      <title>Hackers Exploit Critical Langflow Bug in Just 20 Hours </title>
      <link>https://www.infosecurity-magazine.com/news/hackers-exploit-critical-langflow/</link>
      <description>Sysdig details how threat actors exploited a critical CVE in Langflow in less than a day </description>
      <pubDate>Fri, 20 Mar 2026 10:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hackers-exploit-critical-langflow/</guid>
    </item>
    <item>
      <title>Strategic Leadership in Digital Transformation</title>
      <link>https://www.infosecurity-magazine.com/opinions/strategic-leadership-in-digital/</link>
      <description>Executives who treat transformation as a technology upgrade often see limited returns. Those who treat it as a strategic reinvention unlock new business models, security by design and adaptive operating models.</description>
      <pubDate>Fri, 20 Mar 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/strategic-leadership-in-digital/</guid>
    </item>
    <item>
      <title>NCA Boss Warns That Teens Are Being “Radicalized” Into Cybercrime Online</title>
      <link>https://www.infosecurity-magazine.com/news/nca-boss-warns-teens-radicalized/</link>
      <description>The National Crime Agency’s director general warns that technology is rapidly reshaping crime</description>
      <pubDate>Fri, 20 Mar 2026 09:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nca-boss-warns-teens-radicalized/</guid>
    </item>
    <item>
      <title>Ransomware Affiliate Exposes Details of 'The Gentlemen' Operation</title>
      <link>https://www.infosecurity-magazine.com/news/ransomware-affiliate-gentlemen/</link>
      <description>Hastalamuerte leaks The Gentlemen RaaS ops: FortiGate exploits, BYOVD evasion, Qilin split tactics</description>
      <pubDate>Thu, 19 Mar 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ransomware-affiliate-gentlemen/</guid>
    </item>
    <item>
      <title>New Ubuntu Flaw Enables Local Attackers to Gain Root Access</title>
      <link>https://www.infosecurity-magazine.com/news/ubuntu-flaw-enables-root-access/</link>
      <description>CVE-2026-3888 Ubuntu snap flaw lets local users escalate to root via timing-based exploit</description>
      <pubDate>Wed, 18 Mar 2026 15:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ubuntu-flaw-enables-root-access/</guid>
    </item>
    <item>
      <title>Surge in Nation State Attacks on UK Firms Amid Cyber Warfare Fears</title>
      <link>https://www.infosecurity-magazine.com/news/nation-state-attacks-uk-firms/</link>
      <description>Armis reveals that “mutually assured disruption” is no longer preventing state-backed attacks</description>
      <pubDate>Tue, 17 Mar 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nation-state-attacks-uk-firms/</guid>
    </item>
    <item>
      <title>CrackArmor Flaws Expose Linux Systems to Privilege Escalation</title>
      <link>https://www.infosecurity-magazine.com/news/crackarmor-linux-privilege/</link>
      <description>CrackArmor AppArmor flaws let local Linux users gain root, break containers and enable DoS attacks</description>
      <pubDate>Mon, 16 Mar 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/crackarmor-linux-privilege/</guid>
    </item>
    <item>
      <title>Security Flaw in AWS Bedrock Code Interpreter Raises Alarms</title>
      <link>https://www.infosecurity-magazine.com/news/security-flaw-aws-bedrock/</link>
      <description>DNS-based attack in AWS Bedrock AgentCore lets AI sandboxes exfiltrate cloud data</description>
      <pubDate>Mon, 16 Mar 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/security-flaw-aws-bedrock/</guid>
    </item>
    <item>
      <title>UK: Companies House Web Glitch Exposes Corporate Details to Fraudsters</title>
      <link>https://www.infosecurity-magazine.com/news/companies-house-glitch-exposes/</link>
      <description>An issue with the Companies House website has put the personal and corporate information of millions at risk</description>
      <pubDate>Mon, 16 Mar 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/companies-house-glitch-exposes/</guid>
    </item>
    <item>
      <title>What CISOs Should Know (And Do) About OpenClaw</title>
      <link>https://www.infosecurity-magazine.com/news-features/what-cisos-should-know-and-do/</link>
      <description>Infosecurity spoke to several experts, including OpenClaw’s own security advisor, to explore what CISOs should do to contain the viral AI agent tool’s security vulnerabilities</description>
      <pubDate>Fri, 13 Mar 2026 14:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news-features/what-cisos-should-know-and-do/</guid>
    </item>
    <item>
      <title>Decentralized Cybersecurity: Why the EU Vulnerability Database Is a Blueprint For the Future</title>
      <link>https://www.infosecurity-magazine.com/opinions/eu-vulnerability-database/</link>
      <description>In a world where attackers innovate without central permission, defenders must learn to do the same</description>
      <pubDate>Fri, 13 Mar 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/eu-vulnerability-database/</guid>
    </item>
    <item>
      <title>CISA Issues Emergency Directive Over Exploited Cisco SD-WAN Flaws</title>
      <link>https://www.infosecurity-magazine.com/news/cisa-cisco-sd-wan-flaws-directive/</link>
      <description>CISA issued urgent directive as attackers exploit Cisco SD-WAN flaw granting admin access to networks</description>
      <pubDate>Thu, 12 Mar 2026 12:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisa-cisco-sd-wan-flaws-directive/</guid>
    </item>
    <item>
      <title>Researchers Uncover ‘LeakyLooker’ Vulnerabilities in Google Looker Studio</title>
      <link>https://www.infosecurity-magazine.com/news/google-looker-studios-security-gaps/</link>
      <description>LeakyLooker flaws in Google Looker Studio let attackers run cross-tenant SQL attacks on cloud data</description>
      <pubDate>Wed, 11 Mar 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/google-looker-studios-security-gaps/</guid>
    </item>
    <item>
      <title>Researchers Discover Major Security Gaps in LLM Guardrails</title>
      <link>https://www.infosecurity-magazine.com/news/major-security-gaps-llm-guardrails/</link>
      <description>Palo Alto Networks’ Unit 42 has developed a successful attack to bypass safety guardrails in popular generative AI tools</description>
      <pubDate>Wed, 11 Mar 2026 13:35:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/major-security-gaps-llm-guardrails/</guid>
    </item>
    <item>
      <title>Microsoft Fixes Two Publicly Disclosed Zero-Days </title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-fixes-two-publicly/</link>
      <description>March Patch Tuesday sees Microsoft release updates for 79 flaws</description>
      <pubDate>Wed, 11 Mar 2026 09:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-fixes-two-publicly/</guid>
    </item>
    <item>
      <title>Only 24% Of organizations Test Identity Recovery Every Six Months</title>
      <link>https://www.infosecurity-magazine.com/news/organizations-test-identity-sec-6/</link>
      <description>Only 24% of organizations test identity disaster recovery plans every 6 months, Quest Software said</description>
      <pubDate>Tue, 10 Mar 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/organizations-test-identity-sec-6/</guid>
    </item>
    <item>
      <title>Threat Actor Exploits Flaws and Uses Elastic Cloud SIEM to Manage Stolen Data</title>
      <link>https://www.infosecurity-magazine.com/news/elastic-cloud-siem-manage-stolen/</link>
      <description>Huntress researchers uncover campaign exploiting vulnerabilities to steal data using Elastic Cloud as a data hub</description>
      <pubDate>Mon, 09 Mar 2026 15:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/elastic-cloud-siem-manage-stolen/</guid>
    </item>
    <item>
      <title>Trump Administration Unveils New Cyber Strategy for America</title>
      <link>https://www.infosecurity-magazine.com/news/usa-unveils-new-cyber-strategy/</link>
      <description>US national cyber strategy focuses on stronger defenses, countering threats, fostering innovation</description>
      <pubDate>Mon, 09 Mar 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/usa-unveils-new-cyber-strategy/</guid>
    </item>
    <item>
      <title>AI Security Startups Dominate New Cyber Innovation Awards</title>
      <link>https://www.infosecurity-magazine.com/news/ai-security-startups-cyber/</link>
      <description>Over one in five winners of IT-Harvest’s 2026 Cyber 150 are AI security companies</description>
      <pubDate>Mon, 09 Mar 2026 13:25:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-security-startups-cyber/</guid>
    </item>
    <item>
      <title>TriZetto Provider Solutions Breach Hits 3.4 Million Patients</title>
      <link>https://www.infosecurity-magazine.com/news/trizetto-provider-solutions-breach/</link>
      <description>Billing services provider TriZetto Provider Solutions has begun notifying millions of patients about a data breach</description>
      <pubDate>Mon, 09 Mar 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trizetto-provider-solutions-breach/</guid>
    </item>
    <item>
      <title>ContextCrush Flaw Exposes AI Development Tools to Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/contextcrush-ai-development-tools/</link>
      <description>Critical flaw "ContextCrush" in Context7 MCP Server could allow malicious instructions into AI tools</description>
      <pubDate>Thu, 05 Mar 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/contextcrush-ai-development-tools/</guid>
    </item>
    <item>
      <title>Zero-Click FreeScout Bug Enables Remote Code Execution</title>
      <link>https://www.infosecurity-magazine.com/news/zeroclick-freescout-bug-remote/</link>
      <description>Ox Security warns that Mail2Shell could enable threat actors to hijack FreeScout systems without user interaction</description>
      <pubDate>Thu, 05 Mar 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/zeroclick-freescout-bug-remote/</guid>
    </item>
    <item>
      <title>Cisco Issues Patches for 48 Vulnerabilities in Enterprise Networking Products</title>
      <link>https://www.infosecurity-magazine.com/news/cisco-issues-patches-48/</link>
      <description>Two of the 48 Cisco vulnerabilities, affecting Secure Firewall Management Center, are maximum-severity flaws</description>
      <pubDate>Thu, 05 Mar 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisco-issues-patches-48/</guid>
    </item>
    <item>
      <title>Surge in Attacks on Surveillance Cameras Linked to Iranian Hackers</title>
      <link>https://www.infosecurity-magazine.com/news/iran-attacks-surveillance-cameras/</link>
      <description>Increased attempts to compromise surveillance cameras linked to Iran during Middle East conflict</description>
      <pubDate>Wed, 04 Mar 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/iran-attacks-surveillance-cameras/</guid>
    </item>
    <item>
      <title>Adecco Group Global Head of IT Security Alex Gomez on Balancing Cybersecurity, AI and Innovation</title>
      <link>https://www.infosecurity-magazine.com/interviews/adeccos-alex-gomez-interview/</link>
      <description>The Adecco Group is one of the largest human resources and recruitment firms in the world, so its vital systems are secure and efficient. Alex Gomez tells Infosecurity how he addresses that balance – and benefits the business at the same time </description>
      <pubDate>Wed, 04 Mar 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/interviews/adeccos-alex-gomez-interview/</guid>
    </item>
    <item>
      <title>Expect Iran to Launch Cyber-Attacks Globally, Warns Google Head of Threat Intel</title>
      <link>https://www.infosecurity-magazine.com/news/iran-cyber-attacks-global-google/</link>
      <description>John Hultquist suggests “aggressive” Iranian cyber attackers will target the US and its Gulf allies with plausibly deniable ransomware attacks, hacktivist campaigns and more</description>
      <pubDate>Mon, 02 Mar 2026 15:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/iran-cyber-attacks-global-google/</guid>
    </item>
    <item>
      <title>Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks Intensify</title>
      <link>https://www.infosecurity-magazine.com/news/32m-phishing-emails-detected-2025/</link>
      <description>2025 saw 32M phishing emails, with identity threats surpassing vulnerabilities</description>
      <pubDate>Thu, 26 Feb 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/32m-phishing-emails-detected-2025/</guid>
    </item>
    <item>
      <title>Exploitable Vulnerabilities Present in 87% of Organizations</title>
      <link>https://www.infosecurity-magazine.com/news/exploitable-vulnerabilities-in-87/</link>
      <description>Datadog report reveals two-fifths of services are affected by exploitable bugs</description>
      <pubDate>Thu, 26 Feb 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/exploitable-vulnerabilities-in-87/</guid>
    </item>
    <item>
      <title>Global Cyber Agencies Urge Immediate Patching of Cisco SD-WAN Zero Day</title>
      <link>https://www.infosecurity-magazine.com/news/immediate-patch-cisco-catalyst/</link>
      <description>The US and allies are urging Cisco Catalyst SD-WAN customers to hunt for signs of exploitation</description>
      <pubDate>Thu, 26 Feb 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/immediate-patch-cisco-catalyst/</guid>
    </item>
    <item>
      <title>44% Surge in App Exploits as AI Speeds Up Cyber-Attacks, IBM Finds</title>
      <link>https://www.infosecurity-magazine.com/news/app-exploits-surge-ai-speeds/</link>
      <description>IBM's 2026 X-Force report reveals 44% rise in cyber-attacks on public apps, driven by AI and flaws</description>
      <pubDate>Wed, 25 Feb 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/app-exploits-surge-ai-speeds/</guid>
    </item>
    <item>
      <title>ICO’s £14m Reddit Fine Highlights Age Check Privacy Concerns</title>
      <link>https://www.infosecurity-magazine.com/news/icos-14m-reddit-fine-age-check/</link>
      <description>The UK’s ICO has fined Reddit over £14m for failing to use children’s personal information lawfully</description>
      <pubDate>Wed, 25 Feb 2026 09:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/icos-14m-reddit-fine-age-check/</guid>
    </item>
    <item>
      <title>AI Accelerates Attacker Breakout Time to Just Four Minutes</title>
      <link>https://www.infosecurity-magazine.com/news/ai-accelerates-attack-breakout/</link>
      <description>ReliaQuest claims AI has reduced breakout and exfiltration time to under 10 minutes</description>
      <pubDate>Tue, 24 Feb 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-accelerates-attack-breakout/</guid>
    </item>
    <item>
      <title>GenAI Has Become the Biggest Data-Exposure Risk in Enterprise History</title>
      <link>https://www.infosecurity-magazine.com/opinions/genai-biggest-data-risk-in-history/</link>
      <description>GenAI adoption is outpacing enterprise security. Here's what organizations must do to close the widening gap</description>
      <pubDate>Fri, 20 Feb 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/genai-biggest-data-risk-in-history/</guid>
    </item>
    <item>
      <title>Industrial Control System Vulnerabilities Hit Record Highs </title>
      <link>https://www.infosecurity-magazine.com/news/industrial-control-system-vulns/</link>
      <description>Forescout paper reveals ICS advisories hit a record 508 in 2025</description>
      <pubDate>Thu, 19 Feb 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/industrial-control-system-vulns/</guid>
    </item>
    <item>
      <title>Flaws in Popular Software Development App Extensions Allow Data Exfiltration</title>
      <link>https://www.infosecurity-magazine.com/news/vulnerabilities-vs-code-cursor/</link>
      <description>Four serious new vulnerabilities affect Microsoft Visual Studio Code, Cursor and Windsurf extensions, three of which remain unpatched</description>
      <pubDate>Thu, 19 Feb 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/vulnerabilities-vs-code-cursor/</guid>
    </item>
    <item>
      <title>Researchers Reveal Six New OpenClaw Vulnerabilities</title>
      <link>https://www.infosecurity-magazine.com/news/researchers-six-new-openclaw/</link>
      <description>Endor Labs has published details of six new vulnerabilities in popular AI assistant OpenClaw </description>
      <pubDate>Thu, 19 Feb 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/researchers-six-new-openclaw/</guid>
    </item>
    <item>
      <title>Why Your Organization Should Start Quantum Preparedness Today (Even If Quantum Computers Are Years Away)</title>
      <link>https://www.infosecurity-magazine.com/opinions/why-your-organization-should-start/</link>
      <description>Quantum preparedness manageable, using skills and resources security teams already have and embedding the activities in ongoing security remediation work</description>
      <pubDate>Wed, 18 Feb 2026 14:01:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/why-your-organization-should-start/</guid>
    </item>
    <item>
      <title>Future-Proofing Critical Infrastructure: National Gas CTO Darren Curley on IT/OT Security Integration</title>
      <link>https://www.infosecurity-magazine.com/interviews/national-gas-cto-darren-curley-it/</link>
      <description>In conversation with Infosecurity, National Gas CTO Darren Curley explains why more security solutions don’t always mean better protection</description>
      <pubDate>Wed, 18 Feb 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/interviews/national-gas-cto-darren-curley-it/</guid>
    </item>
    <item>
      <title>Over-Privileged AI Drives 4.5 Times Higher Incident Rates</title>
      <link>https://www.infosecurity-magazine.com/news/overprivileged-ai-45-times-higher/</link>
      <description>Teleport study reveals that organizations running over-privileged AI have a 76% incident rate</description>
      <pubDate>Tue, 17 Feb 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/overprivileged-ai-45-times-higher/</guid>
    </item>
    <item>
      <title>SMEs Wrong to Assume They Won’t Be Hit by Cyber-Attacks, NCSC Boss Warns 
</title>
      <link>https://www.infosecurity-magazine.com/news/sme-cyber-attack-threat-ncsc/</link>
      <description>NCSC’s Richard Horne has warned that cybercriminals do not care about business size and called for SMEs to act now to secure their organizations  </description>
      <pubDate>Mon, 16 Feb 2026 16:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/sme-cyber-attack-threat-ncsc/</guid>
    </item>
    <item>
      <title>Google Warns of In the Wild Exploit as It Patches New Chrome Zero Day</title>
      <link>https://www.infosecurity-magazine.com/news/google-patches-new-in-wild-chrome/</link>
      <description>A high severity vulnerability in Google Chrome and allows remote attackers to execute code </description>
      <pubDate>Mon, 16 Feb 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/google-patches-new-in-wild-chrome/</guid>
    </item>
    <item>
      <title>Munich Security Conference: Cyber Threats Lead G7 Risk Index, Disinformation Ranks Third</title>
      <link>https://www.infosecurity-magazine.com/news/munich-security-index-cyberattacks/</link>
      <description>G7 countries ranked cyber-attacks as the top risk, while BICS members placed cyber threats only as the eighth most pressing risk</description>
      <pubDate>Fri, 13 Feb 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/munich-security-index-cyberattacks/</guid>
    </item>
    <item>
      <title>Safeguarding Solar Energy Through Smarter Cybersecurity</title>
      <link>https://www.infosecurity-magazine.com/opinions/safeguarding-solar-through-smarter/</link>
      <description>Solar energy has been recognised by EU Institutions as critical infrastructure. This is what the industry must do to better protect itself from cyber threats.</description>
      <pubDate>Fri, 13 Feb 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/opinions/safeguarding-solar-through-smarter/</guid>
    </item>
    <item>
      <title>Time to Exploit Plummets as N-Day Flaws Dominate</title>
      <link>https://www.infosecurity-magazine.com/news/time-exploit-plummets-nday-flaws/</link>
      <description>Flashpoint warns of a dramatic drop in the average time between vulnerability disclosure and exploitation</description>
      <pubDate>Thu, 12 Feb 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/time-exploit-plummets-nday-flaws/</guid>
    </item>
    <item>
      <title>FIRST Forecasts Record-Breaking 50,000+ CVEs in 2026</title>
      <link>https://www.infosecurity-magazine.com/news/first-forecasts-record-50000-cve/</link>
      <description>This year should break all the records in terms of vulnerability disclosed, reaching or even surpassing 50,000 new CVEs disclosed</description>
      <pubDate>Wed, 11 Feb 2026 11:35:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/first-forecasts-record-50000-cve/</guid>
    </item>
    <item>
      <title>Microsoft Fixes Six Zero Day Vulnerability in February Patch Tuesday</title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-six-zero-day-feb-2026/</link>
      <description>Six actively exploited zero-day bug have been patched by Microsoft</description>
      <pubDate>Wed, 11 Feb 2026 09:50:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-six-zero-day-feb-2026/</guid>
    </item>
  </channel>
</rss>