Infosecurity News

  1. Google Suspends Open-Source Bug Bounty Due to AI Vulnerability Reports

    Google has paused its Open Source Vulnerability Rewards Program due to a flood of AI submissions

  2. More UK Schools Are Recovering Faster from Cyber Incidents

    Ofqual study finds growing number of UK schools are bouncing back “immediately” from cyber-attacks

  3. Frontline Education Breach Impacts K-12 School District Staff

    A breach at school software provider Frontline Education has exposed employee data

  4. Microsoft: AI Cuts Post-Compromise Attack Time to Minutes

    Microsoft has warned that threat actors have gained the advantage over defenders by using AI to enhance the speed and scale of attacks

  5. Police Target KillSec Ransomware Group with Arrests and Seizures

    Investigators have disrupted the operations of ransomware group KillSec and arrested several key suspects

  6. Two Zero-Days Exploited in Attack on Dutch Institute for Vulnerability Disclosure

    The Dutch Institute for Vulnerability Disclosure reveals agentic AI-powered attack using Zammad zero-days

  7. Critical Cisco Catalyst SD-WAN Zero-Day Under Active Exploitation

    Vulnerability in Cisco Catalyst SD-WAN Manager allows an unauthenticated, remote attacker to access systems with admin privileges

  8. China-Linked Hackers Impersonate AI Experts to Target US Policy Insiders

    TA419 posed as AI policymakers and economists to phish US AI policy experts' Microsoft 365 accounts

  9. CloudSyncD MacOS Backdoor Hides Behind Fake Zoom Installer

    CloudSyncD uses a fake Zoom installer to phish Mac passwords and launch a two-stage backdoor

  10. AI Threats Top Cybersecurity Preparedness Gap, PwC Finds

    PwC finds global security leaders are most concerned about attacks on AI systems

  11. MI5 Warns Over 100 Academics Helped China's Espionage Plans

    MI5 has issued a rare warning to UK academics contributing to the China General Technology Research Institute

  12. AI-Found Vulnerabilities More Likely to Enable RCE, Google Says

    AI-discovered vulnerabilities are more likely to enable RCE, as disclosures and exploitation rise

  13. Trump, Six AI Giants Sign 'Super Intelligence' Safety Accord

    Trump and six AI firms sign a voluntary accord on internal controls, audits and board oversight

  14. AI Boosts SOC Analyst Capacity but Limits Skill Development

    Swimlane finds that AI is reducing repetitive work for SOC teams but some feel their careers may suffer

  15. Attackers Combine ChatGPT Feature Abuse With ClickFix to Deliver Trojan Malware

    Cybersecurity researchers at Huntress identify campaign to deliver potent trojan which targets users searching for ChatGPT via Google

  16. Apple Patches CoreGraphics Zero Day Exploited in Attacks

    Apple has patched CVE-2026-86950, a zero-day bug in the iOS CoreGraphics engine

  17. RatHat's Evolving C2 Panel Points to Malware-as-a-Service Model

    RatHat's C2 panel now builds malware and ranks victims with AI across nearly 100 deployments

  18. Amazon Bedrock AgentCore Flaws Could Expose AWS Credentials

    AWS AgentCore SDK flaws could let attackers run commands in AI sandboxes and reach AWS credentials

  19. Microsoft Warns NeedyMantis Malware Enables Persistent Network Access

    Microsoft Threat Intelligence warns that NeedyMantis threat actor from China has targeted organizations across a range of industries

  20. Japanese Railway Operators Hit with Weekend Cyber Attacks

    Tokyo Metro and Keio have revealed separate cyber-attacks

What’s Hot on Infosecurity Magazine?