Information Security Magazine

Private firms are being targeted by nation-state groups for reasons beyond finance, argued ISACA’s Bharat Thakrar

Halcyon’s Cynthia Kaiser lifts the lid on the dark web market for AI cybercrime tools

NCSC director of operations, Paul Chichester, says it’s time to future-proof cybersecurity today

Humans still need to be part of cyber defense, but refusing to deploy AI is no longer optional against AI-enhanced cyber threats, warns Dataminr’s Joe Slowik

Bayer’s security awareness training now focuses on psychological approaches rather than technical methods for detecting social engineering

A threat actor used AI coding tools to build and test EDR evasion malware, Sophos finds

Attackers backdoored 32 packages in Red Hat's official npm scope to steal cloud and CI secrets

UK organizations are prioritizing AI-driven cybersecurity as 43% cite AI-powered attacks as their top risk, prompting significant investment in advanced threat defense

A new Silobreaker and SANS Institute paper examines the ‘Intelligence-Stakeholder Gap’ and what organizations must do to achieve business buy-in on threat intelligence

Obsidian publishes PoC for a 1-click Flowise RCE that can fully compromise self-hosted servers

Semperis is set to bring ‘Enter the War Room: A Tabletop Experience’ to Infosecurity Europe to help cybersecurity leaders prepare to face real incidents

Top cybersecurity vendors said AI won't replace entry-level – only routine ticket-taking and triage

FSB-linked Gamaredon concealed a fileless worm in NTFS data streams to spy on Ukraine targets

Push Security says threat actors are delivering malware hosted on chatgpt.com/s/ domain

A vulnerability in Palo Alto Networks’ PAN-OS software is being exploited in attacks

OWASP’s new Agentic Research Council will aim to connect academic work to operational realities on agentic AI security

Threat actors from the Silent Ransom Group, aka Luna Moth, are escalating attacks by impersonating IT staff in phone calls and even showing up in person to gain direct access to victim systems

From a research-driven pilot, the Cybersecurity Communities of Support (CyCOS) is about to be handed over to CIISec

ESET’s 2026 APT Activity Report suggests China-backed APTs are using instability in the region to target victims, as well as continuing activity against organizations around the globe

Sloppy AI-generated npm infostealer leaked its own GitHub token, exposing the operator