Information Security Magazine

Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA

Chinese and Indian spies converged on the same Balochistan police force, SentinelLabs found

New research reveals cyber-attackers can spoof OAuth Client IDs in Microsoft Entra ID, creating a stealthy path into cloud environments

Progress Software, the provider of the popular file-sharing and data storage solutions, has urged customers to shut down the server hosting their Storage Zone Controller

Cybersecurity agencies from 12 countries have warned that Russian state-backed hackers are actively targeting vulnerable routers using weak SNMP credentials

An Armenian man has pleaded guilty to his role in the infamous Ryuk ransomware operation

Australian Cyber Security Centre warns CMS users of mass scanning and exploitation campaign

CISA reveals how it responded after sensitive AWS GovCloud credentials and internal data were exposed in a public GitHub repository

A new multi-purpose backdoor allows cyber threat actors to conduct both quiet espionage activity and destructive wiping operations

Researchers at the AI Now Institute developed a proof-of-concept exploit showing common AI tools used for security could backfire

GodDamn ransomware uses remote desktop application to secretly move around networks and drop the malicious PoisonX kernel driver

Microsoft has said the volume of Windows security updates is set to grow as it uses AI to find new bugs

NHS tells staff they could face prison for “inappropriate” access to patients’ medical records

Huntress found a threat actor using vibe-coded PowerShell to map an Active Directory network

Survey of cybersecurity leaders by MetaCompliance finds that many feel boards are uninterested in ever-evolving cyber risks

Operation First Light 2026, coordinated by Interpol and funded by the Chinese government, has led to 5,811 arrests

Wiz discovered GhostApproval, a symlink flaw in six major AI coding assistants that bypasses approval

Over 70 cybersecurity organizations have signed the CREST AI Charter detailing responsible use of AI for security

Cybersecurity researchers at ESET identify big rise in suspicious and malicious toolsets which put users at risk from cyber-attacks

Zimperium found RedWing, an Android spyware sold as a service via Telegram to target banking apps