Information Security Magazine

Researchers at Palo Alto’s Unit 42 have outlined a list of recommended security controls for vibe coding tools

US agency CISA has retired ten Emergency Directives issued between 2019 and 2024, marking a new step in managing federal cyber-risk

California privacy regulator, the CPPA, is cracking down on data brokers trading personal data without authorization

“Pervasive” threat of phishing, invoice scams and other cyber-enabled fraud is at “record highs”, warns WEF Cybersecurity Outlook 2026

TRM Labs says illegal crypto flows into digital wallets increased to $158bn in 2025

A database featuring 300,000+ users of notorious hacking forum BreachForums has been leaked online

Europol-backed operation targets group behind numerous BEC attacks and romance scams

Researchers at the World Economic Forum have shown that threat actors can use commercial deepfake tools to bypass corporate security protections

Check Point has uncovered a vast, AI-powered scam operation dubbed the “Truman Show”

The FBI says North Korea’s Kimsuky APT group is using QR codes in spear phishing campaigns

The GoBruteforcer botnet has been observed targeting exposed Linux servers on services like FTP and MySQL

Researchers at Radware discovered new prompt injection attacks in ChatGPT agentic features

A long-term cyber-espionage campaign targeting South Asia's telecom firms has been linked to UAT-7290

Misconfigurations abused to make phishing emails look like they come from within the organization

Absolute Security claims that full recovery from endpoint-related downtime can take up to a fortnight for most organizations

The Trump administration decided to leave 66 international organizations, including the GFCE and the European Centre of Excellence for Countering Hybrid Threats

A newly discovered vulnerability in authentication platform n8n could allow threat actors to take control of n8n servers

Malicious Windows packer named pkr_mtsi used as a flexible malware loader in malvertising campaigns

New Android malware enables unauthorized tap-to-pay transactions without physical access to bank cards

Taiwan recorded an average of 2.63 million cyber intrusion attempts to it critical infrastructure per day coming from China in 2025