Information Security Magazine

The UK’s National Cyber Security Centre has urged users of its Web Check and Mail Check services to find alternatives

Sandworm deployed data wipers against Ukrainian governmental entities and companies in the energy, logistics and grain sectors

Experts have uncovered large-scale phishing exploiting Booking.com, Airbnb and Expedia accounts, targeting hotels and customers

A new Cisco report exposed large language models to multi-turn adversarial attacks with 90% success rates

ENISA report reveals DDoS accounted for 60% of public sector security incidents last year

Google warns of “just-in-time AI” malware using LLMs to evade detection and generate malicious code on-demand

Europe will likely face a combination of heightened cyber-physical attacks and information operations coming from nation-state groups in 2026

Operation “Chargeback” has dismantled global fraud networks misusing stolen card data from more than 4.3 million victims

A previously unknown cyber actor UNK_SmudgedSerpent has been observed targeting academics with phishing and malware, merging techniques from Iranian groups

Three of Anthropic’s Claude Desktop extensions were vulnerable to command injection – flaws that have now been fixed

Juniper Research predicts a $9bn drop in losses to SMS fraud next year

Zscaler estimates 239 malicious Android apps made it onto the official Play store over the past year

Nine alleged crypto scammers arrested in Cyprus, Germany and Spain

Instead of relying on more traditional methods, the backdoor exploits OpenAI’s Assistants API for command-and-control communications

Scattered Spider, ShinyHunters and LAPSUS$ have formed an enhanced coordinated threat network for extortion efforts

DragonForce, a ransomware group using Conti’s code, has adopted a cartel model to expand and recruit

ReliaQuest data reveals identity issues were responsible for 44% of cloud security alerts in Q3

Digital thieves have got away with over $120m stolen from popular decentralized finance protocol Balancer

CISA and NSA have released a blueprint to enhance Microsoft Exchange Server security against cyber-attacks

Flaws in Windows Graphics Device Interface (GDI) have been identified that allow remote code execution and information disclosure