Information Security Magazine

Known exploited vulnerabilities take a median time of 87 days to be patched, according to a new Moody’s report

The 2024 cyber incident affected the healthcare data of 62 million people, who launched a class action lawsuit against the business services firm

A breach affecting the OpenCode Console may lead to the exposure of API keys for Anthropic, OpenAI and Google Gemini users

Cloud Backup, SaaS Security, and Cloud Management services offline as IT service provider investigates possibility that unknown attackers have full access to client environments via stolen tokens

CyberSN observed a particularly big dip in cybersecurity leadership positions such as CISO and Cybersecurity Director in 2026 compared to 2025

New report warns that threats of violence against employees of organizations hit by ransomware are on the rise as attackers find new ways to guarantee payments

The suspected PRC-aligned group Armory Castle has been observed exploiting the newly disclosed flaw for long-term persistence

Several services of the US Bankruptcy Noticing Center are unavailable due to a cyber incident affecting defense contractor BAE Systems

France-based operators of Danfoss refrigeration controllers have sharply reduced their internet exposure after the October 11 cyber-attack

Symantec warned that Aoki can steal API keys and tokens from a number of popular AI coding assistants, including Claude and Gemini

CVE-2026-35029 and CVE-2026-59823 affect LiteLLM, which is commonly used by enterprises to connect their AI applications to providers like OpenAI and Anthropic

Microsoft and partners reveal a major Chinese-language phishing network centered around the Yam Store marketplace

The ICO has handed the Metropolitan Police a reprimand and enforcement notice after privacy failings linked to the Auror platform

Researchers at Forescout said the discovery shows how ClickFix is evolving from a delivery technique into full-blown cyber-criminal infrastructure

Dashlane data finds that passkey adoption is growing but not quickly enough

At least two French supermarkets using temperature regulation devices from Dixell Electronics also experienced food stock disruptions

Microsoft issued its largest ever round of security updates in the October Patch Tuesday

New Chainguard research reveals larger companies struggle to patch vulnerabilities due to business priorities and operational disruption

Several Europe-based retail firms have confirmed experiencing cyber incidents, while H&M said it is “investigating” such claims

Flashpoint research suggests that only 25% of security teams have actively deployed AI, with many concerned about AI Agents’ negative impact