Information Security Magazine

New TrickBot variant hides C2 communication inside DNS queries, replacing decade-old HTTP pattern

Hugging Face recently disclosed a security breach. OpenAI has now said that it was its AI models which broke containment and hacked Hugging Face themselves

New Ubuntu snap-confine race condition lets local users escalate to root on default installs

CodeMender actively builds and runs exploits in customer-managed sandboxes to verify if vulnerabilities are truly exploitable

Russian-speaking actor Trim built a commercial offensive AI pentest tool on jailbroken Claude models

Analysis by Black Kite warns that ransomware ecosystem is becoming bigger and more fragmented

FBI warned of deepfake videos of IC3 leadership directing users to spoofed complaint sites

Craneware, a provider of financial software for US healthcare organizations, has disclosed a cyber incident involving unauthorized access and data theft

In a new campaign, North Korean hacking group Famous Chollima targeted crypto professionals through ClickFix lures to deliver Windows and macOS trojans

Cruciferra crypter used process ghosting and 90 custom ciphers to hide payloads for multiple actors

JadePuffer follow-up campaign deployed ENCFORGE locker built to destroy AI model artifacts

A researcher who discovered a critical vulnerability in WordPress has used OpenAI’s latest model to develop an exploit chain

Researchers have linked HollowGraph malware to the Cavern framework after discovering its use of Microsoft 365 calendars and Microsoft Graph APIs as a stealthy C2 channel

Two chiefs of UK policing agencies said the Transport for London prosecution demonstrates the need for Cybercrime Risk Orders

Government organizations are targeted by attackers who know agencies cannot afford disruption to public services

23andMe has agreed to an $18m settlement with 42 US attorneys general over its 2023 data breach, including enhanced data protection requirements

US government agencies have until July 19 to patch two critical Fortinet vulnerabilities

Analysis of ransomware incidents by ReliaQuest indicates a shift in the ransomware landscape

Global phishing campaign disguised a Lua loader as a font file to deploy RATs and infostealers

Cybersecurity researchers tested Open AI GPT 5.5’s offensive cyber capabilities – and the results showed how effective a frontier LLM can be for hackers