Information Security Magazine

RatHat's C2 panel now builds malware and ranks victims with AI across nearly 100 deployments

AWS AgentCore SDK flaws could let attackers run commands in AI sandboxes and reach AWS credentials

Microsoft Threat Intelligence warns that NeedyMantis threat actor from China has targeted organizations across a range of industries

Tokyo Metro and Keio have revealed separate cyber-attacks

Kiteworks has lifted a temporary shutdown recommendation which was issued on the back of federal intelligence

Bitget has restarted Bitcoin withdrawals after a $387.5m breach of its hot and warm wallets

NVIDIA has launched a platform pairing runtime controls with hardware monitoring for AI agents

A quarter of victims of deepfake attacks have lost over $1m. CISOs worry that boardrooms don’t understand the threat

Ox Security found security shortcomings in analysis of over 15,000 MCP servers

Citrix has confirmed exploitation of two critical zero-day RCE bugs

The ‘SalesBleed’ set of weaknesses in Salesforce’s Agentforce agents exposed CRM data to attackers via prompt injection and DNS exfiltration

The CISA plan provides guidance and resources for election officials to secure systems such as voter registration databases and voting machines

The newly-discovered trojan abuses the Android Accessibility Service to gain control over victim devices and collect sensitive banking credentials

EfficientIP says it flagged AliExpress phishing domains before they were registered

Ransom notes by n0n ransomware claim to take double extortion to a new level of danger for victims

CISA has set out a new framework to improve CVE data quality as vulnerability volumes rise

Whitehall is shifting from mandatory cyber controls to service-led governance following a critical audit exposing failures of its 2022 cyber strategy

Australian PM Anthony Albanese criticized OpenAI’s response to the incident, which occurred in June 2026

ShareGate study claims to reveal a governance ‘crisis’ as AI usage grows

SANS Institute report claims data rather than skills is now the main hurdle for threat hunters