Information Security Magazine

JFrog found an npm package impersonating postcss-selector-parser to drop a multi-stage Windows RAT

OpenAI expanded Daybreak with a full GPT-5.5-Cyber release to help defenders patch software flaws

All US federal agencies will have to complete their post-quantum cryptography transition by 2031, according to a new Trump Executive Order

Cybercriminals launch fake GTA 6 pre-order sites offering early access for crypto payments

Two young British men have pleaded guilty to hacking Transport for London as part of a Scattered Spider plot

The Five Eyes Alliance has published a rare call to action for organizations facing AI threats

ESET details GentleKiller, the EDR-killer framework the Gentlemen ransomware gang gives affiliates

Apple BootROM exploit exposes unpatchable USB flaw on A12 and A13 devices

North Korean threat actor Sapphire Sleet has been linked to a supply chain attack targeting Mastra, according to Microsoft security researchers

At least four cybersecurity firms confirmed they have been affected by a breach of business intelligence platform Klue via Salesforce integration

The UK’s data protection regulator the information commissioner has resigned after his position became “untenable”

The NCSC has released guidance for Fortinet customers impacted by the FortiBleed threat campaign

Working with frontier AI models, this new platform aims to help discovering, prioritizing, validating and remediating code vulnerabilities

SocGholish malware has been removed from 15,000 sites associated with Evil Corp hackers

Half of cybersecurity leaders lack confidence in detecting threats on Slack, Teams and other non-email platforms, despite growing attacker focus

A Rust crypto clipper hides behind fake GitHub stars and AI-narrated YouTube videos

Hospital insider escapes criminal prosecution after attempting to sell royal’s medical records

Analysis of chatter on underground forums by Sophos finds that hackers fear AI could take work away from them

CloudSEK maps Operation Escaneo, a campaign hitting Latin American infrastructure via perimeter bugs

Richard Horne, the NCSC CEO, said three-quarters of cyber-attacks targeting UK critical infrastructure came from nation-state actors