Information Security Magazine

Researchers at ReliaQuest warned of widespread DNS poisoning attacks targeting the hospitality sector as part of a cyber espionage campaign

OpenAI’s chatbot tool ChatGPT ranked among the top 10 most impersonated brands in phishing attacks for the first time

Comparitech’s analysis of incidents in the first half of 2026 finds that the emergence of The Gentlemen ransomware has resulted in surge in attacks against higher education

International agencies issue joint alert over state-backed campaign exploiting a critical vulnerability in the Zimbra Collaboration Suite

CoreView research finds that security leadership is concerned about AI Assistant exposing confidential data

US government agencies have warned that Iranian cyber actors are targeting US-based Siemens and Schneider industrial equipment

Sophos report warns that the rapid adoption of AI by businesses is leaving them vulnerable to a new source of cyber threats

Dolphin X is a new infostealer that uses AI to sort and rank victims, giving cybercriminals a faster way to identify lucrative targets

A new study of organizations which have fallen victim to ransomware suggests the rise of AI-tools being used by hackers is making life harder for defenders

New TrickBot variant hides C2 communication inside DNS queries, replacing decade-old HTTP pattern

Hugging Face recently disclosed a security breach. OpenAI has now said that it was its AI models which broke containment and hacked Hugging Face themselves

New Ubuntu snap-confine race condition lets local users escalate to root on default installs

CodeMender actively builds and runs exploits in customer-managed sandboxes to verify if vulnerabilities are truly exploitable

Russian-speaking actor Trim built a commercial offensive AI pentest tool on jailbroken Claude models

Analysis by Black Kite warns that ransomware ecosystem is becoming bigger and more fragmented

FBI warned of deepfake videos of IC3 leadership directing users to spoofed complaint sites

Craneware, a provider of financial software for US healthcare organizations, has disclosed a cyber incident involving unauthorized access and data theft

In a new campaign, North Korean hacking group Famous Chollima targeted crypto professionals through ClickFix lures to deliver Windows and macOS trojans

Cruciferra crypter used process ghosting and 90 custom ciphers to hide payloads for multiple actors

JadePuffer follow-up campaign deployed ENCFORGE locker built to destroy AI model artifacts