Information Security Magazine

The FBI warned that the RaaS operation has significantly enhanced its tactics, techniques and procedures, making it harder for defenders to counter

The UK’s privacy watchdog has called on police using facial recognition to follow its recommendations

Cifas data finds account takeover and identity fraud are driving a surge in fraud cases

The security flaw in Snowflake’s GitHub Actions workflow had been missed by a GitHub Advanced Security scan, said a Wiz researcher

Enterprise software creation has accelerated as vulnerability levels rise, Sonatype finds

Critical AIT-GUI flaws expose spacecraft commands and scripts to unauthenticated attackers

UT San Antonio has taken IT systems offline following a cyber incident, disrupting student registration and tuition payments days before term is due to resume

Black Kite finds mid-market is the sweet spot for ransomware as manufacturers are most likely to be hit

Solicitors Regulation Authority sounds the alarm over AI hallucinations and data leaks

UNISOC modem flaw enabled kernel-level code execution through video calls

Critical User Profile Builder flaw let unauthenticated attackers access administrator accounts

The European Telecommunications Standards Institute has launched an approval process for standards vendors will have to meet under the Cyber Resilience Act

Nearly 40,000 customers of hardware wallet provider SafePal have been impacted by a data breach

Flashpoint data reveals infostealers were responsible for taking 1.7 billion credentials in the first half of 2026

Researchers have verified that ExfilSquad possesses sensitive data stolen from at least 13 victims after the extortion group published leaked datasets via torrents

Evooo1Bot is a newly observed botnet based on the Mirai framework but equipped with advanced features, turning edge devices into persistent proxies

AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data

Threat intelligence researchers from Broadcom revealed that a known Chinese APT group may be linked to a lucrative crypto fraud operation

CRM provider Beacon has revealed that a compromised AWS access key was the likely root cause of the breach of 1500 UK charities’ data

Google Cloud has set a 2027 deadline to mitigate store-now-decrypt-later risks as part of its post-quantum cryptography roadmap, with wider migration goals extending through 2028