Information Security Magazine

A novel attack technique dubbed ”Lies-in-the-Loop” (LITL) has been observed manipulating human approval prompts in agentic AI systems

ISACA has been appointed by the US DoD as the global credentialing authority for its CMMC program

LKQ confirmed that over 9000 individuals saw their personal data compromised because of the breach

Eurojust reveals new policing operation which helped to smash a Ukraine-based call center fraud gang

China’s Ink Dragon is using European government networks to hide its espionage activity

The browser extension Urban VPN Proxy has been reportedly collecting users’ AI chat conversations

A flaw in JumpCloud Remote Assist for Windows has exposed managed endpoints to local privilege escalation and denial-of-service attacks

Amazon researchers believe this campaign is part of a bigger operation spearheaded by Russia’s military intelligence service, the GRU

US financial services firm Credit700 has revealed a major data breach impacting 5.8 million people

Check Point has detected thousands of phishing emails in the past fortnight, offering fake promotions and special deals

A Minnesota man has pleaded guilty to a credential stuffing scheme that compromised over 60,000 accounts

A new phishing campaign has been identified, delivering the Phantom information-stealing malware via an ISO attachment

Asahi Group’s CEO said he is considering creating a dedicated cyber unit following the ransomware attack that crippled the company

MITRE has released its Top 25 CWE list for 2025, compiled from software and hardware flaws behind almost 40,000 CVEs

The UK’s National Cyber Security Centre has called on businesses to apply Cyber Essentials to suppliers

The National Cyber Security Centre has released new learnings from a cyber deception pilot

The UK’s data protection regulator has fined password manager provider LastPass £1.2m after 2022 data breach

The Coupang South Korean unit's response will be spearheaded by an executive based in the US

OpenAI has reported a surge in performance as GPT-5.1-Codex-Max reaching 76% in capability assessments, and warned of upcoming cyber-risks

A new campaign involving 19 malicious Visual Studio Code extensions used a legitimate npm package to embed malware in dependency folders