Information Security Magazine

Checkmarx report warns that business pressure is among the reason security leaders let security compliance slip

Most dev teams use AI coding assistants but only 30% have full governance in place

Critical phpBB authentication bypass lets attackers hijack any account with one request

The flaw, CVE-2026-11645, can allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page

Check Point says a critical vulnerability in its Remote Access VPN and Mobile Access solutions has been exploited by Qilin

Speaking at Infosecurity Europe, Ashish Shrestha, former CISO at Jaguar Land Rover revealed why he wanted over 30,000 employees to change their passwords in the immediate aftermath of the incident

Meta’s WhatsApp demands contempt ruling after users report NSO Group-linked phishing

North Korean actor UNK_DeadDrop targeted developers with fake coding tasks to steal crypto

OpenAI brings Lockdown Mode and Active Sessions to ChatGPT to curb prompt injection data theft

At Infosecurity Europe 2026, OWASP’s Ariel Fogel warned that prompt injection remains an “unresolved problem” within generative AI architecture

The Department of Science, Innovation and Technology details how a combination of hands-on human advice and technology systems keeps government agencies safe

Meta confirms an AI tool vulnerability led to unauthorized access to Instagram accounts after a failure in email verification during password reset

Lloyds Banking Group shared its approach for securing agentic AI workflows, with a mix of hands on experimentation and cross functional governance

The OWASP agentic AI security framework helps organizations assess governance maturity vs adoption and adjust governance as needed

Ox Security field CTO, Boaz Barzel, makes the case for vibe security to tackle AI agent coding risks

A perfect storm of legacy devices, hyper connectivity and human fatigue is bad news for the healthcare sector, warns Cyber Salus

Critical Everest Forms Pro RCE flaw exploited to create rogue WordPress admin accounts

Microsoft Detection and Response Team (DART) details how it has uncovered malicious AI applications as cyber criminals manipulate organizations adopting AI tools

Newly named Chinese-speaking actor TA4922 expands from East Asia into Europe and Africa