Information Security Magazine

AI models are making rapid gains in vulnerability research and exploit development, raising new cybersecurity risks, a Forescout study finds

Coordinated action by FBI, Europol and others seizes infrastructure, makes arrests – and sends warning letters to known DDoS service users

US authorities jail two Americans for aiding North Korean laptop farm scams that infiltrated over 100 firms

APK malformation tactic now appears in over 3000 Android malware samples evading static analysis

Tennessee's CRMC notifies over 337,000 patients of Rhysida ransomware breach exposing sensitive data

NIST’s National Vulnerability Database will now prioritize enriching new and exploited flaws to address the record growth of reported CVEs

Ox Security claims as many as 200,000 servers are exposed by newly discovered MCP vulnerability

Halcyon says ransomware now accounts for more than two-fifths of cyber-attacks targeting carmakers

OpenAI’s new frontier model focused on cybersecurity comes following Anthropic’s launch of Claude Mythos Preview and Project Glasswing

The EU cybersecurity agency looks to become the third Top-Level Root CVE Numbering Authority, alongside CISA and MITRE

Huntress uncovers adware deploying AV-killing payloads via signed updates across 23,000 endpoints

Critical nginx-ui MCP authentication bypass CVE-2026-33032 actively exploited with CVSS 9.8

At VulnCon, Lindsey Cerkovnik, head of vulnerability management at CISA, said AI companies should play a bigger role in vulnerability disclosures in the future

Barracuda says 88% of brute-force attempts in Q1 were from the region

Microsoft has patched two zero-day flaws and over 160 others

A new IANS report claims just 34% of cybersecurity professionals plan to stay put in the next 12 months

Triad Nexus scales $200m scams, uses infrastructure laundering, localized fraud and US-access blocks

108 malicious Chrome extensions steal sessions, Google data, inject ads via single C2 infrastructure

The AISI has issued its judgement on Anthropic’s Mythos Preview model

Attackers are abusing Microsoft 365 mailbox rules to hide activity, exfiltrate data and retain access after account compromise, researchers warn