Information Security Magazine

TA419 posed as AI policymakers and economists to phish US AI policy experts' Microsoft 365 accounts

CloudSyncD uses a fake Zoom installer to phish Mac passwords and launch a two-stage backdoor

PwC finds global security leaders are most concerned about attacks on AI systems

MI5 has issued a rare warning to UK academics contributing to the China General Technology Research Institute

AI-discovered vulnerabilities are more likely to enable RCE, as disclosures and exploitation rise

Trump and six AI firms sign a voluntary accord on internal controls, audits and board oversight

Swimlane finds that AI is reducing repetitive work for SOC teams but some feel their careers may suffer

Cybersecurity researchers at Huntress identify campaign to deliver potent trojan which targets users searching for ChatGPT via Google

Apple has patched CVE-2026-86950, a zero-day bug in the iOS CoreGraphics engine

RatHat's C2 panel now builds malware and ranks victims with AI across nearly 100 deployments

AWS AgentCore SDK flaws could let attackers run commands in AI sandboxes and reach AWS credentials

Microsoft Threat Intelligence warns that NeedyMantis threat actor from China has targeted organizations across a range of industries

Tokyo Metro and Keio have revealed separate cyber-attacks

Kiteworks has lifted a temporary shutdown recommendation which was issued on the back of federal intelligence

Bitget has restarted Bitcoin withdrawals after a $387.5m breach of its hot and warm wallets

NVIDIA has launched a platform pairing runtime controls with hardware monitoring for AI agents

A quarter of victims of deepfake attacks have lost over $1m. CISOs worry that boardrooms don’t understand the threat

Ox Security found security shortcomings in analysis of over 15,000 MCP servers

Citrix has confirmed exploitation of two critical zero-day RCE bugs

The ‘SalesBleed’ set of weaknesses in Salesforce’s Agentforce agents exposed CRM data to attackers via prompt injection and DNS exfiltration