Information Security Magazine

The CISA plan provides guidance and resources for election officials to secure systems such as voter registration databases and voting machines

The newly-discovered trojan abuses the Android Accessibility Service to gain control over victim devices and collect sensitive banking credentials

EfficientIP says it flagged AliExpress phishing domains before they were registered

Ransom notes by n0n ransomware claim to take double extortion to a new level of danger for victims

CISA has set out a new framework to improve CVE data quality as vulnerability volumes rise

Whitehall is shifting from mandatory cyber controls to service-led governance following a critical audit exposing failures of its 2022 cyber strategy

Australian PM Anthony Albanese criticized OpenAI’s response to the incident, which occurred in June 2026

ShareGate study claims to reveal a governance ‘crisis’ as AI usage grows

SANS Institute report claims data rather than skills is now the main hurdle for threat hunters

GitGuardian finds 474 leaked GitHub App keys still authenticating, including keys with admin access

Qrator found a Windows botnet advertised with AI API draining, credential theft and SOCKS5 proxying

A total of 1073 firms fell victim to ransomware attacks globally in August, with the industrial sector the most affected, according to new NCC data

Infamous threat group ShinyHunters claims to have personal information on thousands of FBI employees

The EU Court of Auditors has criticized EU shortcomings in responding to major cyber incidents

WaterPlum compromised 30,000 devices and took funds or credentials from 7000 crypto wallets

A new report by ISACA found that 71% of orgs have not run AI incident response exercises as teams face rising pressure

Forescout warns that incomplete network segmentation is widening the potential blast radius of attacks

Akamai report warns of increase in bot traffic, API threats, chatbot leaks and other AI-related threats

Gartner warns that CISOs must update incident response playbooks as AI-powered deepfakes make social engineering attacks more convincing and harder to detect

The Irish DPC found that Google users were unaware that their location was being used to influence them with ads