Information Security Magazine

The US National Institute for Standards and Technology wants to modernize its National Vulnerability Database to embrace AI-powered vulnerability research

The Polish CERT has released details of another 2025 attack on a combined heat and power plant in the country

Microsoft has issued another massive batch of security updates with 400 fixed in the August Patch Tuesday

Six npm packages queried an Ethereum wallet to locate C2 infrastructure

Cursor fixed a pre-trust code execution path in three days then closed the report as informative

Police and fire response has been impacted by the attack on Suisan City, while two other local authorities have been hit by cyber incidents in the past week also

Daybreak Blue removes some OpenAI-made guardrails while Daybreak Red grants the use of cyber-focused frontier AI models

Supply chain attack and data breach at Ceva Logistics appears to have a large blast radius

OpenAI is tightening restrictions on testing of its upcoming Astra model due to security concerns

Make UK reveals major cyber resilience gaps as 30% of UK manufacturers report recent cyber incidents

Atlassian fixed a flaw letting one crafted link make its Rovo AI assistant exfiltrate company data

Poisoned JSON feed let attackers backdoor WordPress sites without changing any plugin files

Tenet reported that half of Fortune 500 companies are vulnerable to the Ghostjacking technique, which involves tricking AI agents with fake reports

A macOS malware variant has been detected stealing crypto, passwords and more

TRM Labs explains that sanctioned Iranian firm Shelbit was a fake crypto exchange

Beacon has informed around 1500 customer charities that its CRM databases were accessed and likely exfiltrated by an unauthorized actor

BlackFile has rebranded as Redact after an alleged affiliate hijack, with Google linking the group to ongoing vishing and extortion campaigns

Finance, technology and healthcare sectors were particularly heavily targeted in July, according to Comparitech

Attackers used SQL injection to compile a post-exploitation toolkit inside an Oracle database

Oligo Security has linked TeamPCP to ShadowRay 2.0 and to cryptojacking infrastructure dating back to 2020