Information Security Magazine

Report Fraud says cybercrime revenue stemming from account takeover increased 417% annually

An affiliate of The Gentlemen RaaS group ran a parallel leak site during extortion of two dozen victims

ClingSTUN exploits known IoT flaws and abuses public STUN servers to keep proxy access to devices

Rapid7 has uncovered new BPFDoor, BPF Rekoobe and AVERAT malware variants targeting telecom and network-edge appliances in South Korea and Taiwan

The memory buffer vulnerability can result in denial of service to customers, with CISA warning it poses “significant risks” to the federal government

Google has paused its Open Source Vulnerability Rewards Program due to a flood of AI submissions

Ofqual study finds growing number of UK schools are bouncing back “immediately” from cyber-attacks

A breach at school software provider Frontline Education has exposed employee data

Microsoft has warned that threat actors have gained the advantage over defenders by using AI to enhance the speed and scale of attacks

Investigators have disrupted the operations of ransomware group KillSec and arrested several key suspects

The Dutch Institute for Vulnerability Disclosure reveals agentic AI-powered attack using Zammad zero-days

Vulnerability in Cisco Catalyst SD-WAN Manager allows an unauthenticated, remote attacker to access systems with admin privileges

TA419 posed as AI policymakers and economists to phish US AI policy experts' Microsoft 365 accounts

CloudSyncD uses a fake Zoom installer to phish Mac passwords and launch a two-stage backdoor

PwC finds global security leaders are most concerned about attacks on AI systems

MI5 has issued a rare warning to UK academics contributing to the China General Technology Research Institute

AI-discovered vulnerabilities are more likely to enable RCE, as disclosures and exploitation rise

Trump and six AI firms sign a voluntary accord on internal controls, audits and board oversight

Swimlane finds that AI is reducing repetitive work for SOC teams but some feel their careers may suffer

Cybersecurity researchers at Huntress identify campaign to deliver potent trojan which targets users searching for ChatGPT via Google