Information Security Magazine

GitBait phishing kit abuses GitHub Pages and the SheetBest API to steal Mexican banking credentials

The rise of AI-assistants and applications in the enterprise has seen a 93% increase in employees attempting to upload sensitive data, bringing security challenges

Filigran survey at Infosecurity Europe 2026 reveals AI-powered attacks as the top concern, with false positives, alert fatigue and manual processes draining security teams

Ukraine has been added to the EU Cybersecurity Reserve, which provides incident response services against large-scale incidents

Aikido Security has discovered at least 15 IDE plugins on the JetBrains Marketplace

SANS Institute study finds few SOCs have built AI into defined workflows, despite widespread adoption

China-linked SprySOCKS backdoor gains stealthy Windows variants and 30-plus C2 commands

Rokarolla Android trojan steals banking logins and spies on victims while blocking fraud alerts

ISSA study finds most security professionals feel challenged by colleagues’ involvement in cyber

Command and control traffic exploited a Teams visitor token to make malicious activity look legitimate to defenders

Athena is a new an industry coalition to fix the vulnerabilities frontier AI models find before attackers can exploit them

The FBI claims couriers are being used to circumvent bank transfers in crypto investment schemes

Tampered OptinMonster and sister plugins plant hidden backdoors on 1.2 million WordPress sites

How the Anubis ransomware group stole and leaked an Italian Adriatic port authority's data

Access to two Anthropic large language models, Mythos 5 and Fable 5, has effectively been banned to any non-US nationals by the Trump administration

Government departments find hundreds of vulnerabilities after testing frontier models

The Office of the Maine Attorney General has suspended its breach reporting portal

Domain of dark web money laundering platform AudiA6 seized and suspects arrested in joint operation by the FBI, Europol and others

NPM, part of GitHub, announced a new version of the npm package manager with several security improvements, including disabling install scripts

As the FIFA World Cup 2026 kicks off, a new Darktrace report warns that sports teams and bodies are a major target for cyber criminals