Information Security Magazine

New CISA directive tells federal agencies to patch by real-world risk, not CVSS severity scores

Fake AI guides hide a multi-stage chain that drops AsyncRAT, with signs of AI-assisted coding

Organizations are aware of the challenges that new technologies like AI bring: but cybersecurity staff struggle to make time for the required training during working hours

New revelations by Group-IB expose the full scale of the decade-old SniperDz phishing operation

Extortion-only attacks are increasing as data theft drives most ransomware claims, with many organizations unable to stop stolen data from being exposed

Tenet Security researchers reveal how new “agentjacking” attacks could trick coding agents into executing arbitrary code

Threat actors push fake free-software tutorials on TikTok and Instagram to spread Vidar stealer

Menlo Security research warns that as enterprise applications become increasingly browser based, traditional cybersecurity tools leave them vulnerable to cyber threats

MaaS trojan SilabRAT uses HVNC and browser cloning to hijack sessions and steal crypto

Anthropic unveils Claude Mythos 5 and Fable 5, a restricted-access frontier AI model and guardrailed version for everyone to use

Nearly 26% of identity crime victims faced multiple incidents in the past year, as ITRC warns of a growing "multi-layered crisis"

Microsoft has patched 200 vulnerabilities including three zero-days

Checkmarx report warns that business pressure is among the reason security leaders let security compliance slip

Most dev teams use AI coding assistants but only 30% have full governance in place

Critical phpBB authentication bypass lets attackers hijack any account with one request

The flaw, CVE-2026-11645, can allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page

Check Point says a critical vulnerability in its Remote Access VPN and Mobile Access solutions has been exploited by Qilin

Speaking at Infosecurity Europe, Ashish Shrestha, former CISO at Jaguar Land Rover revealed why he wanted over 30,000 employees to change their passwords in the immediate aftermath of the incident

Meta’s WhatsApp demands contempt ruling after users report NSO Group-linked phishing

North Korean actor UNK_DeadDrop targeted developers with fake coding tasks to steal crypto