Information Security Magazine

The EU Commission will assess whether Booking.com has adequately protected customers from phishing attacks

Stealthy malware campaign by ‘Prince of Persia’ threat group targeting organisations worldwide discovered operating on American soil

Microsoft said it has observed threat actor activity in multiple ConnectWise customer environments, with the attackers leveraging the ARTEX agentic AI platform

Threat intelligence analysts now observe large-scale evidence of exploitation of the two critical PHP vulnerabilities

Nearly all organizations now run production workloads in the cloud, but a new SANS survey found most have yet to achieve mature cloud security programs

Researchers have uncovered Athena StealthRoute, a phishing-as-a-service platform featuring an AI Studio that generates phishing lures and decoy content designed to conceal attacks

Researchers at Symantec have uncovered an AI agent designed to operate a full cyber-attack without human intervention

Cybercriminal groups The Gentlemen and Qilin dominate ransomware attacks - and both are evolving their tactics in an attempt to outdo one another

A new CISA advisory warns of the threat posed by SafePay to businesses and critical infrastructure, and urges defenders to take action to mitigate the group’s tactics

Two critical vulnerabilities in PHP were leaked one day before their scheduled disclosure and security patches

The ICO has slammed security failings by the Welsh local government data unit and IT service provider following the 2024 incident

A new IANS report has found that despite the growth of the head of AI security role, accountability for AI governance in firms remains unsettled

OpenCode silently patched a critical RCE flaw, leaving vulnerable users unaware of the security risk, researchers at Pillar Security warned

Rapid adoption of agentic AI comes with potential business benefits. But if done incorrectly it also carries risks around AI activity management and security

Siemens identified the activity to be from the Romulus multi-platform ClickFix campaign, with Siemens Software Center users urged to apply an update

Known exploited vulnerabilities take a median time of 87 days to be patched, according to a new Moody’s report

The 2024 cyber incident affected the healthcare data of 62 million people, who launched a class action lawsuit against the business services firm

A breach affecting the OpenCode Console may lead to the exposure of API keys for Anthropic, OpenAI and Google Gemini users

Cloud Backup, SaaS Security, and Cloud Management services offline as IT service provider investigates possibility that unknown attackers have full access to client environments via stolen tokens

CyberSN observed a particularly big dip in cybersecurity leadership positions such as CISO and Cybersecurity Director in 2026 compared to 2025