Information Security Magazine

Venomous#Helper attackers impersonate the US Social Security Administration to deploy signed RMM software and maintain persistent access across US networks

ISACA report warns that while AI has become the norm, many organizations are yet to formally apply safety or security policies around its use

The UK's National Cyber Security Centre is urging organizations to prepare for glut of new software updates

Security vendor Trellix has suffered a breach involving unauthorized access

Team Cymru’s Stephen Campbell warned that small US defense contractors are not well prepared to face cyber intrusions through edge devices

OpenAI announced its intention to expand the Trusted Access for Cyber program for cyber defenders at the federal, state and local government levels

Claude Security enters public beta, giving enterprises AI driven code scanning with no API integration or custom agents required

The cybersecurity workers used their knowledge and skills to conduct ransomware attacks for notorious gang, rather than protect victims against them

A researcher from offensive security firm Theori has found a nine-year-old flaw in the Linux kernel with the help of AI

Suspects accused of distributing malware and selling access to stolen Roblox accounts on Russian marketplaces

Deep#Door Python RAT uses tunneling and obfuscation to evade detection and steal credentials

A new CISA‑led guide explains how zero‑trust security can be applied to operational technology, balancing cyber defence with safety and system availability

The British public education sector has faced the nation’s most dramatic increase in cyber breach prevalence over the past year

European police arrested 10 suspects after dismantling Albanian scam call centers linked to a €50m ($58m) online investment fraud operation

Marsh’s 2026 People Risks survey finds cyber‑related challenges dominate, as cyber‑threat literacy tops risks and cyber and AI skills shortages rise

Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX

Researchers uncover a malicious npm dependency linked to an AI‑assisted code commit that steals sensitive data and exposes crypto wallets

KELA claims infostealers remained the primary access vector for attacks in 2025

The Vect 2.0 ransomware wipes large files instead of merely encrypting them, making recovery impossible – even for the attackers

RunSafe report reveals most attacks on medical devices disrupt patient care