Information Security Magazine

Check Point says a critical vulnerability in its Remote Access VPN and Mobile Access solutions has been exploited by Qilin

Speaking at Infosecurity Europe, Ashish Shrestha, former CISO at Jaguar Land Rover revealed why he wanted over 30,000 employees to change their passwords in the immediate aftermath of the incident

Meta’s WhatsApp demands contempt ruling after users report NSO Group-linked phishing

North Korean actor UNK_DeadDrop targeted developers with fake coding tasks to steal crypto

OpenAI brings Lockdown Mode and Active Sessions to ChatGPT to curb prompt injection data theft

At Infosecurity Europe 2026, OWASP’s Ariel Fogel warned that prompt injection remains an “unresolved problem” within generative AI architecture

The Department of Science, Innovation and Technology details how a combination of hands-on human advice and technology systems keeps government agencies safe

Meta confirms an AI tool vulnerability led to unauthorized access to Instagram accounts after a failure in email verification during password reset

Lloyds Banking Group shared its approach for securing agentic AI workflows, with a mix of hands on experimentation and cross functional governance

The OWASP agentic AI security framework helps organizations assess governance maturity vs adoption and adjust governance as needed

Ox Security field CTO, Boaz Barzel, makes the case for vibe security to tackle AI agent coding risks

A perfect storm of legacy devices, hyper connectivity and human fatigue is bad news for the healthcare sector, warns Cyber Salus

Critical Everest Forms Pro RCE flaw exploited to create rogue WordPress admin accounts

Microsoft Detection and Response Team (DART) details how it has uncovered malicious AI applications as cyber criminals manipulate organizations adopting AI tools

Newly named Chinese-speaking actor TA4922 expands from East Asia into Europe and Africa

A Bugcrowd researcher has unveiled ExploitBench, an independent benchmark of AI models for vulnerability exploitation

Proton uses machine learning models to detect abuse of its services – especially email addresses used by cybercriminals

Cybersecurity and business leaders with experience of dealing with major incidents from within the NCSC and at JLR detail what you need to prioritize if your organization is hit by a cyber-attack

Former Ukrainian foreign minister, Dmytro Kuleba, urges Infosecurity Europe attendees to fight the good fight