Information Security Magazine

The G7 has published a call to action, urging governments to launch national strategies dedicated to the post-quantum encryption transition

Pegasus infected a Serbian student activist's iPhone through an iMessage zero-click exploit

Outsider phishing kit generated 700 new pages after a Google-led disruption

CREST’s new AI-enabled penetration testing accreditation welcomes its first 10 providers

Thomson Reuters has disclosed a cyber incident affecting its C-Track court management software, potentially exposing court records in Canada and the US

The FBI is investigating how scans of over 153 million driver’s licenses are being sold on the dark web

US-led action sinkholes machines caught up in Sality botnet

Russian man extradited to US over malware campaign that targeted 80,000 freelance users

Gambling Goblin compromised Brazilian government sites to drive gambling traffic through SEO fraud

The US healthcare provider confirmed that sensitive patient and employee data, alongside financial and business information, were exfiltrated by a third party

SonicWall has urged customers to patch two new zero-day vulnerabilities being exploited in the wild

Threat group FulcrumSec claims MAG breach and leaks 550GB of data online

Attackers used a stolen METR API key for three weeks, consuming model credits worth $600,000

EMA survey finds 65% of enterprises have seen AI agents act beyond intended scope

Project Watershed 250 will see water providers in Texas provided with federal and private sector cybersecurity resources amid rising nation-state threats

The Financial Stability Board has warned G20 banking leaders about the cyber risks of frontier AI

ShinyHunters claims to have stolen 284 million records from McKesson

A large-scale phishing campaign used fake voicemail SVG attachments to bypass email defenses, targeting 5527 organizations with over 26,000 malicious messages

More than 100 companies, including OpenAI, Anthropic, Google and Microsoft, have urged collective action to unlock the power of AI to protect critical public services

Aurora ransomware operators are abusing SpaceX’s Cursor Agent AI tool to conduct tasks such as reconnaissance and exploitation activities