Information Security Magazine

Doubloon Dredger abused Notion and malicious PDFs to harvest Microsoft authentication tokens

Experts argue Iranian cyber-attack on UK power plant lays bare frailty of critical national infrastructure

Truffle Security says it found over 9000 publicly accessible and active AWS key pairs

Cybersecurity researchers have linked a malicious backdoor in compromised Rust packages to previous North Korean supply chain attacks

An Agent Tesla v4 malware campaign used novel emoji-based code obfuscation to evade detection, KnowBe4 has revealed

An analysis by the AI Workforce Consortium found that technical cybersecurity jobs are becoming more strategic due to the influence of AI

Two Artifactory flaws allowed attackers to poison package metadata across software repositories

NCSC urged sandboxing, oversight and tight access controls for autonomous AI agents

Defense contractors in the US are doubting their own self-assessment scores under CMMC Phase I, even as those scores hit an all-time high

A US government advisory warned that attackers are deploying AI-generated exploitation scripts against exposed Siemens S7 Series PLCs

Zimperium lifts the lid on the ToxicPanda 2.0 Android banking Trojan

Huntress researcher explains how they were targeted by an elaborate and persistent phishing scam following Def Con

The Linux Foundation's Akrites initiative will become operational in September, when it will begin accepting AI-powered vulnerability reports for open-source projects

eSentire uncovered a malware campaign combining ClickFix lures with ErrTraffic and Cruciferra

Grandoreiro is active after its 2024 disruption, with Mexico now accounting for 40% of detections

OpenAI is strengthening safeguards for its most advanced AI models, citing growing risks as frontier systems gain more powerful cyber capabilities

The FBI warned that the RaaS operation has significantly enhanced its tactics, techniques and procedures, making it harder for defenders to counter

The UK’s privacy watchdog has called on police using facial recognition to follow its recommendations

Cifas data finds account takeover and identity fraud are driving a surge in fraud cases

The security flaw in Snowflake’s GitHub Actions workflow had been missed by a GitHub Advanced Security scan, said a Wiz researcher