Information Security Magazine

CrowdStrike revealed that a Chinese-speaking hacker deployed agentic pentesting tool ARTEX and Claude to help breach data from South Korean financial firms

A critical vulnerability affecting eight Atlassian products, including Jira and Confluence, is being exploited in the wild, said VulnCheck

Europol and US Government Accountability Office urge faster transition to post-quantum cryptography

The FBI and Secret Service are warning Fortigate admins that their systems are still being targeted

OTCC urged CISA to mandate baseline security requirements for federal operational technology

Barracuda finds phishing emails designed to manipulate both human users and AI assistants

A Group-IB researcher has found the Telegram account linked to the unauthorized ASOS customer notification previously engaged in gaming-item trading

A Yubico survey identified a significant gap between awareness and adoption of secure methods of authentication in enterprises

Ethical hackers have already found 32 zero days in various products at Pwn2Own Ireland

A breach of 8.8 million citizens on the Danish Central Register of Persons (CPR) occurred via third-party access

ClickFix sites stage a VBScript payload in the browser cache to bypass the Run dialog's length limit

Nikkei says two employee cloud accounts were accessed, with one used to send 9,000 phishing emails

The IBM subsidiary has also announced its Lightwell Clearinghouse is now available to all customers

Forescout found that just 6% of Internet of Medical Things (IoMT) and 16% of medical OT are capable of supporting post quantum cryptography

ASOS customers have received a seemingly legitimate push notifications claiming the retailer’s IT systems have been breached through a Snowflake breach

Report Fraud says cybercrime revenue stemming from account takeover increased 417% annually

An affiliate of The Gentlemen RaaS group ran a parallel leak site during extortion of two dozen victims

ClingSTUN exploits known IoT flaws and abuses public STUN servers to keep proxy access to devices

Rapid7 has uncovered new BPFDoor, BPF Rekoobe and AVERAT malware variants targeting telecom and network-edge appliances in South Korea and Taiwan

The memory buffer vulnerability can result in denial of service to customers, with CISA warning it poses “significant risks” to the federal government