Infosecurity Mag

RAID-AI aims to help organizations assess their security preparation for ransomware attacks targeting AI systems

Dream found that a suspected Chinese-nexus actor gained root access to Palo Alto Network firewall servers to target government organizations

Leading cryptocurrency analysts have attributed the cyber-attack to a North Korean elite hacking unit

NIK C2 malware can fall back on victims’ OpenAI API keys to run AI queries

CREST has published a framework for strengthening cyber resilience across financial services

Akamai research reveals that scam detections topped six million in Q2 2026

The UK’s privacy regulator has issued a reprimand to Staffordshire Police following a serious breach of personal information

The guidance sets out how federal agencies can prioritize PQC adoption for the most sensitive systems, to meet the 2031 transition deadline

MR ROBOT Android malware rents banking trojans that steal one-time passwords and card data

GMO Internet has told customers to unplug their PCs in advance of a possible ransomware attack

Attackers have used fake ChatGPT and Claude projects to distribute Yoba malware

Nvidia’s Mark Weatherford says CISOs must translate AI cybersecurity risks into business priorities, clarify risk ownership and balance innovation with security controls

An undisclosed number of Engie customers have had their data compromised after a supply chain incident

The University of New Mexico is working to restore systems following the incident, which has been claimed by the BYOD ransomware group

Attackers have infected 953 online stores with a scanner-evading JavaScript loader since July 2025

Researchers uncovered an OpenAI API flaw that exposed hidden AI reasoning traces, prompting a fix and a $6000 bug bounty reward

ISC2’s new Cyber-AI Workforce Coalition serves as a “vendor-neutral convener” to map the future of AI security careers, ISC2 CEO Scott Beale told Infosecurity

Arctic Wolf warned that the function enables highly effective social engineering attacks, which lead to incidents such as ransomware

Hackers have stolen personal information on over 520,000 people from the University of Copenhagen

ISC2 is seeking 3000 volunteers to enrol to a pilot exam phase for its upcoming AI security certification

UK police forces and fire and rescue services have been urged to strengthen cybersecurity as rising cyber threats outpace current defenses

CISA’s new strategy, CISA 2030, will focus on rapid detection and response and resiliency of critical services ahead of “passive defense”

A large-scale GitHub campaign abused stolen access tokens to target 13,500+ branches and repositories with secret-stealing workflows

Six Linux flaws were made public, including one with a working root exploit and no merged fix

Microsoft’s updates address two newly disclosed vulnerabilities in the .NET developer platform, as well as flaws not fully addressed in an earlier release

Blue Initiative launches a new vulnerability database for IT and OT CVEs relevant to the maritime industry

PHP warns of critical RCE vulnerability CVE-2026-115560, but says limited exploit conditions mean most deployments are unlikely to be affected

Japanese video games giant Capcom confirmed unauthorized access to its online account system

Security researchers identified attempts to access corporate networks which have been linked to a major Microsoft 365-targeted BEC campaign using phishing, stolen session tokens and social engineering

Kroll found that 69% of data breach victims in the past year were affected by a third-party breach, with attacks on tech companies the most common cause

The EU Commission will assess whether Booking.com has adequately protected customers from phishing attacks

Stealthy malware campaign by ‘Prince of Persia’ threat group targeting organisations worldwide discovered operating on American soil

Microsoft said it has observed threat actor activity in multiple ConnectWise customer environments, with the attackers leveraging the ARTEX agentic AI platform

Threat intelligence analysts now observe large-scale evidence of exploitation of the two critical PHP vulnerabilities

Nearly all organizations now run production workloads in the cloud, but a new SANS survey found most have yet to achieve mature cloud security programs

Researchers have uncovered Athena StealthRoute, a phishing-as-a-service platform featuring an AI Studio that generates phishing lures and decoy content designed to conceal attacks

Researchers at Symantec have uncovered an AI agent designed to operate a full cyber-attack without human intervention

Cybercriminal groups The Gentlemen and Qilin dominate ransomware attacks - and both are evolving their tactics in an attempt to outdo one another

A new CISA advisory warns of the threat posed by SafePay to businesses and critical infrastructure, and urges defenders to take action to mitigate the group’s tactics

Two critical vulnerabilities in PHP were leaked one day before their scheduled disclosure and security patches