Information Security Magazine

Domain of dark web money laundering platform AudiA6 seized and suspects arrested in joint operation by the FBI, Europol and others

NPM, part of GitHub, announced a new version of the npm package manager with several security improvements, including disabling install scripts

As the FIFA World Cup 2026 kicks off, a new Darktrace report warns that sports teams and bodies are a major target for cyber criminals

New CISA directive tells federal agencies to patch by real-world risk, not CVSS severity scores

Fake AI guides hide a multi-stage chain that drops AsyncRAT, with signs of AI-assisted coding

Organizations are aware of the challenges that new technologies like AI bring: but cybersecurity staff struggle to make time for the required training during working hours

New revelations by Group-IB expose the full scale of the decade-old SniperDz phishing operation

Extortion-only attacks are increasing as data theft drives most ransomware claims, with many organizations unable to stop stolen data from being exposed

Tenet Security researchers reveal how new “agentjacking” attacks could trick coding agents into executing arbitrary code

Threat actors push fake free-software tutorials on TikTok and Instagram to spread Vidar stealer

Menlo Security research warns that as enterprise applications become increasingly browser based, traditional cybersecurity tools leave them vulnerable to cyber threats

MaaS trojan SilabRAT uses HVNC and browser cloning to hijack sessions and steal crypto

Anthropic unveils Claude Mythos 5 and Fable 5, a restricted-access frontier AI model and guardrailed version for everyone to use

Nearly 26% of identity crime victims faced multiple incidents in the past year, as ITRC warns of a growing "multi-layered crisis"

Microsoft has patched 200 vulnerabilities including three zero-days

Checkmarx report warns that business pressure is among the reason security leaders let security compliance slip

Most dev teams use AI coding assistants but only 30% have full governance in place

Critical phpBB authentication bypass lets attackers hijack any account with one request

The flaw, CVE-2026-11645, can allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page

Check Point says a critical vulnerability in its Remote Access VPN and Mobile Access solutions has been exploited by Qilin