Information Security Magazine

Global phishing campaign disguised a Lua loader as a font file to deploy RATs and infostealers

Cybersecurity researchers tested Open AI GPT 5.5’s offensive cyber capabilities – and the results showed how effective a frontier LLM can be for hackers

New ClickLock macOS stealer locked victims out of their own system until they surrendered a password

The perpetrators of the 2024 TfL cyber-attack have been jailed for five and a half years each after pleading guilty to Computer Misuse Act offences

SANS Institute says governance programs are still nascent even as AI failures and threats grow

The White House announced Gold Eagle to help accelerate the discovery, prioritization and patching of flaws found by AI

Six-month phishing campaign used seasonal eCard lures to plant legitimate RMM tools on victims

Eleven forgotten Microsoft-signed UEFI shims can bypass Secure Boot on almost any machine

Research of incidents by Sophos finds that phishing, brute force attacks and other identity-based threats have surpassed software vulnerabilities as means of delivering ransomware

Progress has restored access to its ShareFile Storage Zones Controller after a four-day suspension triggered by a credible external security threat

Microsoft released fixes for a record 570 CVEs in its July Patch Tuesday update, as experts warn AI is dramatically accelerating vulnerability discovery and increasing patch volumes

The UK government is warning of the potential impact of catastrophic cyber-attacks

The US Department of Defense announced the immediate suspension of the CMMC Phase II requirements until further review

Researchers at Jamf Threat Labs detail CrashStealer, which steals passwords, cryptocurrency wallets and more

Supermarket giant Lidl has revealed details of a supplier breach impacting customer data

Five UK residents have been charged in relation to supplying Russian Coms fraud devices and apps

Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA

Chinese and Indian spies converged on the same Balochistan police force, SentinelLabs found

New research reveals cyber-attackers can spoof OAuth Client IDs in Microsoft Entra ID, creating a stealthy path into cloud environments

Progress Software, the provider of the popular file-sharing and data storage solutions, has urged customers to shut down the server hosting their Storage Zone Controller