Information Security Magazine

Semperis is set to bring ‘Enter the War Room: A Tabletop Experience’ to Infosecurity Europe to help cybersecurity leaders prepare to face real incidents

Top cybersecurity vendors said AI won't replace entry-level – only routine ticket-taking and triage

FSB-linked Gamaredon concealed a fileless worm in NTFS data streams to spy on Ukraine targets

Push Security says threat actors are delivering malware hosted on chatgpt.com/s/ domain

A vulnerability in Palo Alto Networks’ PAN-OS software is being exploited in attacks

OWASP’s new Agentic Research Council will aim to connect academic work to operational realities on agentic AI security

Threat actors from the Silent Ransom Group, aka Luna Moth, are escalating attacks by impersonating IT staff in phone calls and even showing up in person to gain direct access to victim systems

From a research-driven pilot, the Cybersecurity Communities of Support (CyCOS) is about to be handed over to CIISec

ESET’s 2026 APT Activity Report suggests China-backed APTs are using instability in the region to target victims, as well as continuing activity against organizations around the globe

Sloppy AI-generated npm infostealer leaked its own GitHub token, exposing the operator

Most malicious open source packages now mimic real code rather than rely on typosquatting

Microsoft warned the disclosure of several unpatched vulnerabilities without notice has put “customers at unnecessary risk”

New actor Jinx-0164 hit crypto developers with fake recruiter lures and macOS malware

ISC2 survey of cybersecurity professionals suggests that staff want their information security leaders to have experienced reacting to a significant cyber incident

GCHQ director urges urgent business cyber action as AI and quantum reshape the threat

Operators of the malicious Glassworm botnet have been targeting software developers since at least early 2025

Cybermindz warns that cybersecurity burnout is a growing risk, urging organizations to move beyond wellness initiatives and adopt a measurable, risk-based approach to workforce stress

Group-IB uncovered Ghost Stadium phishing and 4300 fake FIFA World Cup domains targeting fans

UK firms plan higher cyber spending as AI adoption raises security concerns