Information Security Magazine

Cybersecurity agencies from 12 countries have warned that Russian state-backed hackers are actively targeting vulnerable routers using weak SNMP credentials

An Armenian man has pleaded guilty to his role in the infamous Ryuk ransomware operation

Australian Cyber Security Centre warns CMS users of mass scanning and exploitation campaign

CISA reveals how it responded after sensitive AWS GovCloud credentials and internal data were exposed in a public GitHub repository

A new multi-purpose backdoor allows cyber threat actors to conduct both quiet espionage activity and destructive wiping operations

Researchers at the AI Now Institute developed a proof-of-concept exploit showing common AI tools used for security could backfire

GodDamn ransomware uses remote desktop application to secretly move around networks and drop the malicious PoisonX kernel driver

Microsoft has said the volume of Windows security updates is set to grow as it uses AI to find new bugs

NHS tells staff they could face prison for “inappropriate” access to patients’ medical records

Huntress found a threat actor using vibe-coded PowerShell to map an Active Directory network

Survey of cybersecurity leaders by MetaCompliance finds that many feel boards are uninterested in ever-evolving cyber risks

Operation First Light 2026, coordinated by Interpol and funded by the Chinese government, has led to 5,811 arrests

Wiz discovered GhostApproval, a symlink flaw in six major AI coding assistants that bypasses approval

Over 70 cybersecurity organizations have signed the CREST AI Charter detailing responsible use of AI for security

Cybersecurity researchers at ESET identify big rise in suspicious and malicious toolsets which put users at risk from cyber-attacks

Zimperium found RedWing, an Android spyware sold as a service via Telegram to target banking apps

Cisco Talos said China-linked APT UAT-7810 is growing its proxy relay network with new malware

Sygnia report details how agentic AI accelerated weeks-long attack to just 72 hours

Cyber threat actors are infecting victims with the Vidar stealer and the XMRig cryptocurrency miner in a new malicious campaign

The National Cyber Security Centre wants to work with AI partners to build a new “Cyber Shield” to defend the UK