Information Security Magazine

Survey of cybersecurity leaders suggests that majority would strongly consider paying cybercriminals, if that’s what it took to help restore encrypted systems

The G7 Cybersecurity Working Group releases new SBOM for AI guidance, outlining seven key data clusters to boost transparency and security across AI supply chains

UK cybersecurity sector reaches £14.7bn in revenue, driven by rapid growth in AI security firms, increased investment and rising employment across the industry

Microsoft has patched 120 vulnerabilities in this month’s security update round

With Daybreak, OpenAI wants its frontier AI models to be used to deploy secure by design software from the ground up

Mini Shai-Hulud compromises TanStack npm packages and spreads across PyPI

Apple begins rolling out end-to-end encrypted RCS messaging between iPhone and Android in iOS 26.5

Exploitation of open-source tools allows attackers to maintain persistent access after initial social engineering, warn ReliaQuest researchers

HiddenLayer reveals infostealer malware in a Hugging Face repository

The ICO has fined South Staffordshire Water nearly £1m for a series of data protection failings

ThreatFabric finds new TrickMo Android banking trojan variant routing C2 through The Open Network

Two new high-severity vulnerabilities, dubbed ’Dirty Frag’ when chained, have been found in the Linux kernel, affecting most Linux distributions

Ontinue uncovers fake Claude Code installer pushing PowerShell stealer abusing Chrome's IElevator2

Google Threat Intelligence Group details how cybercriminals attempted to launch a campaign based around an AI-developed Zero-Day targeting open-source software

The same extension applies to security updates shipped to US-based users of foreign-made drones

ShinyHunters has escalated its Canvas extortion campaign, defacing hundreds of school login pages and threatening to leak stolen data unless institutions negotiate

ShinyHunters gets away with emails and other data on 200,000 Zara customers

Spanish police have arrested the suspected administrator of German dark web marketplace Crimenetwork

ACSC warns over a campaign targeting organizations which uses ClickFix to deliver Vidar infostealer malware

SentinelOne believes the PCPJack campaign may be the brainchild of a former TeamPCP member