Information Security Magazine

A researcher from offensive security firm Theori has found a nine-year-old flaw in the Linux kernel with the help of AI

Suspects accused of distributing malware and selling access to stolen Roblox accounts on Russian marketplaces

Deep#Door Python RAT uses tunneling and obfuscation to evade detection and steal credentials

A new CISA‑led guide explains how zero‑trust security can be applied to operational technology, balancing cyber defence with safety and system availability

The British public education sector has faced the nation’s most dramatic increase in cyber breach prevalence over the past year

European police arrested 10 suspects after dismantling Albanian scam call centers linked to a €50m ($58m) online investment fraud operation

Marsh’s 2026 People Risks survey finds cyber‑related challenges dominate, as cyber‑threat literacy tops risks and cyber and AI skills shortages rise

Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX

Researchers uncover a malicious npm dependency linked to an AI‑assisted code commit that steals sensitive data and exposes crypto wallets

KELA claims infostealers remained the primary access vector for attacks in 2025

The Vect 2.0 ransomware wipes large files instead of merely encrypting them, making recovery impossible – even for the attackers

RunSafe report reveals most attacks on medical devices disrupt patient care

Medtronic confirms IT breach as ShinyHunters claims millions of records accesseda

Ransomware groups 0APT and KryBit have doxxed each other online

Extradition links alleged MSS-directed hacker to Silk Typhoon and COVID-19 espionage

The National Cyber Security Centre has warned against measuring SOCs with ticket-based metrics

Arctic Wolf attributed this large-scale spear-phishing campaign to BlueNoroff, a financially motivated subgroup of the Lazarus Group

US sanctions target Cambodian scam networks tied to crypto fraud and trafficking

Itron confirmed a cyber incident but does not believe it is likely to have a material impact on the company

Dozens of browser extensions openly sell user data via privacy policy disclosures