Information Security Magazine

Talos read attacker prompt logs and found guardrails fell to task splitting and ownership claims

Cloud and SaaS are now the preferred operating environments for threat actors, amid a continued shift to identity attacks

Interpol claims AI is driving a surge in cybercrime in Africa, with related losses doubling

The UK’s Police National Legal Database and Ask the Police service have been breached

Chinese actors exploited the critical React2Shell exploit inside a day, while 88% of exploited vulnerabilities in H1 2026 were compromised within 48 hours of disclosure

Russian actor Storm-2945 hijacked hotel captive portals to push fake updates and steal tokens

New HollowFrame loader hid Go code in a fake Python DLL after pre-staging Defender exclusions

Korean telco KT has been fined $39m for a year-long breach linked to femtocell compromise

A hacker has drained nearly $89m from Coldcard Bitcoin wallets after exploiting a legacy bug

A Chinese-speaking threat actor has been using DeepSeek’s AI models to orchestrate cyber-attacks targeting Asian organizations

AWS has linked North Korea to the axios campaign to other attacks on npm libraries

Anthropic has revealed that Claude AI models compromised third-party organizations

Cryptomining crew abandoned root to impersonate low-privileged Linux users and evade SOC alerts

AiTM phishing is now the top entry point into law firms, with identity behind 56% of threats

Action1 report finds sysadmins overestimated their use of AI in predictions made two years ago

Check Point researchers detail phishing attack as an example of attackers dropping fake Microsoft login pages in favor of abusing Microsoft’s legitimate authentication infrastructure

The new version of Chrome, 151, comes with 370 vulnerability patches, including for seven critical flaws

The UK’s National Cyber Security Centre wants network device makers to improve forensic observability

LogoKit now builds per-victim phishing pages using live screenshots of the target's real website

TA488 returned with OWA half-click exploit deploying OWAReaper implant that survived re-imaging