Information Security Magazine

A China-linked threat group has been targeting critical infrastructure in Southeast Asia with a new custom backdoor called TinyRCT

The UK Cyber Monitoring Centre reviews the Canvas breach affecting 160 UK universities, highlighting data theft risks and financial impacts of cyber incidents

A high-severity flaw in Cisco Catalyst SD-WAN Manager disclosed in early June was exploited as early as March

Digital Citizens Alliance report claims that millions of Americans may have unwittingly had IP connections used by cybercriminals

Cobalt study finds 20-percentage-point drop in number of organizations relying solely on AI automation for testing

New CISA guidance shows federal agencies how to use SASE to move from legacy TIC 2.0 to zero trust

macos-xpc-flaw-disable-edr-mdm-standard-user-xm-cyber

Analysis of ransomware incidents by researchers at Black Kite found that attacks have risen by over 50% in the last year, with supply chain attacks increasing

LayerX tricked AI browsers including ChatGPT Atlas and Comet into bypassing their guardrails

Operation Endgame seized around 50 domains and nearly 200 active IP-based servers associated with the infostealers

SentinelLabs found a North Korea-linked macOS backdoor using prompt injection on AI triage tools

Customers of the affected Japanese email services are “strongly advised” to change their email passwords

An NCC Group report warns state-backed hackers are attempting to hide activity by posing as ransomware groups and deploying commercially available malware

New ReliaQuest study reveals the six ways AI is practically being used in attacks today

Public Accounts Committee (PAC) warns that museums and galleries aren’t getting enough government support on cyber

JFrog found an npm package impersonating postcss-selector-parser to drop a multi-stage Windows RAT

OpenAI expanded Daybreak with a full GPT-5.5-Cyber release to help defenders patch software flaws

All US federal agencies will have to complete their post-quantum cryptography transition by 2031, according to a new Trump Executive Order

Cybercriminals launch fake GTA 6 pre-order sites offering early access for crypto payments

Two young British men have pleaded guilty to hacking Transport for London as part of a Scattered Spider plot