Information Security Magazine

ReliaQuest confirmed that the Qilin and Settra ransomware groups are actively exploiting a Palo Alto vulnerability patched in May

Daiichi Kosho says a supply chain breach has exposed personal data on over eight million karaoke customers

Wikimedia says OpenAI agents performed unauthorized actions on its platforms, including edits to wikis

Comparitech observed 2627 claimed ransomware attacks in Q3, with critical sectors like finance, technology, education and healthcare experiencing significant increases

The UK, US and allies have issued an alert detailing malicious activity linked to China’s Integrity Technology Group

As AI adoption accelerates, ISACA is expanding its certification portfolio with a governance-focused credential designed to help professionals manage AI securely

Ten leading AI firms have committed to make data protection improvements following a call for evidence by the UK’s Information Commissioner's Office

Attackers compromised .gh, .sl and .as registries to obtain unauthorized HTTPS certificates

The ASOS hack comes from the compromise of agentic marketing platform Simon AI, said the attackers

Russia-aligned UAC-0099 has steadily upgraded its MATCHBOIL downloader since 2024

CrowdStrike revealed that a Chinese-speaking hacker deployed agentic pentesting tool ARTEX and Claude to help breach data from South Korean financial firms

A critical vulnerability affecting eight Atlassian products, including Jira and Confluence, is being exploited in the wild, said VulnCheck

Europol and US Government Accountability Office urge faster transition to post-quantum cryptography

The FBI and Secret Service are warning Fortigate admins that their systems are still being targeted

OTCC urged CISA to mandate baseline security requirements for federal operational technology

Barracuda finds phishing emails designed to manipulate both human users and AI assistants

A Group-IB researcher has found the Telegram account linked to the unauthorized ASOS customer notification previously engaged in gaming-item trading

A Yubico survey identified a significant gap between awareness and adoption of secure methods of authentication in enterprises

Ethical hackers have already found 32 zero days in various products at Pwn2Own Ireland

A breach of 8.8 million citizens on the Danish Central Register of Persons (CPR) occurred via third-party access