Information Security Magazine

Six npm packages queried an Ethereum wallet to locate C2 infrastructure

Cursor fixed a pre-trust code execution path in three days then closed the report as informative

Police and fire response has been impacted by the attack on Suisan City, while two other local authorities have been hit by cyber incidents in the past week also

Daybreak Blue removes some OpenAI-made guardrails while Daybreak Red grants the use of cyber-focused frontier AI models

Supply chain attack and data breach at Ceva Logistics appears to have a large blast radius

OpenAI is tightening restrictions on testing of its upcoming Astra model due to security concerns

Make UK reveals major cyber resilience gaps as 30% of UK manufacturers report recent cyber incidents

Atlassian fixed a flaw letting one crafted link make its Rovo AI assistant exfiltrate company data

Poisoned JSON feed let attackers backdoor WordPress sites without changing any plugin files

Tenet reported that half of Fortune 500 companies are vulnerable to the Ghostjacking technique, which involves tricking AI agents with fake reports

A macOS malware variant has been detected stealing crypto, passwords and more

TRM Labs explains that sanctioned Iranian firm Shelbit was a fake crypto exchange

Beacon has informed around 1500 customer charities that its CRM databases were accessed and likely exfiltrated by an unauthorized actor

BlackFile has rebranded as Redact after an alleged affiliate hijack, with Google linking the group to ongoing vishing and extortion campaigns

Finance, technology and healthcare sectors were particularly heavily targeted in July, according to Comparitech

Attackers used SQL injection to compile a post-exploitation toolkit inside an Oracle database

Oligo Security has linked TeamPCP to ShadowRay 2.0 and to cryptojacking infrastructure dating back to 2020

One of Meta’s AI models exploited a third-party security flaw during an evaluation, the latest in a series of similar incidents involving advanced AI systems

So-called “wrench attacks” have resulted in $30m in losses so far in 2026, says Chainalysis

A Canadian hacker has admitted involvement in the widespread compromise of 165 Snowflake customer accounts used to steal data and extort victims