<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <link>https://www.infosecurity-magazine.com/news/</link>
    <copyright>Copyright © 2026 Reed Exhibitions Ltd. All Rights Reserved.</copyright>
    <item>
      <title>Most Fraudulent Hires Receive Credentials Before Detection</title>
      <link>https://www.infosecurity-magazine.com/news/fraudulent-hires-credentials/</link>
      <description>A new report highlights the vast growth in fraudulent candidates, presenting significant insider threat challenges to organizations</description>
      <pubDate>Tue, 15 Sep 2026 15:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fraudulent-hires-credentials/</guid>
    </item>
    <item>
      <title>Most Firms Unable to Recover Quickly from Ransomware </title>
      <link>https://www.infosecurity-magazine.com/news/four-of-800-clients-hit-ransomware/</link>
      <description>Fenix24 found only four of more than 800 clients came close to stated ransomware recovery targets of 24-48 hours</description>
      <pubDate>Tue, 15 Sep 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/four-of-800-clients-hit-ransomware/</guid>
    </item>
    <item>
      <title>Black Axe Members Extradited to US Over Internet Fraud Claims</title>
      <link>https://www.infosecurity-magazine.com/news/black-axe-members-extradited-us/</link>
      <description>Alleged Black Axe leaders extradited to the US over romance scams, BEC and money laundering claims</description>
      <pubDate>Tue, 15 Sep 2026 13:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/black-axe-members-extradited-us/</guid>
    </item>
    <item>
      <title>AI the Top Priority for New Spend as Cyber Budgets Flatline</title>
      <link>https://www.infosecurity-magazine.com/news/ai-top-priority-new-spend-cyber/</link>
      <description>IANS finds AI is dominating net-new budgets even as overall funding for the function is flat</description>
      <pubDate>Tue, 15 Sep 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-top-priority-new-spend-cyber/</guid>
    </item>
    <item>
      <title>Microsoft Releases Emergency Patch to Fix RDS Vulnerability</title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-releases-emergency-patch/</link>
      <description>Microsoft has been forced to issue an out-of-band fix for several issues stemming from this month’s Patch Tuesday</description>
      <pubDate>Tue, 15 Sep 2026 08:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-releases-emergency-patch/</guid>
    </item>
    <item>
      <title>Malicious Twitch Extension Exposes 31,000 Users' OAuth Tokens</title>
      <link>https://www.infosecurity-magazine.com/news/malicious-twitch-extension-oauth/</link>
      <description>Socket has discovered a Twitch browser extension forwarding users' OAuth tokens to a Russian bot service</description>
      <pubDate>Mon, 14 Sep 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/malicious-twitch-extension-oauth/</guid>
    </item>
    <item>
      <title>Human Attacker Hits Machine-Speed Exploitation of Marimo RCE</title>
      <link>https://www.infosecurity-magazine.com/news/human-attacker-machine-speed/</link>
      <description>A human attacker exploited a Marimo RCE and reached an SSH bastion in eight seconds</description>
      <pubDate>Mon, 14 Sep 2026 14:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/human-attacker-machine-speed/</guid>
    </item>
    <item>
      <title>Defense Cyber Spending Set to Surge Amid Rising Attacks on Military Systems</title>
      <link>https://www.infosecurity-magazine.com/news/defense-cyber-spending-attacks/</link>
      <description>MarketsandMarkets has projected the cyber warfare market to double by 2031, amid growing demand for defensive and offensive cyber capabilities in the military</description>
      <pubDate>Mon, 14 Sep 2026 12:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/defense-cyber-spending-attacks/</guid>
    </item>
    <item>
      <title>Revolut Confirms Data Breach Through Fake Government Requests</title>
      <link>https://www.infosecurity-magazine.com/news/revolut-data-breach-fake-government/</link>
      <description>An unauthorized party used a legitimate government email domain to fraudulently request Revolut customer data</description>
      <pubDate>Mon, 14 Sep 2026 11:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/revolut-data-breach-fake-government/</guid>
    </item>
    <item>
      <title>Hackers Exploit Maximum Severity Flaw in GitLab</title>
      <link>https://www.infosecurity-magazine.com/news/hackers-exploit-maximum-severity/</link>
      <description>CISA warns that threat actors are exploiting a vulnerability with a CVSS score of 10.0</description>
      <pubDate>Mon, 14 Sep 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hackers-exploit-maximum-severity/</guid>
    </item>
    <item>
      <title>OpenAI Agent Swarm Hacks RubyGems Package Manager</title>
      <link>https://www.infosecurity-magazine.com/news/openai-agent-swarm-hacks-rubygems/</link>
      <description>Researchers confirm that OpenAI agents uploaded hundreds of malicious packages to RubyGems</description>
      <pubDate>Mon, 14 Sep 2026 08:50:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/openai-agent-swarm-hacks-rubygems/</guid>
    </item>
    <item>
      <title>Hackers Favor US Eastern Business Hours in M365 Phishing Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/hackers-us-business-hours-m365/</link>
      <description>KnowBe4 researchers observed a new phishing campaign leveraging Microsoft 365’s Direct Send to send malicious emails</description>
      <pubDate>Fri, 11 Sep 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hackers-us-business-hours-m365/</guid>
    </item>
    <item>
      <title>Most Organizations Skip Permissions Reviews Before Deploying AI Tools</title>
      <link>https://www.infosecurity-magazine.com/news/organizations-skip-permissions-ai/</link>
      <description>A new Syskit study has shown that only 43% of organizations with AI agents deployed in Microsoft 365 environments completed a permission review before doing so</description>
      <pubDate>Fri, 11 Sep 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/organizations-skip-permissions-ai/</guid>
    </item>
    <item>
      <title>CISA Updates Insider Threat Guide With New Mitigation Advice</title>
      <link>https://www.infosecurity-magazine.com/news/cisa-updates-insider-threat-guide/</link>
      <description>CISA has updated its insider threat guide with new advice on remote work, AI and risk detection</description>
      <pubDate>Thu, 10 Sep 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisa-updates-insider-threat-guide/</guid>
    </item>
    <item>
      <title>MantaxOtax Android Malware Combines Ransomware With Spyware</title>
      <link>https://www.infosecurity-magazine.com/news/mantaxotax-android-malware/</link>
      <description>MantaxOtax Android malware combines ransomware with extensive spyware capabilities</description>
      <pubDate>Thu, 10 Sep 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/mantaxotax-android-malware/</guid>
    </item>
    <item>
      <title>FBI Publishes First-Ever Cyber Strategy, With Focus on Disrupting Threat Actors</title>
      <link>https://www.infosecurity-magazine.com/news/fbi-cyber-strategy-disrupting/</link>
      <description>The new document appears to be part of a broader shift by the US government towards the proactive disruption of cyber threat actors</description>
      <pubDate>Thu, 10 Sep 2026 12:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fbi-cyber-strategy-disrupting/</guid>
    </item>
    <item>
      <title>Anthropic Reveals Yet Another Cybersecurity Incident</title>
      <link>https://www.infosecurity-magazine.com/news/anthropic-another-cybersecurity/</link>
      <description>Anthropic has found a fourth case of its model accessing third-party systems without authorization</description>
      <pubDate>Thu, 10 Sep 2026 08:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/anthropic-another-cybersecurity/</guid>
    </item>
    <item>
      <title>OFAC Sanctions Chinese Scam Platform Xinbi Guarantee</title>
      <link>https://www.infosecurity-magazine.com/news/ofac-sanctions-chinese-scam/</link>
      <description>The US Treasury has placed sanctions on notorious Chinese cybercrime marketplace Xinbi Guarantee</description>
      <pubDate>Thu, 10 Sep 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ofac-sanctions-chinese-scam/</guid>
    </item>
    <item>
      <title>Researchers Build WeChat Zero-Click Worm Hijacking Phones via Calls</title>
      <link>https://www.infosecurity-magazine.com/news/wechat-zeroclick-worm-hijack/</link>
      <description>The hacking tool, built using a combination of AI models, is effective against Android and iOS devices</description>
      <pubDate>Wed, 09 Sep 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/wechat-zeroclick-worm-hijack/</guid>
    </item>
    <item>
      <title>Gigabud Uses Android App Cloning to Evade Fraud Detection</title>
      <link>https://www.infosecurity-magazine.com/news/gigabud-android-app-cloning-fraud/</link>
      <description>Gigabud clones banking apps into a work profile to break the link between malware alerts and fraud</description>
      <pubDate>Wed, 09 Sep 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gigabud-android-app-cloning-fraud/</guid>
    </item>
    <item>
      <title>ClickFix Moves into the Browser to Steal Cryptocurrency</title>
      <link>https://www.infosecurity-magazine.com/news/clickfix-browser-cryptocurrency/</link>
      <description>ClickFix campaign uses browser-injected JavaScript and Google Sheets to steal cryptocurrency</description>
      <pubDate>Wed, 09 Sep 2026 13:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/clickfix-browser-cryptocurrency/</guid>
    </item>
    <item>
      <title>NHIs Now the Number One Corporate Entry Point for Hackers</title>
      <link>https://www.infosecurity-magazine.com/news/nhis-number-one-corporate-entry/</link>
      <description>SpyCloud claims non-human identities are the most likely route into the enterprise</description>
      <pubDate>Wed, 09 Sep 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nhis-number-one-corporate-entry/</guid>
    </item>
    <item>
      <title>Microsoft Shatters Patch Tuesday Record With 974 CVE Fixes in September 2026</title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-patch-tuesday-record/</link>
      <description>The update contained 119 critical flaws and two zero days, with security teams needing to prioritize updates</description>
      <pubDate>Wed, 09 Sep 2026 09:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-patch-tuesday-record/</guid>
    </item>
    <item>
      <title>SAP Patches Maximum Severity “Overpass” Flaw</title>
      <link>https://www.infosecurity-magazine.com/news/sap-patches-maximum-severity/</link>
      <description>Onapsis urges SAP customers to patch “Overpass” vulnerability, which has a CVSS score of 10.0</description>
      <pubDate>Wed, 09 Sep 2026 08:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/sap-patches-maximum-severity/</guid>
    </item>
    <item>
      <title>France Establishes New Government-Focused Cyber Incident Response Unit</title>
      <link>https://www.infosecurity-magazine.com/news/france-new-government-cyber/</link>
      <description>After a major cyber-attack targeted France's national tax authority, the Prime Minister called for the establishment of a new dedicated cyber incident response capability</description>
      <pubDate>Tue, 08 Sep 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/france-new-government-cyber/</guid>
    </item>
    <item>
      <title>Grindr Settles UK Data Privacy Claims for £26m</title>
      <link>https://www.infosecurity-magazine.com/news/grindr-settles-uk-data-privacy/</link>
      <description>Grindr settled UK claims over alleged unlawful processing of sensitive user data</description>
      <pubDate>Tue, 08 Sep 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/grindr-settles-uk-data-privacy/</guid>
    </item>
    <item>
      <title>AI Coding Tools Now a Prime Target for Threat Actors, Google Warns</title>
      <link>https://www.infosecurity-magazine.com/news/ai-coding-tools-threat-actors/</link>
      <description>Google warned that the rapid integration of AI-assisted coding tools has significantly expanded software supply chain risks</description>
      <pubDate>Tue, 08 Sep 2026 12:02:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-coding-tools-threat-actors/</guid>
    </item>
    <item>
      <title>THost9 Android RAT Pairs Packed Loader With ADB Worm</title>
      <link>https://www.infosecurity-magazine.com/news/thost9-android-rat-packed-loader/</link>
      <description>THost9 hides its payload and uses ADB to spread across exposed Android devices and containers</description>
      <pubDate>Tue, 08 Sep 2026 11:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/thost9-android-rat-packed-loader/</guid>
    </item>
    <item>
      <title>BigBear 2 PhaaS Campaign Steals 5000+ Microsoft Credentials</title>
      <link>https://www.infosecurity-magazine.com/news/bigbear-2-phaas-5000-microsoft/</link>
      <description>CloudSEK has uncovered BigBear 2.0, a new phishing-as-a-service operation targeting Microsoft 365</description>
      <pubDate>Tue, 08 Sep 2026 09:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/bigbear-2-phaas-5000-microsoft/</guid>
    </item>
    <item>
      <title>Trezor Supply Chain Breach Now Impacts 81,000 Customers</title>
      <link>https://www.infosecurity-magazine.com/news/trezor-supply-chain-breach-impacts/</link>
      <description>Crypto wallet-maker Trezor says a data breach at supplier ShipMonk is far worse than originally thought</description>
      <pubDate>Tue, 08 Sep 2026 09:08:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trezor-supply-chain-breach-impacts/</guid>
    </item>
    <item>
      <title>NCSC Warns Shadow AI Creates New Security Risks</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-warns-shadow-ai-security-risks/</link>
      <description>NCSC warns unapproved AI tools can expose corporate data and create new security risks</description>
      <pubDate>Mon, 07 Sep 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-warns-shadow-ai-security-risks/</guid>
    </item>
    <item>
      <title>N-able Releases Hotfix for Critical Remote Code Execution Vulnerability</title>
      <link>https://www.infosecurity-magazine.com/news/nable-hotfix-critical-rce/</link>
      <description>The vulnerability, CVE-2026-86218, was allocated a maximum-severity rating by the software provider itself</description>
      <pubDate>Mon, 07 Sep 2026 12:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nable-hotfix-critical-rce/</guid>
    </item>
    <item>
      <title>Rhysida Publishes Berlin Government Data After €2m Extortion Demand Refused</title>
      <link>https://www.infosecurity-magazine.com/news/rhysida-berlin-data-extortion/</link>
      <description>The ransomware group’s published dataset reportedly includes Berlin state employee data, as well as highly sensitive emergency plans</description>
      <pubDate>Mon, 07 Sep 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/rhysida-berlin-data-extortion/</guid>
    </item>
    <item>
      <title>North Korea’s Lazarus Operates Through Six Distinct Cyber Clusters</title>
      <link>https://www.infosecurity-magazine.com/news/north-korea-lazarus-six-cyber/</link>
      <description>Sekoia and Kudelski Security have observed that North Korea's Lazarus umbrella is split into six distinct clusters, focused on espionage, financial theft and sanctions evasion</description>
      <pubDate>Mon, 07 Sep 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/north-korea-lazarus-six-cyber/</guid>
    </item>
    <item>
      <title>Multiple Class Action Lawsuits Filed Against IDScan</title>
      <link>https://www.infosecurity-magazine.com/news/multiple-class-action-lawsuits/</link>
      <description>Several victims of a recent breach of driver’s license information have sued the company they believe responsible</description>
      <pubDate>Mon, 07 Sep 2026 09:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/multiple-class-action-lawsuits/</guid>
    </item>
    <item>
      <title>Researcher Publishes CrowdStrike Privilege Escalation Zero Day </title>
      <link>https://www.infosecurity-magazine.com/news/crowdstrike-privilege-escalation/</link>
      <description>A security researcher has posted a zero-day exploit in CrowdStrike which could allow hackers to escalate privileges</description>
      <pubDate>Mon, 07 Sep 2026 08:28:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/crowdstrike-privilege-escalation/</guid>
    </item>
    <item>
      <title>OpenAI Pledges $1bn to Bring its AI Cybersecurity Tools to Essential Services </title>
      <link>https://www.infosecurity-magazine.com/news/openai-pledges-ai-tools-essential/</link>
      <description>OpenAI has committed to subsidizing access to Daybreak, helping defenders deploy its AI models in its existing cybersecurity infrastructure</description>
      <pubDate>Fri, 04 Sep 2026 10:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/openai-pledges-ai-tools-essential/</guid>
    </item>
    <item>
      <title>G7 Urges Fast-Track on Quantum-Safe Cybersecurity Rules</title>
      <link>https://www.infosecurity-magazine.com/news/g7-urges-quantum-safe-cyber-rules/</link>
      <description>The G7 has published a call to action, urging governments to launch national strategies dedicated to the post-quantum encryption transition</description>
      <pubDate>Fri, 04 Sep 2026 09:25:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/g7-urges-quantum-safe-cyber-rules/</guid>
    </item>
    <item>
      <title>Pegasus Zero-Click Exploit Infects Serbian Student Activist's iPhone</title>
      <link>https://www.infosecurity-magazine.com/news/pegasus-zero-click-exploit/</link>
      <description>Pegasus infected a Serbian student activist's iPhone through an iMessage zero-click exploit</description>
      <pubDate>Thu, 03 Sep 2026 15:25:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/pegasus-zero-click-exploit/</guid>
    </item>
    <item>
      <title>Outsider Phishing Kit Survives Takedown With 700 New Pages</title>
      <link>https://www.infosecurity-magazine.com/news/outsider-phishing-kit-survives/</link>
      <description>Outsider phishing kit generated 700 new pages after a Google-led disruption</description>
      <pubDate>Thu, 03 Sep 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/outsider-phishing-kit-survives/</guid>
    </item>
    <item>
      <title>CREST Onboards First Cohort for AI-Enabled Pentesting Accreditation</title>
      <link>https://www.infosecurity-magazine.com/news/crest-first-cohort-ai-pentesting/</link>
      <description>CREST’s new AI-enabled penetration testing accreditation welcomes its first 10 providers</description>
      <pubDate>Thu, 03 Sep 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/crest-first-cohort-ai-pentesting/</guid>
    </item>
    <item>
      <title>US and Canadian Court Records Breached Following Thomson Reuters Incident </title>
      <link>https://www.infosecurity-magazine.com/news/us-canada-court-breach-thomson/</link>
      <description>Thomson Reuters has disclosed a cyber incident affecting its C-Track court management software, potentially exposing court records in Canada and the US</description>
      <pubDate>Thu, 03 Sep 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-canada-court-breach-thomson/</guid>
    </item>
    <item>
      <title>FBI Probes Possible Breach of 153 Million Driver’s Licenses</title>
      <link>https://www.infosecurity-magazine.com/news/fbi-probes-breach-153-million/</link>
      <description>The FBI is investigating how scans of over 153 million driver’s licenses are being sold on the dark web</description>
      <pubDate>Thu, 03 Sep 2026 09:33:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fbi-probes-breach-153-million/</guid>
    </item>
    <item>
      <title>International Operation Disrupts Sality P2P Botnet</title>
      <link>https://www.infosecurity-magazine.com/news/international-operation-disrupts/</link>
      <description>US-led action sinkholes machines caught up in Sality botnet</description>
      <pubDate>Thu, 03 Sep 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/international-operation-disrupts/</guid>
    </item>
    <item>
      <title>Russian Man Extradited Over Malware Campaign Targeting Freelancers</title>
      <link>https://www.infosecurity-magazine.com/news/russian-man-extradited-malware/</link>
      <description>Russian man extradited to US over malware campaign that targeted 80,000 freelance users</description>
      <pubDate>Wed, 02 Sep 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/russian-man-extradited-malware/</guid>
    </item>
    <item>
      <title>Gambling Goblin Turns Brazilian Government Sites Into SEO Weapons</title>
      <link>https://www.infosecurity-magazine.com/news/gambling-goblin-brazilian/</link>
      <description>Gambling Goblin compromised Brazilian government sites to drive gambling traffic through SEO fraud</description>
      <pubDate>Wed, 02 Sep 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gambling-goblin-brazilian/</guid>
    </item>
    <item>
      <title>Nutex Health Says Patient Data Stolen, Hackers Threaten Leak</title>
      <link>https://www.infosecurity-magazine.com/news/nutex-patient-data-stolen/</link>
      <description>The US healthcare provider confirmed that sensitive patient and employee data, alongside financial and business information, were exfiltrated by a third party</description>
      <pubDate>Wed, 02 Sep 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nutex-patient-data-stolen/</guid>
    </item>
    <item>
      <title>Hackers Chain Two New SonicWall Zero-Day Vulnerabilities</title>
      <link>https://www.infosecurity-magazine.com/news/hackers-chain-sonicwall-zeroday/</link>
      <description>SonicWall has urged customers to patch two new zero-day vulnerabilities being exploited in the wild</description>
      <pubDate>Wed, 02 Sep 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hackers-chain-sonicwall-zeroday/</guid>
    </item>
    <item>
      <title>FulcrumSec Claims Responsibility for Manchester Airport Group Breach</title>
      <link>https://www.infosecurity-magazine.com/news/fulcrumsec-manchester-airport/</link>
      <description>Threat group FulcrumSec claims MAG breach and leaks 550GB of data online</description>
      <pubDate>Wed, 02 Sep 2026 08:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fulcrumsec-manchester-airport/</guid>
    </item>
    <item>
      <title>Attackers Steal METR API Key and Burn $600,000 in AI Credits</title>
      <link>https://www.infosecurity-magazine.com/news/attackers-steal-metr-api-key/</link>
      <description>Attackers used a stolen METR API key for three weeks, consuming model credits worth $600,000</description>
      <pubDate>Tue, 01 Sep 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/attackers-steal-metr-api-key/</guid>
    </item>
    <item>
      <title>65% of Enterprises Have Seen AI Agents Act Out of Scope</title>
      <link>https://www.infosecurity-magazine.com/news/65-percent-enterprises-ai-agents/</link>
      <description>EMA survey finds 65% of enterprises have seen AI agents act beyond intended scope</description>
      <pubDate>Tue, 01 Sep 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/65-percent-enterprises-ai-agents/</guid>
    </item>
    <item>
      <title>White House Launches Pilot Program in Texas to Protect Water Infrastructure</title>
      <link>https://www.infosecurity-magazine.com/news/white-house-texas-protect-water/</link>
      <description>Project Watershed 250 will see water providers in Texas provided with federal and private sector cybersecurity resources amid rising nation-state threats </description>
      <pubDate>Tue, 01 Sep 2026 12:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/white-house-texas-protect-water/</guid>
    </item>
    <item>
      <title>Financial Stability Board Sounds the Alarm Over Frontier AI Risks</title>
      <link>https://www.infosecurity-magazine.com/news/financial-stability-board-alarm/</link>
      <description>The Financial Stability Board has warned G20 banking leaders about the cyber risks of frontier AI</description>
      <pubDate>Tue, 01 Sep 2026 09:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/financial-stability-board-alarm/</guid>
    </item>
    <item>
      <title>Healthcare Giant McKesson Investigates Data Breach Incident </title>
      <link>https://www.infosecurity-magazine.com/news/healthcare-mckesson-investigates/</link>
      <description>ShinyHunters claims to have stolen 284 million records from McKesson </description>
      <pubDate>Tue, 01 Sep 2026 08:25:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/healthcare-mckesson-investigates/</guid>
    </item>
    <item>
      <title>Fake Voicemail SVG Attachments Fuel Large-Scale Phishing Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/fake-voicemail-svg-files-bypass/</link>
      <description>A large-scale phishing campaign used fake voicemail SVG attachments to bypass email defenses, targeting 5527 organizations with over 26,000 malicious messages</description>
      <pubDate>Fri, 28 Aug 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fake-voicemail-svg-files-bypass/</guid>
    </item>
    <item>
      <title>Window to Tackle Surge in AI-Enabled Cyber Attacks Narrowing, Tech Giants Warn

 </title>
      <link>https://www.infosecurity-magazine.com/news/window-ai-attacks-narrowing-tech/</link>
      <description>More than 100 companies, including OpenAI, Anthropic, Google and Microsoft, have urged collective action to unlock the power of AI to protect critical public services</description>
      <pubDate>Fri, 28 Aug 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/window-ai-attacks-narrowing-tech/</guid>
    </item>
    <item>
      <title>Threat Actors Abuse Cursor Agent AI to Assist Ransomware Operations</title>
      <link>https://www.infosecurity-magazine.com/news/abuse-cursor-agent-ransomware/</link>
      <description>Aurora ransomware operators are abusing SpaceX’s Cursor Agent AI tool to conduct tasks such as reconnaissance and exploitation activities</description>
      <pubDate>Fri, 28 Aug 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/abuse-cursor-agent-ransomware/</guid>
    </item>
    <item>
      <title>Manchester Airports Group Hit by Cyber Incident</title>
      <link>https://www.infosecurity-magazine.com/news/manchester-airports-data-breach/</link>
      <description>Customer data linked to bookings and airport Wi-Fi registrations at Manchester, Stansted and East Midlands airports has been accessed by an unauthorized third party</description>
      <pubDate>Thu, 27 Aug 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/manchester-airports-data-breach/</guid>
    </item>
    <item>
      <title>Chinese Hacker Group QTFY Uses Custom-Built Platforms to Target US Infrastructure, FBI Warns </title>
      <link>https://www.infosecurity-magazine.com/news/chinese-qtfy-us-infrastructure-fbi/</link>
      <description>The FBI advisory set out QTFY’s distributed hacking ecosystem, allowing it to exploit vulnerabilities at scale and obfuscate its activities</description>
      <pubDate>Thu, 27 Aug 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chinese-qtfy-us-infrastructure-fbi/</guid>
    </item>
    <item>
      <title>CISA Warns of Six Exploited Flaws in Microsoft, Linux, Red Hat and Citrix Products</title>
      <link>https://www.infosecurity-magazine.com/news/cisa-kev-microsoft-citrix/</link>
      <description>CISA added six new bugs to its Known Exploited Vulnerabilities catalog on August 26, showing signs of active exploitation in the wild</description>
      <pubDate>Thu, 27 Aug 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisa-kev-microsoft-citrix/</guid>
    </item>
    <item>
      <title>Boston Scientific Reveals Global Disruption After Cyber Incident</title>
      <link>https://www.infosecurity-magazine.com/news/boston-scientific-global/</link>
      <description>MedTech giant Boston Scientific has revealed IT outages following a cyber incident</description>
      <pubDate>Thu, 27 Aug 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/boston-scientific-global/</guid>
    </item>
    <item>
      <title>OpenAI: Hugging Face Incident a “Warning Shot” to the World</title>
      <link>https://www.infosecurity-magazine.com/news/openai-hugging-face-warning-shot/</link>
      <description>OpenAI reveals that unauthorized message boards were at the heart of the recent Hugging Face breach</description>
      <pubDate>Thu, 27 Aug 2026 09:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/openai-hugging-face-warning-shot/</guid>
    </item>
    <item>
      <title>Tortoiseshell Expands Malware Toolset With New Backdoor, SSH Tunnel</title>
      <link>https://www.infosecurity-magazine.com/news/tortoiseshell-new-backdoor-ssh/</link>
      <description>Group-IB uncovered new Tortoiseshell infrastructure, including a backdoor and SSH tunneling tool</description>
      <pubDate>Wed, 26 Aug 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/tortoiseshell-new-backdoor-ssh/</guid>
    </item>
    <item>
      <title>Interpol Operation Jackal IV Identifies 263 Cybercrime Suspects</title>
      <link>https://www.infosecurity-magazine.com/news/interpol-operation-jackal-iv/</link>
      <description>Interpol operation leads to 58 arrests and identifies 263 suspects across 22 countries</description>
      <pubDate>Wed, 26 Aug 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/interpol-operation-jackal-iv/</guid>
    </item>
    <item>
      <title>Four in Five AI Tools Run with No IT Oversight, New Research Finds </title>
      <link>https://www.infosecurity-magazine.com/news/four-in-five-ai-tools-no-it/</link>
      <description>Reco report reveals growing shadow AI problem and surge in vulnerability disclosures </description>
      <pubDate>Wed, 26 Aug 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/four-in-five-ai-tools-no-it/</guid>
    </item>
    <item>
      <title>Average Cyber Insurance Losses Increase Despite Fewer Claims</title>
      <link>https://www.infosecurity-magazine.com/news/cyber-insurance-losses-increase/</link>
      <description>Chubb reported that growing privacy litigation has contributed to surging cyber claim costs in the US</description>
      <pubDate>Wed, 26 Aug 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cyber-insurance-losses-increase/</guid>
    </item>
    <item>
      <title>Linux Foundation Introduces TRACE Standard for AI Runtime Evidence</title>
      <link>https://www.infosecurity-magazine.com/news/linux-foundation-trace-standard-ai/</link>
      <description>This new open standard offers hardware-attested runtime and compliance evidence for AI agents</description>
      <pubDate>Wed, 26 Aug 2026 09:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/linux-foundation-trace-standard-ai/</guid>
    </item>
    <item>
      <title>DDoS Attack Hits Norwegian Government Services</title>
      <link>https://www.infosecurity-magazine.com/news/ddos-attack-hits-norwegian/</link>
      <description>A coordinated DDoS campaign has caused disruption among Norwegian government services</description>
      <pubDate>Wed, 26 Aug 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ddos-attack-hits-norwegian/</guid>
    </item>
    <item>
      <title>ZeroTokens Phishing Platform Steers Attacks in Real Time</title>
      <link>https://www.infosecurity-magazine.com/news/zerotokens-phishing-real-time/</link>
      <description>ZeroTokens gives phishing operators live control of victim sessions targeting 53 financial brands</description>
      <pubDate>Tue, 25 Aug 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/zerotokens-phishing-real-time/</guid>
    </item>
    <item>
      <title>Fake Recruiter Scams Target Corporate Credentials on Mobile</title>
      <link>https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/</link>
      <description>RecruitTrap campaigns use mobile-optimized phishing pages to target enterprise credentials</description>
      <pubDate>Tue, 25 Aug 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/</guid>
    </item>
    <item>
      <title>Australia Warns of Active Exploitation of Critical TeamCity Server Flaw</title>
      <link>https://www.infosecurity-magazine.com/news/australia-exploitation-teamcity/</link>
      <description>Australian officials are urging TeamCity customers to patch an actively exploited critical flaw, which follows a similar warning from the US government</description>
      <pubDate>Tue, 25 Aug 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/australia-exploitation-teamcity/</guid>
    </item>
    <item>
      <title>Fake Minecraft Clients Deliver WeedHack Malware Despite Infrastructure Takedown</title>
      <link>https://www.infosecurity-magazine.com/news/fake-minecraft-weedhack-malware/</link>
      <description>A threat actor keeps spreading the WeedHack malware to Minecraft players despite its original infrastructure taken down in July</description>
      <pubDate>Tue, 25 Aug 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fake-minecraft-weedhack-malware/</guid>
    </item>
    <item>
      <title>ReliaQuest Rejects Compromise Claims After ShinyHunters Incident</title>
      <link>https://www.infosecurity-magazine.com/news/reliaquest-not-compromised-by/</link>
      <description>ReliaQuest has detailed a social engineering attack linked to ShinyHunters, denying reports that the threat actor successfully compromised its systems</description>
      <pubDate>Tue, 25 Aug 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/reliaquest-not-compromised-by/</guid>
    </item>
    <item>
      <title>US Sanctions Mabna Institute Hackers for Iranian Cyber-Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/us-sanctions-mabna-institute/</link>
      <description>The US has sanctioned individuals connected to hacking-for-hire group the Mabna Institute </description>
      <pubDate>Tue, 25 Aug 2026 09:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-sanctions-mabna-institute/</guid>
    </item>
    <item>
      <title>New Guidance Helps Businesses Verify Quantum-Safe Hardware Claims</title>
      <link>https://www.infosecurity-magazine.com/news/guidance-verify-quantum-safe/</link>
      <description>TCG has released new guidance to help proving that trusted platform modules genuinely meet essential quantum-safe requirements</description>
      <pubDate>Mon, 24 Aug 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/guidance-verify-quantum-safe/</guid>
    </item>
    <item>
      <title>NIST Warns of Unique Security Risks in Multi-Cloud Environments</title>
      <link>https://www.infosecurity-magazine.com/news/nist-risks-multi-cloud/</link>
      <description>NIST has set out 23 novel challenges that arise in multi-cloud environments and has encouraged the cyber community to find solutions</description>
      <pubDate>Mon, 24 Aug 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nist-risks-multi-cloud/</guid>
    </item>
    <item>
      <title>Fake Codex Download Uses Google Sites to Deliver macOS Malware</title>
      <link>https://www.infosecurity-magazine.com/news/fake-codex-download-google-sites/</link>
      <description>Fake Codex pages used Google Sites, sponsored search and ClickFix to target Mac users</description>
      <pubDate>Mon, 24 Aug 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fake-codex-download-google-sites/</guid>
    </item>
    <item>
      <title>Doubloon Dredger Abuses Notion to Harvest Authentication Tokens</title>
      <link>https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/</link>
      <description>Doubloon Dredger abused Notion and malicious PDFs to harvest Microsoft authentication tokens</description>
      <pubDate>Mon, 24 Aug 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/</guid>
    </item>
    <item>
      <title>Wake-Up Call for CNI After Iranian Attack Shuts Down UK Power Plant</title>
      <link>https://www.infosecurity-magazine.com/news/cni-iranian-attack-shuts-uk-power/</link>
      <description>Experts argue Iranian cyber-attack on UK power plant lays bare frailty of critical national infrastructure</description>
      <pubDate>Mon, 24 Aug 2026 09:01:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cni-iranian-attack-shuts-uk-power/</guid>
    </item>
    <item>
      <title>Researchers Uncover Thousands of Leaked AWS Keys</title>
      <link>https://www.infosecurity-magazine.com/news/researchers-thousands-eaked-aws/</link>
      <description>Truffle Security says it found over 9000 publicly accessible and active AWS key pairs</description>
      <pubDate>Mon, 24 Aug 2026 08:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/researchers-thousands-eaked-aws/</guid>
    </item>
    <item>
      <title>North Korean Hackers Tied to Rust Supply Chain Attack</title>
      <link>https://www.infosecurity-magazine.com/news/north-korean-rust-supply-chain/</link>
      <description>Cybersecurity researchers have linked a malicious backdoor in compromised Rust packages to previous North Korean supply chain attacks</description>
      <pubDate>Fri, 21 Aug 2026 12:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/north-korean-rust-supply-chain/</guid>
    </item>
    <item>
      <title>New Agent Tesla Malware Variant Boosts Evasion Capabilities</title>
      <link>https://www.infosecurity-magazine.com/news/agent-tesla-malware-evasion/</link>
      <description>An Agent Tesla v4 malware campaign used novel emoji-based code obfuscation to evade detection, KnowBe4 has revealed</description>
      <pubDate>Fri, 21 Aug 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/agent-tesla-malware-evasion/</guid>
    </item>
    <item>
      <title>Cybersecurity Job Ads Requiring AI Skills Double</title>
      <link>https://www.infosecurity-magazine.com/news/cybersecurity-job-ads-ai-skills/</link>
      <description>An analysis by the AI Workforce Consortium found that technical cybersecurity jobs are becoming more strategic due to the influence of AI</description>
      <pubDate>Fri, 21 Aug 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybersecurity-job-ads-ai-skills/</guid>
    </item>
    <item>
      <title>NCSC Urges Stronger Controls for Agentic AI Systems</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-stronger-controls-agentic-ai/</link>
      <description>NCSC urged sandboxing, oversight and tight access controls for autonomous AI agents</description>
      <pubDate>Thu, 20 Aug 2026 12:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-stronger-controls-agentic-ai/</guid>
    </item>
    <item>
      <title>US Defense Contractors Admit Their Rising CMMC Scores May Not Be Accurate</title>
      <link>https://www.infosecurity-magazine.com/news/us-defense-contractors-cmmc-scores/</link>
      <description>Defense contractors in the US are doubting their own self-assessment scores under CMMC Phase I, even as those scores hit an all-time high</description>
      <pubDate>Thu, 20 Aug 2026 12:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-defense-contractors-cmmc-scores/</guid>
    </item>
    <item>
      <title>ICS Operators Warned of AI-Driven Attacks on Siemens PLCs</title>
      <link>https://www.infosecurity-magazine.com/news/ics-ai-attacks-siemens/</link>
      <description>A US government advisory warned that attackers are deploying AI-generated exploitation scripts against exposed Siemens S7 Series PLCs</description>
      <pubDate>Thu, 20 Aug 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ics-ai-attacks-siemens/</guid>
    </item>
    <item>
      <title>Updated ToxicPanda Variant Targets 140+ Banking and Crypto Apps</title>
      <link>https://www.infosecurity-magazine.com/news/updated-toxicpanda-140-banking/</link>
      <description>Zimperium lifts the lid on the ToxicPanda 2.0 Android banking Trojan</description>
      <pubDate>Thu, 20 Aug 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/updated-toxicpanda-140-banking/</guid>
    </item>
    <item>
      <title>Def Con Attendees Targeted by Persistent Phishing Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/def-con-attendees-persistent/</link>
      <description>Huntress researcher explains how they were targeted by an elaborate and persistent phishing scam following Def Con</description>
      <pubDate>Thu, 20 Aug 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/def-con-attendees-persistent/</guid>
    </item>
    <item>
      <title>Exclusive: Linux Foundation's Akrites to Go Live in September</title>
      <link>https://www.infosecurity-magazine.com/news/linux-foundations-akrites-go-live/</link>
      <description>The Linux Foundation's Akrites initiative will become operational in September, when it will begin accepting AI-powered vulnerability reports for open-source projects</description>
      <pubDate>Wed, 19 Aug 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/linux-foundations-akrites-go-live/</guid>
    </item>
    <item>
      <title>MaaS Campaign Combines ClickFix, ErrTraffic and Cruciferra</title>
      <link>https://www.infosecurity-magazine.com/news/maas-clickfix-errtraffic-cruciferra/</link>
      <description>eSentire uncovered a malware campaign combining ClickFix lures with ErrTraffic and Cruciferra</description>
      <pubDate>Wed, 19 Aug 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/maas-clickfix-errtraffic-cruciferra/</guid>
    </item>
    <item>
      <title>Grandoreiro Resurfaces in Mexico With New DLL Sideloading Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/grandoreiro-mexico-dll-sideloading/</link>
      <description>Grandoreiro is active after its 2024 disruption, with Mexico now accounting for 40% of detections</description>
      <pubDate>Wed, 19 Aug 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/grandoreiro-mexico-dll-sideloading/</guid>
    </item>
    <item>
      <title>OpenAI Tightens AI Safeguards Following Hugging Face Incident</title>
      <link>https://www.infosecurity-magazine.com/news/openai-tightens-ai-safeguards/</link>
      <description>OpenAI is strengthening safeguards for its most advanced AI models, citing growing risks as frontier systems gain more powerful cyber capabilities</description>
      <pubDate>Wed, 19 Aug 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/openai-tightens-ai-safeguards/</guid>
    </item>
    <item>
      <title>Over 500 Critical Infrastructure Organizations Hit by Medusa Ransomware</title>
      <link>https://www.infosecurity-magazine.com/news/critical-infrastructure-medusa/</link>
      <description>The FBI warned that the RaaS operation has significantly enhanced its tactics, techniques and procedures, making it harder for defenders to counter</description>
      <pubDate>Wed, 19 Aug 2026 10:50:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/critical-infrastructure-medusa/</guid>
    </item>
    <item>
      <title>ICO Urges Police to Improve Data Governance in Facial Recognition Rollouts</title>
      <link>https://www.infosecurity-magazine.com/news/ico-police-data-governance-facial/</link>
      <description>The UK’s privacy watchdog has called on police using facial recognition to follow its recommendations</description>
      <pubDate>Wed, 19 Aug 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ico-police-data-governance-facial/</guid>
    </item>
    <item>
      <title>UK Fraud Cases Hit Record High in 2026</title>
      <link>https://www.infosecurity-magazine.com/news/uk-fraud-cases-hit-record-high/</link>
      <description>Cifas data finds account takeover and identity fraud are driving a surge in fraud cases</description>
      <pubDate>Wed, 19 Aug 2026 08:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-fraud-cases-hit-record-high/</guid>
    </item>
    <item>
      <title>Wiz AI Agent Finds Critical Snowflake GitHub Repo Flaw Advanced Security Missed</title>
      <link>https://www.infosecurity-magazine.com/news/wiz-ai-agent-finds-snowflake/</link>
      <description>The security flaw in Snowflake’s GitHub Actions workflow had been missed by a GitHub Advanced Security scan, said a Wiz researcher</description>
      <pubDate>Tue, 18 Aug 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/wiz-ai-agent-finds-snowflake/</guid>
    </item>
    <item>
      <title>Enterprise Applications Carry 4.31x More Critical and High Vulnerabilities</title>
      <link>https://www.infosecurity-magazine.com/news/enterprise-apps-critical-high/</link>
      <description>Enterprise software creation has accelerated as vulnerability levels rise, Sonatype finds</description>
      <pubDate>Tue, 18 Aug 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/enterprise-apps-critical-high/</guid>
    </item>
    <item>
      <title>NASA Ground Control Software Flaw Enables Unauthenticated Commands</title>
      <link>https://www.infosecurity-magazine.com/news/nasa-ground-control-software-flaw/</link>
      <description>Critical AIT-GUI flaws expose spacecraft commands and scripts to unauthenticated attackers</description>
      <pubDate>Tue, 18 Aug 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nasa-ground-control-software-flaw/</guid>
    </item>
    <item>
      <title>Cyber Incident Disrupts Student Services at UT San Antonio </title>
      <link>https://www.infosecurity-magazine.com/news/cyber-incident-ut-san-antonio/</link>
      <description>UT San Antonio has taken IT systems offline following a cyber incident, disrupting student registration and tuition payments days before term is due to resume</description>
      <pubDate>Tue, 18 Aug 2026 11:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cyber-incident-ut-san-antonio/</guid>
    </item>
    <item>
      <title>Three-quarters of Ransomware Attacks Target Mid-Market Firms </title>
      <link>https://www.infosecurity-magazine.com/news/threequarters-ransomware-attacks/</link>
      <description>Black Kite finds mid-market is the sweet spot for ransomware as manufacturers are most likely to be hit</description>
      <pubDate>Tue, 18 Aug 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/threequarters-ransomware-attacks/</guid>
    </item>
    <item>
      <title>UK Legal Regulator Raises AI Misuse Concerns</title>
      <link>https://www.infosecurity-magazine.com/news/uk-legal-regulator-raises-ai/</link>
      <description>Solicitors Regulation Authority sounds the alarm over AI hallucinations and data leaks</description>
      <pubDate>Tue, 18 Aug 2026 08:17:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-legal-regulator-raises-ai/</guid>
    </item>
    <item>
      <title>UNISOC Modem Flaw Enables Remote Code Execution via Video Calls</title>
      <link>https://www.infosecurity-magazine.com/news/unisoc-modem-flaw-rce-calls/</link>
      <description>UNISOC modem flaw enabled kernel-level code execution through video calls</description>
      <pubDate>Mon, 17 Aug 2026 15:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/unisoc-modem-flaw-rce-calls/</guid>
    </item>
    <item>
      <title>WordPress Plugin Flaw Exposes 40,000 Sites to Admin Takeover</title>
      <link>https://www.infosecurity-magazine.com/news/wordpress-plugin-flaw-40000-sites/</link>
      <description>Critical User Profile Builder flaw let unauthenticated attackers access administrator accounts</description>
      <pubDate>Mon, 17 Aug 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/wordpress-plugin-flaw-40000-sites/</guid>
    </item>
    <item>
      <title>ETSI Proposes 17 Cybersecurity Standards to Support Cyber Resilience Act</title>
      <link>https://www.infosecurity-magazine.com/news/etsi-proposes-17-cybersecurity/</link>
      <description>The European Telecommunications Standards Institute has launched an approval process for standards vendors will have to meet under the Cyber Resilience Act</description>
      <pubDate>Mon, 17 Aug 2026 11:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/etsi-proposes-17-cybersecurity/</guid>
    </item>
    <item>
      <title>SafePal Data Breach Hits Tens of Thousands of Customers</title>
      <link>https://www.infosecurity-magazine.com/news/safepal-data-breach-tens-thousands/</link>
      <description>Nearly 40,000 customers of hardware wallet provider SafePal have been impacted by a data breach</description>
      <pubDate>Mon, 17 Aug 2026 09:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/safepal-data-breach-tens-thousands/</guid>
    </item>
    <item>
      <title>Infostealers Harvest 1.7 Billion Credentials in Six Months</title>
      <link>https://www.infosecurity-magazine.com/news/infostealers-17-billion/</link>
      <description>Flashpoint data reveals infostealers were responsible for taking 1.7 billion credentials in the first half of 2026</description>
      <pubDate>Mon, 17 Aug 2026 07:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/infostealers-17-billion/</guid>
    </item>
    <item>
      <title>Researchers Confirm ExfilSquad’s Access to Sensitive Data Across 13 Organizations</title>
      <link>https://www.infosecurity-magazine.com/news/exfilsquads-13-organizations/</link>
      <description>Researchers have verified that ExfilSquad possesses sensitive data stolen from at least 13 victims after the extortion group published leaked datasets via torrents </description>
      <pubDate>Fri, 14 Aug 2026 14:49:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/exfilsquads-13-organizations/</guid>
    </item>
    <item>
      <title>New Mirai-Based Linux Botnet ‘Evooo1Bot’ Turns Victims Into Proxies</title>
      <link>https://www.infosecurity-magazine.com/news/new-linux-botnet-evooo1bot-victims/</link>
      <description>Evooo1Bot is a newly observed botnet based on the Mirai framework but equipped with advanced features, turning edge devices into persistent proxies</description>
      <pubDate>Fri, 14 Aug 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/new-linux-botnet-evooo1bot-victims/</guid>
    </item>
    <item>
      <title>Novel macOS Infostealer AmnesiaStealer Spread via ClickFix</title>
      <link>https://www.infosecurity-magazine.com/news/macos-infostealer-spread-clickfix/</link>
      <description>AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data</description>
      <pubDate>Fri, 14 Aug 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/macos-infostealer-spread-clickfix/</guid>
    </item>
    <item>
      <title>Researchers Link 'Jewelbug' Chinese APT to Hack-for-Hire Operations</title>
      <link>https://www.infosecurity-magazine.com/news/researchers-link-chinese-apt-hack/</link>
      <description>Threat intelligence researchers from Broadcom revealed that a known Chinese APT group may be linked to a lucrative crypto fraud operation</description>
      <pubDate>Fri, 14 Aug 2026 07:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/researchers-link-chinese-apt-hack/</guid>
    </item>
    <item>
      <title>Exposed AWS Access Key Linked to Data Breach Affecting 1500+ UK Charities </title>
      <link>https://www.infosecurity-magazine.com/news/exposed-aws-key-data-charities/</link>
      <description>CRM provider Beacon has revealed that a compromised AWS access key was the likely root cause of the breach of 1500 UK charities’ data</description>
      <pubDate>Thu, 13 Aug 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/exposed-aws-key-data-charities/</guid>
    </item>
    <item>
      <title>Google Cloud Targets 2027 for First Major Post-Quantum Security Milestone</title>
      <link>https://www.infosecurity-magazine.com/news/google-cloud-post-quantum-roadmap/</link>
      <description>Google Cloud has set a 2027 deadline to mitigate store-now-decrypt-later risks as part of its post-quantum cryptography roadmap, with wider migration goals extending through 2028</description>
      <pubDate>Thu, 13 Aug 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/google-cloud-post-quantum-roadmap/</guid>
    </item>
    <item>
      <title>vCenter Flaw Exploited Just Five Days After Disclosure</title>
      <link>https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/</link>
      <description>Attackers exploited a critical-severity vCenter flaw five days after Broadcom disclosed it</description>
      <pubDate>Thu, 13 Aug 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/</guid>
    </item>
    <item>
      <title>Trump Authorizes Private Sector Participation in Offensive Cyber Operations</title>
      <link>https://www.infosecurity-magazine.com/news/trump-private-offensive-cyber/</link>
      <description>The White House has authorized government-directed offensive cyber operations against transnational groups, prompting warnings over escalation and attribution risks</description>
      <pubDate>Thu, 13 Aug 2026 12:35:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trump-private-offensive-cyber/</guid>
    </item>
    <item>
      <title>Akira Affiliate Crashes Ransomware After Attempting EDR Evasion</title>
      <link>https://www.infosecurity-magazine.com/news/akira-affiliate-crashes-ransomware/</link>
      <description>Huntress documents how a ransomware affiliate sabotaged its own attack with an anti-EDR effort</description>
      <pubDate>Thu, 13 Aug 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/akira-affiliate-crashes-ransomware/</guid>
    </item>
    <item>
      <title>ICO Reprimands Criminal Records Office After 2023 Breach</title>
      <link>https://www.infosecurity-magazine.com/news/ico-reprimands-acro-records-office/</link>
      <description>The ICO has issued a formal reprimand to ACRO after patching and security monitoring failures led to a breach</description>
      <pubDate>Thu, 13 Aug 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ico-reprimands-acro-records-office/</guid>
    </item>
    <item>
      <title>WindRelay Malware Pairs With SpyNote RAT in Live-Call Scam</title>
      <link>https://www.infosecurity-magazine.com/news/windrelay-nfc-relay-spynote-rat/</link>
      <description>New WindRelay NFC malware paired with SpyNote RAT let a fraudster clone a card mid-call</description>
      <pubDate>Wed, 12 Aug 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/windrelay-nfc-relay-spynote-rat/</guid>
    </item>
    <item>
      <title>Lazarus Used Post-Quantum Key Exchange to Deliver Zero-Day</title>
      <link>https://www.infosecurity-magazine.com/news/lazarus-post-quantum-key-dream-job/</link>
      <description>Lazarus malware used post-quantum key exchange to protect delivery of a Windows zero-day exploit</description>
      <pubDate>Wed, 12 Aug 2026 13:35:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/lazarus-post-quantum-key-dream-job/</guid>
    </item>
    <item>
      <title>Gunra Ransomware Exploits Fortinet Flaws to Target Critical Infrastructure</title>
      <link>https://www.infosecurity-magazine.com/news/gunra-ransomware-fortinet-flaws/</link>
      <description>Gunra actors are using stealth to exfiltrate vast volumes of data from Microsoft services, US and Korean agencies have warned</description>
      <pubDate>Wed, 12 Aug 2026 13:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gunra-ransomware-fortinet-flaws/</guid>
    </item>
    <item>
      <title>NIST Seeks Public Input on AI-Ready NVD Modernization</title>
      <link>https://www.infosecurity-magazine.com/news/nist-seeks-public-input-ai-nvd/</link>
      <description>The US National Institute for Standards and Technology wants to modernize its National Vulnerability Database to embrace AI-powered vulnerability research</description>
      <pubDate>Wed, 12 Aug 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nist-seeks-public-input-ai-nvd/</guid>
    </item>
    <item>
      <title>Russian-Linked Hackers Accessed Polish Power Plant OT Network Through Private APN, Says CERT.PL</title>
      <link>https://www.infosecurity-magazine.com/news/attack-polish-power-plant-2025-led/</link>
      <description>The Polish CERT has released details of another 2025 attack on a combined heat and power plant in the country </description>
      <pubDate>Wed, 12 Aug 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/attack-polish-power-plant-2025-led/</guid>
    </item>
    <item>
      <title>Microsoft Fixes 400 Flaws on August Patch Tuesday </title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-fixes-400-flaws-august/</link>
      <description>Microsoft has issued another massive batch of security updates with 400 fixed in the August Patch Tuesday </description>
      <pubDate>Wed, 12 Aug 2026 08:12:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-fixes-400-flaws-august/</guid>
    </item>
    <item>
      <title>Six npm Packages Read C2 Addresses From Ethereum Wallet</title>
      <link>https://www.infosecurity-magazine.com/news/npm-packages-ethereum-wallet-c2/</link>
      <description>Six npm packages queried an Ethereum wallet to locate C2 infrastructure</description>
      <pubDate>Tue, 11 Aug 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/npm-packages-ethereum-wallet-c2/</guid>
    </item>
    <item>
      <title>Cursor Security Bug Allowed Repositories to Execute Commands Before Trust Verification</title>
      <link>https://www.infosecurity-magazine.com/news/cursor-security-bug-command/</link>
      <description>Cursor fixed a pre-trust code execution path in three days then closed the report as informative</description>
      <pubDate>Tue, 11 Aug 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cursor-security-bug-command/</guid>
    </item>
    <item>
      <title>Suisan City, California, Responds to Cyber Incident Amid Wave of US Local Government Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/suisan-cyber-incident-government/</link>
      <description>Police and fire response has been impacted by the attack on Suisan City, while two other local authorities have been hit by cyber incidents in the past week also</description>
      <pubDate>Tue, 11 Aug 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/suisan-cyber-incident-government/</guid>
    </item>
    <item>
      <title>OpenAI Launches Two-Tier Security Access Program Alongside GPT 5.6 Cyber</title>
      <link>https://www.infosecurity-magazine.com/news/openai-daybreak-blue-red-gpt-cyber/</link>
      <description>Daybreak Blue removes some OpenAI-made guardrails while Daybreak Red grants the use of cyber-focused frontier AI models</description>
      <pubDate>Tue, 11 Aug 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/openai-daybreak-blue-red-gpt-cyber/</guid>
    </item>
    <item>
      <title>Logistics Giant Ceva Suffers Data Breach Impacting European Clients</title>
      <link>https://www.infosecurity-magazine.com/news/logistics-ceva-data-breach/</link>
      <description>Supply chain attack and data breach at Ceva Logistics appears to have a large blast radius</description>
      <pubDate>Tue, 11 Aug 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/logistics-ceva-data-breach/</guid>
    </item>
    <item>
      <title>OpenAI Pauses Some Development of Astra Model on Security Concerns</title>
      <link>https://www.infosecurity-magazine.com/news/openai-pauses-development-astra/</link>
      <description>OpenAI is tightening restrictions on testing of its upcoming Astra model due to security concerns</description>
      <pubDate>Tue, 11 Aug 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/openai-pauses-development-astra/</guid>
    </item>
    <item>
      <title>Only Half of UK Manufacturers Have a Cyber Incident Response Plan</title>
      <link>https://www.infosecurity-magazine.com/news/half-uk-manufacturers-cyber/</link>
      <description>Make UK reveals major cyber resilience gaps as 30% of UK manufacturers report recent cyber incidents</description>
      <pubDate>Tue, 11 Aug 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/half-uk-manufacturers-cyber/</guid>
    </item>
    <item>
      <title>Researchers Uncover RovoBlast Vulnerability in Atlassian AI Assistant</title>
      <link>https://www.infosecurity-magazine.com/news/rovoblast-atlassian-rovo-url/</link>
      <description>Atlassian fixed a flaw letting one crafted link make its Rovo AI assistant exfiltrate company data</description>
      <pubDate>Mon, 10 Aug 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/rovoblast-atlassian-rovo-url/</guid>
    </item>
    <item>
      <title>WordPress Plugins Compromised Without a Single File Change</title>
      <link>https://www.infosecurity-magazine.com/news/bdthemes-wordpress-poisoned-api/</link>
      <description>Poisoned JSON feed let attackers backdoor WordPress sites without changing any plugin files</description>
      <pubDate>Mon, 10 Aug 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/bdthemes-wordpress-poisoned-api/</guid>
    </item>
    <item>
      <title>“Ghostjacking” Exploits AI Agents’ Trusted Access to Evade Firewall Controls</title>
      <link>https://www.infosecurity-magazine.com/news/ghostjacking-ai-gents-access/</link>
      <description>Tenet reported that half of Fortune 500 companies are vulnerable to the Ghostjacking technique, which involves tricking AI agents with fake reports</description>
      <pubDate>Mon, 10 Aug 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ghostjacking-ai-gents-access/</guid>
    </item>
    <item>
      <title>Go-Based macOS Malware Steals Crypto and Secrets</title>
      <link>https://www.infosecurity-magazine.com/news/gobased-macos-malware-crypto-and/</link>
      <description>A macOS malware variant has been detected stealing crypto, passwords and more</description>
      <pubDate>Mon, 10 Aug 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/gobased-macos-malware-crypto-and/</guid>
    </item>
    <item>
      <title>US Sanctions Iranian $6bn Crypto “Exchange” Shelbit</title>
      <link>https://www.infosecurity-magazine.com/news/us-sanctions-iranian-6bn-crypto/</link>
      <description>TRM Labs explains that sanctioned Iranian firm Shelbit was a fake crypto exchange</description>
      <pubDate>Mon, 10 Aug 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-sanctions-iranian-6bn-crypto/</guid>
    </item>
    <item>
      <title>Healthcare and Victim Support Charities Affected by Beacon Cyber Incident</title>
      <link>https://www.infosecurity-magazine.com/news/healthcare-victim-charities-beacon/</link>
      <description>Beacon has informed around 1500 customer charities that its CRM databases were accessed and likely exfiltrated by an unauthorized actor</description>
      <pubDate>Fri, 07 Aug 2026 10:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/healthcare-victim-charities-beacon/</guid>
    </item>
    <item>
      <title>Google Links Redact Extortion Group to BlackFile Rebrand</title>
      <link>https://www.infosecurity-magazine.com/news/redact-extortion-group-blackfile/</link>
      <description>BlackFile has rebranded as Redact after an alleged affiliate hijack, with Google linking the group to ongoing vishing and extortion campaigns</description>
      <pubDate>Fri, 07 Aug 2026 09:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/redact-extortion-group-blackfile/</guid>
    </item>
    <item>
      <title>Ransomware Surges in July After Q2 Lull</title>
      <link>https://www.infosecurity-magazine.com/news/ransomware-surges-july-q2-lull/</link>
      <description>Finance, technology and healthcare sectors were particularly heavily targeted in July, according to Comparitech</description>
      <pubDate>Fri, 07 Aug 2026 08:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ransomware-surges-july-q2-lull/</guid>
    </item>
    <item>
      <title>Toolkit Hidden Inside Oracle Database Evades Endpoint Tools</title>
      <link>https://www.infosecurity-magazine.com/news/khunt-toolkit-oracle-database-sql/</link>
      <description>Attackers used SQL injection to compile a post-exploitation toolkit inside an Oracle database</description>
      <pubDate>Thu, 06 Aug 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/khunt-toolkit-oracle-database-sql/</guid>
    </item>
    <item>
      <title>TeamPCP Traced Back to 2020 Cryptojacking Operation</title>
      <link>https://www.infosecurity-magazine.com/news/teampcp-shadowray-ta-natalstatus/</link>
      <description>Oligo Security has linked TeamPCP to ShadowRay 2.0 and to cryptojacking infrastructure dating back to 2020</description>
      <pubDate>Thu, 06 Aug 2026 14:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/teampcp-shadowray-ta-natalstatus/</guid>
    </item>
    <item>
      <title>Meta Joins OpenAI and Anthropic in Reporting AI Exploit Incident</title>
      <link>https://www.infosecurity-magazine.com/news/meta-ai-exploit-incident/</link>
      <description>One of Meta’s AI models exploited a third-party security flaw during an evaluation, the latest in a series of similar incidents involving advanced AI systems</description>
      <pubDate>Thu, 06 Aug 2026 13:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/meta-ai-exploit-incident/</guid>
    </item>
    <item>
      <title>Violent Physical Crypto Thefts Surge to $30m in Losses</title>
      <link>https://www.infosecurity-magazine.com/news/violent-physical-crypto-thefts/</link>
      <description>So-called “wrench attacks” have resulted in $30m in losses so far in 2026, says Chainalysis</description>
      <pubDate>Thu, 06 Aug 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/violent-physical-crypto-thefts/</guid>
    </item>
    <item>
      <title>Canadian Hacker Pleads Guilty Over Snowflake Extortion Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/canadian-hacker-guilty-snowflake/</link>
      <description>A Canadian hacker has admitted involvement in the widespread compromise of 165 Snowflake customer accounts used to steal data and extort victims</description>
      <pubDate>Thu, 06 Aug 2026 10:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/canadian-hacker-guilty-snowflake/</guid>
    </item>
    <item>
      <title>NVIDIA Group Proposes SAFE Initiative for Agentic Threat Intel Sharing</title>
      <link>https://www.infosecurity-magazine.com/news/safe-initiative-agentic-threat/</link>
      <description>The Open Secure AI Alliance has announced plans for the Shared AI Findings Exchange (SAFE)</description>
      <pubDate>Thu, 06 Aug 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/safe-initiative-agentic-threat/</guid>
    </item>
    <item>
      <title>Fake Open VSX Extensions Harvest Private Repo and CI Data</title>
      <link>https://www.infosecurity-magazine.com/news/open-vsx-evil-twin-extensions-git/</link>
      <description>77 counterfeit Open VSX extensions beaconed to one domain, 19 harvesting git and CI identity</description>
      <pubDate>Wed, 05 Aug 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/open-vsx-evil-twin-extensions-git/</guid>
    </item>
    <item>
      <title>Paperclip AI Flaws Let Unauthenticated Attackers Run Commands</title>
      <link>https://www.infosecurity-magazine.com/news/paperclip-ai-vulnerabilities-rce/</link>
      <description>3 Paperclip flaws exposed data &amp; allowed unauthenticated command execution in two deployment modes</description>
      <pubDate>Wed, 05 Aug 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/paperclip-ai-vulnerabilities-rce/</guid>
    </item>
    <item>
      <title>Prompt Injection Remains Biggest LLM Risk, Despite Limited Incidents</title>
      <link>https://www.infosecurity-magazine.com/news/prompt-injection-llm-risk/</link>
      <description>Prompt injection remains the most dangerous security threat to LLMs, according to OWASP’s latest Top 10 LLM Applications list</description>
      <pubDate>Wed, 05 Aug 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/prompt-injection-llm-risk/</guid>
    </item>
    <item>
      <title>ChainDrop Worm Hits 400+ npm Packages with Two Billion Monthly Installs</title>
      <link>https://www.infosecurity-magazine.com/news/chaindrop-worm-400-npm-two-billion/</link>
      <description>A new npm worm has compromised packages with over two billion monthly installs</description>
      <pubDate>Wed, 05 Aug 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chaindrop-worm-400-npm-two-billion/</guid>
    </item>
    <item>
      <title>Frontier Models Engage in Unsanctioned Behavior During Testing</title>
      <link>https://www.infosecurity-magazine.com/news/frontier-models-unsanctioned/</link>
      <description>Anthropic and OpenAI models attacked “real people and organizations” during AI Security Institute tests </description>
      <pubDate>Wed, 05 Aug 2026 08:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/frontier-models-unsanctioned/</guid>
    </item>
    <item>
      <title>Fake Bank of America Phishing Scam Installs Remote Access Malware</title>
      <link>https://www.infosecurity-magazine.com/news/fake-bank-of-america-phishing-scam/</link>
      <description>Cybercriminals are using a fake Bank of America phishing campaign to trick users into downloading a malicious script that installs ScreenConnect, enabling remote access and persistence on compromised systems</description>
      <pubDate>Wed, 05 Aug 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fake-bank-of-america-phishing-scam/</guid>
    </item>
    <item>
      <title>WhatsApp Scam Hijacks Accounts via Linked Devices Feature</title>
      <link>https://www.infosecurity-magazine.com/news/whatsapp-voting-scam-linked/</link>
      <description>WhatsApp scam abused the Linked devices feature to hijack accounts without stealing any passwords</description>
      <pubDate>Tue, 04 Aug 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/whatsapp-voting-scam-linked/</guid>
    </item>
    <item>
      <title>Cybercriminals Bypass AI Safety Controls by Splitting Malicious Tasks Across Multiple Sessions</title>
      <link>https://www.infosecurity-magazine.com/news/talos-attackers-split-tasks-evade/</link>
      <description>Talos read attacker prompt logs and found guardrails fell to task splitting and ownership claims</description>
      <pubDate>Tue, 04 Aug 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/talos-attackers-split-tasks-evade/</guid>
    </item>
    <item>
      <title>Cloud and SaaS Environments Now Top Targets for Attackers</title>
      <link>https://www.infosecurity-magazine.com/news/cloud-saas-targets-attackers/</link>
      <description>Cloud and SaaS are now the preferred operating environments for threat actors, amid a continued shift to identity attacks </description>
      <pubDate>Tue, 04 Aug 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cloud-saas-targets-attackers/</guid>
    </item>
    <item>
      <title>AI Accounts for Over Half of Cybercrime in Africa, Says Interpol</title>
      <link>https://www.infosecurity-magazine.com/news/ai-accounts-over-half-cybercrime/</link>
      <description>Interpol claims AI is driving a surge in cybercrime in Africa, with related losses doubling</description>
      <pubDate>Tue, 04 Aug 2026 10:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-accounts-over-half-cybercrime/</guid>
    </item>
    <item>
      <title>UK’s Police National Legal Database Reveals Data Breach</title>
      <link>https://www.infosecurity-magazine.com/news/uks-police-national-legal-database/</link>
      <description>The UK’s Police National Legal Database and Ask the Police service have been breached</description>
      <pubDate>Tue, 04 Aug 2026 08:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uks-police-national-legal-database/</guid>
    </item>
    <item>
      <title>China-Linked Threat Actors Weaponize New Vulnerabilities in Under a Day</title>
      <link>https://www.infosecurity-magazine.com/news/chinalinked-threat-actors/</link>
      <description>Chinese actors exploited the critical React2Shell exploit inside a day, while 88% of exploited vulnerabilities in H1 2026 were compromised within 48 hours of disclosure</description>
      <pubDate>Mon, 03 Aug 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chinalinked-threat-actors/</guid>
    </item>
    <item>
      <title>Midnight Blizzard Targets Travelers via Captive Portals</title>
      <link>https://www.infosecurity-magazine.com/news/captivecrunch-midnight-blizzard/</link>
      <description>Russian actor Storm-2945 hijacked hotel captive portals to push fake updates and steal tokens</description>
      <pubDate>Mon, 03 Aug 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/captivecrunch-midnight-blizzard/</guid>
    </item>
    <item>
      <title>HollowFrame Loader Uses Fake Python DLL to Evade Defender</title>
      <link>https://www.infosecurity-magazine.com/news/hollowframe-fake-python-dll/</link>
      <description>New HollowFrame loader hid Go code in a fake Python DLL after pre-staging Defender exclusions</description>
      <pubDate>Mon, 03 Aug 2026 11:26:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hollowframe-fake-python-dll/</guid>
    </item>
    <item>
      <title>Korea’s Largest Telco KT Fined $38m After Femtocell Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/koreas-largest-telco-kt-fine-39m/</link>
      <description>Korean telco KT has been fined $39m for a year-long breach linked to femtocell compromise</description>
      <pubDate>Mon, 03 Aug 2026 09:36:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/koreas-largest-telco-kt-fine-39m/</guid>
    </item>
    <item>
      <title>Coldcard Users Lose $89m After Bitcoin Wallet Is Hacked</title>
      <link>https://www.infosecurity-magazine.com/news/coldcard-users-lose-89m-bitcoin/</link>
      <description>A hacker has drained nearly $89m from Coldcard Bitcoin wallets after exploiting a legacy bug</description>
      <pubDate>Mon, 03 Aug 2026 08:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/coldcard-users-lose-89m-bitcoin/</guid>
    </item>
    <item>
      <title>Chinese Hacker Uses DeepSeek AI to Orchestrate Vulnerability Exploits</title>
      <link>https://www.infosecurity-magazine.com/news/chinese-hacker-deepseek-ai/</link>
      <description>A Chinese-speaking threat actor has been using DeepSeek’s AI models to orchestrate cyber-attacks targeting Asian organizations</description>
      <pubDate>Fri, 31 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chinese-hacker-deepseek-ai/</guid>
    </item>
    <item>
      <title>AWS Blames North Korean Group for Axios and Other npm Supply Chain Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/aws-north-korea-axios-npm-supply/</link>
      <description>AWS has linked North Korea to the axios campaign to other attacks on npm libraries</description>
      <pubDate>Fri, 31 Jul 2026 09:50:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/aws-north-korea-axios-npm-supply/</guid>
    </item>
    <item>
      <title>Anthropic Reveals Claude Escaped Testing, Breaching Three Companies</title>
      <link>https://www.infosecurity-magazine.com/news/anthropic-claude-breached-three/</link>
      <description>Anthropic has revealed that Claude AI models compromised third-party organizations</description>
      <pubDate>Fri, 31 Jul 2026 08:35:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/anthropic-claude-breached-three/</guid>
    </item>
    <item>
      <title>Cryptominer Abuses Linux PAM to Hide From SOC Analysts</title>
      <link>https://www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/</link>
      <description>Cryptomining crew abandoned root to impersonate low-privileged Linux users and evade SOC alerts</description>
      <pubDate>Thu, 30 Jul 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/</guid>
    </item>
    <item>
      <title>AiTM Phishing Becomes Top Initial Access Threat to Law Firms</title>
      <link>https://www.infosecurity-magazine.com/news/aitm-phishing-top-entry-point-law/</link>
      <description>AiTM phishing is now the top entry point into law firms, with identity behind 56% of threats</description>
      <pubDate>Thu, 30 Jul 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/aitm-phishing-top-entry-point-law/</guid>
    </item>
    <item>
      <title>AI and Automation Fall Short of Sysadmin Expectations</title>
      <link>https://www.infosecurity-magazine.com/news/ai-automation-fall-short-sysadmin/</link>
      <description>Action1 report finds sysadmins overestimated their use of AI in predictions made two years ago</description>
      <pubDate>Thu, 30 Jul 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-automation-fall-short-sysadmin/</guid>
    </item>
    <item>
      <title>Teams-Themed Phishing Campaign Abused Legitimate Microsoft Login Pages</title>
      <link>https://www.infosecurity-magazine.com/news/teams-phishing-abused-legit/</link>
      <description>Check Point researchers detail phishing attack as an example of attackers dropping fake Microsoft login pages in favor of abusing Microsoft’s legitimate authentication infrastructure</description>
      <pubDate>Thu, 30 Jul 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/teams-phishing-abused-legit/</guid>
    </item>
    <item>
      <title>Google Releases Patches for 370 Vulnerabilities in Chrome 151</title>
      <link>https://www.infosecurity-magazine.com/news/google-patches-370-vulnerabilities/</link>
      <description>The new version of Chrome, 151, comes with 370 vulnerability patches, including for seven critical flaws</description>
      <pubDate>Thu, 30 Jul 2026 09:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/google-patches-370-vulnerabilities/</guid>
    </item>
    <item>
      <title>NCSC Calls on Vendors to Embed ‘Forensic Observability’ in Network Devices</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-calls-device-manufacturers/</link>
      <description>The UK’s National Cyber Security Centre wants network device makers to improve forensic observability</description>
      <pubDate>Thu, 30 Jul 2026 08:25:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-calls-device-manufacturers/</guid>
    </item>
    <item>
      <title>LogoKit Phishing Kit Screenshots Victim Sites in Real Time</title>
      <link>https://www.infosecurity-magazine.com/news/logokit-phishing-real-time/</link>
      <description>LogoKit now builds per-victim phishing pages using live screenshots of the target's real website</description>
      <pubDate>Wed, 29 Jul 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/logokit-phishing-real-time/</guid>
    </item>
    <item>
      <title>Russian-Alligned TA488 Returns With Persistent Outlook Web Access Attack</title>
      <link>https://www.infosecurity-magazine.com/news/ta488-outlook-half-click-owareaper/</link>
      <description>TA488 returned with OWA half-click exploit deploying OWAReaper implant that survived re-imaging</description>
      <pubDate>Wed, 29 Jul 2026 15:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ta488-outlook-half-click-owareaper/</guid>
    </item>
    <item>
      <title>The Average Cost of a Data Breach Rises to $5 Million</title>
      <link>https://www.infosecurity-magazine.com/news/cost-of-a-data-breach-5m-ibm/</link>
      <description>IBM Cost of a Data Breach Report warns that the global average cost of a data breach has reached a record high of $4.99m – and AI-backed attacks have played a role</description>
      <pubDate>Wed, 29 Jul 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cost-of-a-data-breach-5m-ibm/</guid>
    </item>
    <item>
      <title>Just 1% of AI-Discovered Vulnerabilities Exploited in the Wild, Research Shows</title>
      <link>https://www.infosecurity-magazine.com/news/one-percent-ai-vulnerabilities/</link>
      <description>For now, the use of AI benefits vulnerability research more than vulnerability exploitation, a VulnCheck researcher said</description>
      <pubDate>Wed, 29 Jul 2026 10:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/one-percent-ai-vulnerabilities/</guid>
    </item>
    <item>
      <title>Researchers Warn of AI-Enhanced Phone Fraud Ecosystem</title>
      <link>https://www.infosecurity-magazine.com/news/researchers-aienhanced-phone-fraud/</link>
      <description>AI is dramatically reducing the barriers to entry for scam phone farm operators, Human Security warns</description>
      <pubDate>Wed, 29 Jul 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/researchers-aienhanced-phone-fraud/</guid>
    </item>
    <item>
      <title>NCSC Publishes Guidance to Aid Incident Response and Recovery</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-publishes-guidance-incident/</link>
      <description>The National Cyber Security Centre has released a detailed framework to assist with incident response and recovery</description>
      <pubDate>Wed, 29 Jul 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-publishes-guidance-incident/</guid>
    </item>
    <item>
      <title>Bugs in Hugging Face Diffusers Bypass Custom Code Safeguard</title>
      <link>https://www.infosecurity-magazine.com/news/hugging-face-diffusers-trust/</link>
      <description>Three CVEs in Hugging Face diffusers let a malicious model repo run code on any machine that loads it</description>
      <pubDate>Tue, 28 Jul 2026 15:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hugging-face-diffusers-trust/</guid>
    </item>
    <item>
      <title>AI-Assisted Bug Hunt Uncovers Linux Kernel 0-Day in net/sched</title>
      <link>https://www.infosecurity-magazine.com/news/ai-linux-kernel-zero-day-net-sched/</link>
      <description>AI-assisted research uncovered Linux kernel use-after-free allowing root escalation</description>
      <pubDate>Tue, 28 Jul 2026 14:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-linux-kernel-zero-day-net-sched/</guid>
    </item>
    <item>
      <title>Phishing Dominates as Initial Entry Method for Cyber-Attacks, as Hackers Hone Evasion Techniques</title>
      <link>https://www.infosecurity-magazine.com/news/phishing-dominates-initial-entry/</link>
      <description>Analysis of real-life incident response cases by Cisco Talos warns that phishing remains a powerful method of initial compromise</description>
      <pubDate>Tue, 28 Jul 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/phishing-dominates-initial-entry/</guid>
    </item>
    <item>
      <title>Microsoft Launches Flurry of AI Security Initiatives to Combat AI-Enabled Threats</title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-ai-security-initiatives/</link>
      <description>Microsoft has launched a new agentic security system for cyber defenders as well as its first cyber-focused AI model</description>
      <pubDate>Tue, 28 Jul 2026 12:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-ai-security-initiatives/</guid>
    </item>
    <item>
      <title>Coca-Cola Reveals Subsidiary Fairlife Suffered Data Breach</title>
      <link>https://www.infosecurity-magazine.com/news/coca-cola-subsidiary-fairlife-data/</link>
      <description>Coca Cola claims data was stolen from its Fairlife business after a recent ransomware attack</description>
      <pubDate>Tue, 28 Jul 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/coca-cola-subsidiary-fairlife-data/</guid>
    </item>
    <item>
      <title>NVIDIA’s Open Secure AI Alliance Is Missing Some Big Names</title>
      <link>https://www.infosecurity-magazine.com/news/nvidia-open-security-ai-alliance/</link>
      <description>NVIDIA has launched a new Open Secure AI Alliance to build an “open defense stack for agents”</description>
      <pubDate>Tue, 28 Jul 2026 09:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nvidia-open-security-ai-alliance/</guid>
    </item>
    <item>
      <title>New CREST AI Standards to Deliver AI-Enabled Pentesting Accreditation</title>
      <link>https://www.infosecurity-magazine.com/news/crest-ai-pentesting-accreditation/</link>
      <description>CREST’s new AI standards are optional add-on requirements for cybersecurity service providers wishing to demonstrate responsible AI usage</description>
      <pubDate>Tue, 28 Jul 2026 08:57:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/crest-ai-pentesting-accreditation/</guid>
    </item>
    <item>
      <title>SourTrade Malvertising Campaign Secretly Builds Malware in the Browser</title>
      <link>https://www.infosecurity-magazine.com/news/malvertising-builds-malware-in/</link>
      <description>Impersonating well-known cryptocurrency and trading sites, SourTrade has developed a novel technique to drop infostealers to victims</description>
      <pubDate>Mon, 27 Jul 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/malvertising-builds-malware-in/</guid>
    </item>
    <item>
      <title>Ransomware Groups Increasingly Deploy EDR Kill Techniques</title>
      <link>https://www.infosecurity-magazine.com/news/ransomware-q2-2026-edr-kill/</link>
      <description>Halcyon’s latest quarterly ransomware report showed that while ransomware attacks are declining, obfuscation techniques are getting harder to fight against</description>
      <pubDate>Mon, 27 Jul 2026 10:01:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ransomware-q2-2026-edr-kill/</guid>
    </item>
    <item>
      <title>Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials From Visitors</title>
      <link>https://www.infosecurity-magazine.com/news/hotel-wifi-dns-poisoning/</link>
      <description>Researchers at ReliaQuest warned of widespread DNS poisoning attacks targeting the hospitality sector as part of a cyber espionage campaign</description>
      <pubDate>Fri, 24 Jul 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hotel-wifi-dns-poisoning/</guid>
    </item>
    <item>
      <title>ChatGPT Among Top 10 Most Impersonated Brands in Phishing Attacks, Says Check Point</title>
      <link>https://www.infosecurity-magazine.com/news/chatgpt-most-impersonated-brands/</link>
      <description>OpenAI’s chatbot tool ChatGPT ranked among the top 10 most impersonated brands in phishing attacks for the first time</description>
      <pubDate>Fri, 24 Jul 2026 11:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chatgpt-most-impersonated-brands/</guid>
    </item>
    <item>
      <title>Ransomware Attacks Targeting Universities on the Rise </title>
      <link>https://www.infosecurity-magazine.com/news/university-ransomware-attacks-rise/</link>
      <description>Comparitech’s analysis of incidents in the first half of 2026 finds that the emergence of The Gentlemen ransomware has resulted in surge in attacks against higher education</description>
      <pubDate>Fri, 24 Jul 2026 09:15:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/university-ransomware-attacks-rise/</guid>
    </item>
    <item>
      <title>Russian Hackers Exploit New ‘Zero-Click’  Attack Against Western Organizations</title>
      <link>https://www.infosecurity-magazine.com/news/russian-hackers-zero-click/</link>
      <description>International agencies issue joint alert over state-backed campaign exploiting a critical vulnerability in the Zimbra Collaboration Suite</description>
      <pubDate>Thu, 23 Jul 2026 15:50:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/russian-hackers-zero-click/</guid>
    </item>
    <item>
      <title>Microsoft Copilot Deployments Delayed Over Security Concerns </title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-copilot-delayed-over/</link>
      <description>CoreView research finds that security leadership is concerned about AI Assistant exposing confidential data</description>
      <pubDate>Thu, 23 Jul 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-copilot-delayed-over/</guid>
    </item>
    <item>
      <title>Iranian Hackers Target Siemens and Schneider Industrial Systems, CISA Warns</title>
      <link>https://www.infosecurity-magazine.com/news/iran-hackers-siemen-schneider-ics/</link>
      <description>US government agencies have warned that Iranian cyber actors are targeting US-based Siemens and Schneider industrial equipment</description>
      <pubDate>Thu, 23 Jul 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/iran-hackers-siemen-schneider-ics/</guid>
    </item>
    <item>
      <title>AI Agents Now the Enterprises Fastest Growing Exposed Attack Surface</title>
      <link>https://www.infosecurity-magazine.com/news/ai-agents-attack-surface/</link>
      <description>Sophos report warns that the rapid adoption of AI by businesses is leaving them vulnerable to a new source of cyber threats</description>
      <pubDate>Thu, 23 Jul 2026 11:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-agents-attack-surface/</guid>
    </item>
    <item>
      <title>New Dolphin X Stealer Employs AI Profiling to Prioritize Targets</title>
      <link>https://www.infosecurity-magazine.com/news/new-dolphin-x-stealer-ai-targets/</link>
      <description>Dolphin X is a new infostealer that uses AI to sort and rank victims, giving cybercriminals a faster way to identify lucrative targets </description>
      <pubDate>Thu, 23 Jul 2026 10:19:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/new-dolphin-x-stealer-ai-targets/</guid>
    </item>
    <item>
      <title>Two-Thirds of Ransomware Victims Say AI Boosted Attack Effectiveness</title>
      <link>https://www.infosecurity-magazine.com/news/ai-boosts-ransomware-effectiveness/</link>
      <description>A new study of organizations which have fallen victim to ransomware suggests the rise of AI-tools being used by hackers is making life harder for defenders</description>
      <pubDate>Thu, 23 Jul 2026 08:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ai-boosts-ransomware-effectiveness/</guid>
    </item>
    <item>
      <title>TrickBot Ditches HTTP for DNS Tunneling in Latest Variant</title>
      <link>https://www.infosecurity-magazine.com/news/trickbot-dns-tunneling-c2/</link>
      <description>New TrickBot variant hides C2 communication inside DNS queries, replacing decade-old HTTP pattern</description>
      <pubDate>Wed, 22 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trickbot-dns-tunneling-c2/</guid>
    </item>
    <item>
      <title>Open AI Claims Its AI Models Went Rogue and Hacked Another Company</title>
      <link>https://www.infosecurity-magazine.com/news/open-ai-hacked-another-company/</link>
      <description>Hugging Face recently disclosed a security breach. OpenAI has now said that it was its AI models which broke containment and hacked Hugging Face themselves</description>
      <pubDate>Wed, 22 Jul 2026 11:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/open-ai-hacked-another-company/</guid>
    </item>
    <item>
      <title>Ubuntu snap-confine Vulnerability Enables Local Root Access</title>
      <link>https://www.infosecurity-magazine.com/news/ubuntu-snap-confine-local-root-cve/</link>
      <description>New Ubuntu snap-confine race condition lets local users escalate to root on default installs</description>
      <pubDate>Wed, 22 Jul 2026 10:50:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ubuntu-snap-confine-local-root-cve/</guid>
    </item>
    <item>
      <title>Google Makes CodeMender Available as Managed AI Security Agent</title>
      <link>https://www.infosecurity-magazine.com/news/google-codemender-available-ai/</link>
      <description>CodeMender actively builds and runs exploits in customer-managed sandboxes to verify if vulnerabilities are truly exploitable</description>
      <pubDate>Wed, 22 Jul 2026 10:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/google-codemender-available-ai/</guid>
    </item>
    <item>
      <title>Russian Hacker Turns Jailbroken Claude Into Pentest Platform</title>
      <link>https://www.infosecurity-magazine.com/news/trim-jailbroken-claude-ai-pentest/</link>
      <description>Russian-speaking actor Trim built a commercial offensive AI pentest tool on jailbroken Claude models</description>
      <pubDate>Tue, 21 Jul 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/trim-jailbroken-claude-ai-pentest/</guid>
    </item>
    <item>
      <title>A New Ransomware Threat Actor Emerges Every Week, Warns Report</title>
      <link>https://www.infosecurity-magazine.com/news/new-ransomware-weekly/</link>
      <description>Analysis by Black Kite warns that ransomware ecosystem is becoming bigger and more fragmented</description>
      <pubDate>Tue, 21 Jul 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/new-ransomware-weekly/</guid>
    </item>
    <item>
      <title>FBI Warns of Deepfake Videos Impersonating IC3 Leadership</title>
      <link>https://www.infosecurity-magazine.com/news/fbi-deepfake-videos-ic3/</link>
      <description>FBI warned of deepfake videos of IC3 leadership directing users to spoofed complaint sites</description>
      <pubDate>Tue, 21 Jul 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/fbi-deepfake-videos-ic3/</guid>
    </item>
    <item>
      <title>US Hospital Finance Software Provider Craneware Reports Data Theft</title>
      <link>https://www.infosecurity-magazine.com/news/craneware-reports-data-theft/</link>
      <description>Craneware, a provider of financial software for US healthcare organizations, has disclosed a cyber incident involving unauthorized access and data theft</description>
      <pubDate>Tue, 21 Jul 2026 09:38:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/craneware-reports-data-theft/</guid>
    </item>
    <item>
      <title>Researchers Uncover North Korean 'ClickFake' Campaign Targeting Web3 Pros</title>
      <link>https://www.infosecurity-magazine.com/news/north-korean-clickfake-campaign/</link>
      <description>In a new campaign, North Korean hacking group Famous Chollima targeted crypto professionals through ClickFix lures to deliver Windows and macOS trojans</description>
      <pubDate>Tue, 21 Jul 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/north-korean-clickfake-campaign/</guid>
    </item>
    <item>
      <title>Cruciferra Crypter Uses Process Ghosting to Evade Detection</title>
      <link>https://www.infosecurity-magazine.com/news/cruciferra-crypter-process-ghosting/</link>
      <description>Cruciferra crypter used process ghosting and 90 custom ciphers to hide payloads for multiple actors</description>
      <pubDate>Mon, 20 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cruciferra-crypter-process-ghosting/</guid>
    </item>
    <item>
      <title>JadePuffer Returns With Ransomware Designed to Wipe AI Models</title>
      <link>https://www.infosecurity-magazine.com/news/jadepuffer-ai-model-ransomware/</link>
      <description>JadePuffer follow-up campaign deployed ENCFORGE locker built to destroy AI model artifacts</description>
      <pubDate>Mon, 20 Jul 2026 14:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/jadepuffer-ai-model-ransomware/</guid>
    </item>
    <item>
      <title>Researchers Build WordPress Exploit Using OpenAI's GPT</title>
      <link>https://www.infosecurity-magazine.com/news/researchers-wordpress-exploit/</link>
      <description>A researcher who discovered a critical vulnerability in WordPress has used OpenAI’s latest model to develop an exploit chain</description>
      <pubDate>Mon, 20 Jul 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/researchers-wordpress-exploit/</guid>
    </item>
    <item>
      <title>New HollowGraph Malware Hijacks Microsoft 365 Calendars for Covert C2 Communications</title>
      <link>https://www.infosecurity-magazine.com/news/hollowgraph-microsoft-calendars/</link>
      <description>Researchers have linked HollowGraph malware to the Cavern framework after discovering its use of Microsoft 365 calendars and Microsoft Graph APIs as a stealthy C2 channel</description>
      <pubDate>Mon, 20 Jul 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hollowgraph-microsoft-calendars/</guid>
    </item>
    <item>
      <title>Police Chiefs Cite TfL Hack in Push for Cybercrime Risk Orders </title>
      <link>https://www.infosecurity-magazine.com/news/police-chiefs-tfl-cybercrime-risk/</link>
      <description>Two chiefs of UK policing agencies said the Transport for London prosecution demonstrates the need for Cybercrime Risk Orders</description>
      <pubDate>Mon, 20 Jul 2026 09:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/police-chiefs-tfl-cybercrime-risk/</guid>
    </item>
    <item>
      <title>Government Agencies Falling Victim to Ransomware Daily, Warns Study</title>
      <link>https://www.infosecurity-magazine.com/news/government-ransomware-daily/</link>
      <description>Government organizations are targeted by attackers who know agencies cannot afford disruption to public services</description>
      <pubDate>Fri, 17 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/government-ransomware-daily/</guid>
    </item>
    <item>
      <title>23andMe Faces New Security Mandates in $18m Data Breach Settlement</title>
      <link>https://www.infosecurity-magazine.com/news/23andme-18m-data-breach-settlement/</link>
      <description>23andMe has agreed to an $18m settlement with 42 US attorneys general over its 2023 data breach, including enhanced data protection requirements</description>
      <pubDate>Fri, 17 Jul 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/23andme-18m-data-breach-settlement/</guid>
    </item>
    <item>
      <title>CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities</title>
      <link>https://www.infosecurity-magazine.com/news/cisa-urgent-patch-fortinet/</link>
      <description>US government agencies have until July 19 to patch two critical Fortinet vulnerabilities</description>
      <pubDate>Fri, 17 Jul 2026 09:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisa-urgent-patch-fortinet/</guid>
    </item>
    <item>
      <title>The Gentlemen Overtakes Qilin as Most Prolific Ransomware Threat</title>
      <link>https://www.infosecurity-magazine.com/news/the-gentlemen-most-prolific/</link>
      <description>Analysis of ransomware incidents by ReliaQuest indicates a shift in the ransomware landscape</description>
      <pubDate>Fri, 17 Jul 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/the-gentlemen-most-prolific/</guid>
    </item>
    <item>
      <title>Phishing Campaign Hides Lua Loader as TrueType Font File</title>
      <link>https://www.infosecurity-magazine.com/news/phishing-lua-loader-truetype-font/</link>
      <description>Global phishing campaign disguised a Lua loader as a font file to deploy RATs and infostealers</description>
      <pubDate>Thu, 16 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/phishing-lua-loader-truetype-font/</guid>
    </item>
    <item>
      <title>Modular macOS Stealer Uses Kill Loops to Force Password Entry</title>
      <link>https://www.infosecurity-magazine.com/news/clicklock-macos-stealer-clickfix/</link>
      <description>New ClickLock macOS stealer locked victims out of their own system until they surrendered a password</description>
      <pubDate>Thu, 16 Jul 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/clicklock-macos-stealer-clickfix/</guid>
    </item>
    <item>
      <title>Single Prompt Enables ChatGPT to Execute Full Cyber-Attack Chain, Researchers Claim</title>
      <link>https://www.infosecurity-magazine.com/news/chatgpt55-to-execute-full/</link>
      <description>Cybersecurity researchers tested Open AI GPT 5.5’s offensive cyber capabilities – and the results showed how effective a frontier LLM can be for hackers</description>
      <pubDate>Thu, 16 Jul 2026 13:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chatgpt55-to-execute-full/</guid>
    </item>
    <item>
      <title>"Selfish Bravado"  Behind TfL Cyber-Attack, Judge Says as Pair Jailed</title>
      <link>https://www.infosecurity-magazine.com/news/selfish-bravado-behind-tfl/</link>
      <description>The perpetrators of the 2024 TfL cyber-attack have been jailed for five and a half years each after pleading guilty to Computer Misuse Act offences</description>
      <pubDate>Thu, 16 Jul 2026 11:51:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/selfish-bravado-behind-tfl/</guid>
    </item>
    <item>
      <title>SANS Warns of AI Governance Gap as Use by Security Teams Surges</title>
      <link>https://www.infosecurity-magazine.com/news/sans-warns-of-ai-governance-gap/</link>
      <description>SANS Institute says governance programs are still nascent even as AI failures and threats grow</description>
      <pubDate>Thu, 16 Jul 2026 09:25:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/sans-warns-of-ai-governance-gap/</guid>
    </item>
    <item>
      <title>US Launches Gold Eagle to Coordinate AI-Driven Vulnerability Management</title>
      <link>https://www.infosecurity-magazine.com/news/us-gold-eagle-ai-vulnerability/</link>
      <description>The White House announced Gold Eagle to help accelerate the discovery, prioritization and patching of flaws found by AI</description>
      <pubDate>Thu, 16 Jul 2026 08:50:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-gold-eagle-ai-vulnerability/</guid>
    </item>
    <item>
      <title>Phishing Campaign Abuses eCards to Deploy RMM Tools</title>
      <link>https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/</link>
      <description>Six-month phishing campaign used seasonal eCard lures to plant legitimate RMM tools on victims</description>
      <pubDate>Wed, 15 Jul 2026 15:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/</guid>
    </item>
    <item>
      <title>Eleven Vulnerable UEFI Shims Enable Secure Boot Bypass</title>
      <link>https://www.infosecurity-magazine.com/news/uefi-shims-secure-boot-bypass/</link>
      <description>Eleven forgotten Microsoft-signed UEFI shims can bypass Secure Boot on almost any machine</description>
      <pubDate>Wed, 15 Jul 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uefi-shims-secure-boot-bypass/</guid>
    </item>
    <item>
      <title>Compromised Logins Surge as the Most Common Entry Point for Ransomware Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/compromised-logins-ransomware-entry/</link>
      <description>Research of incidents by Sophos finds that phishing, brute force attacks and other identity-based threats have surpassed software vulnerabilities as means of delivering ransomware</description>
      <pubDate>Wed, 15 Jul 2026 12:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/compromised-logins-ransomware-entry/</guid>
    </item>
    <item>
      <title>Progress Restores ShareFile Storage Zones Access After Security Warning</title>
      <link>https://www.infosecurity-magazine.com/news/progress-restores-sharefile/</link>
      <description>Progress has restored access to its ShareFile Storage Zones Controller after a four-day suspension triggered by a credible external security threat</description>
      <pubDate>Wed, 15 Jul 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/progress-restores-sharefile/</guid>
    </item>
    <item>
      <title>Microsoft Patches 570 CVEs in Record Patch Tuesday </title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-570-cves-patch-tuesday/</link>
      <description>Microsoft released fixes for a record 570 CVEs in its July Patch Tuesday update, as experts warn AI is dramatically accelerating vulnerability discovery and increasing patch volumes</description>
      <pubDate>Wed, 15 Jul 2026 09:20:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-570-cves-patch-tuesday/</guid>
    </item>
    <item>
      <title>Government Updates UK’s National Risk Register with Cyber Warnings</title>
      <link>https://www.infosecurity-magazine.com/news/uk-national-risk-register-cyber/</link>
      <description>The UK government is warning of the potential impact of catastrophic cyber-attacks</description>
      <pubDate>Wed, 15 Jul 2026 08:48:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uk-national-risk-register-cyber/</guid>
    </item>
    <item>
      <title>US: Pentagon Suspends CMMC Phase II Requirements for Defense Contractors</title>
      <link>https://www.infosecurity-magazine.com/news/us-pentagon-suspends-cmmc-2/</link>
      <description>The US Department of Defense announced the immediate suspension of the CMMC Phase II requirements until further review</description>
      <pubDate>Tue, 14 Jul 2026 15:28:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/us-pentagon-suspends-cmmc-2/</guid>
    </item>
    <item>
      <title>New MacOS Malware Exploits Legitimate Developer ID to Pose as Apple Crash Reporter </title>
      <link>https://www.infosecurity-magazine.com/news/macos-malware-apple-crash-reporter/</link>
      <description>Researchers at Jamf Threat Labs detail CrashStealer, which steals passwords, cryptocurrency wallets and more</description>
      <pubDate>Tue, 14 Jul 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/macos-malware-apple-crash-reporter/</guid>
    </item>
    <item>
      <title>Lidl Notifies Customers of Third-Party Data Breach</title>
      <link>https://www.infosecurity-magazine.com/news/lidl-notifies-customers-of/</link>
      <description>Supermarket giant Lidl has revealed details of a supplier breach impacting customer data</description>
      <pubDate>Tue, 14 Jul 2026 09:43:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/lidl-notifies-customers-of/</guid>
    </item>
    <item>
      <title>Five Charged in “Russian Coms” Fraud Platform Case</title>
      <link>https://www.infosecurity-magazine.com/news/five-charged-in-russian-coms-fraud/</link>
      <description>Five UK residents have been charged in relation to supplying Russian Coms fraud devices and apps</description>
      <pubDate>Tue, 14 Jul 2026 08:21:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/five-charged-in-russian-coms-fraud/</guid>
    </item>
    <item>
      <title>Open Directory Exposes Three Evilginx Phishing Operators</title>
      <link>https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/</link>
      <description>Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA</description>
      <pubDate>Mon, 13 Jul 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/</guid>
    </item>
    <item>
      <title>Pakistani Police Systems Hit by Chinese and Indian Espionage</title>
      <link>https://www.infosecurity-magazine.com/news/chinese-indian-espionage-pakistani/</link>
      <description>Chinese and Indian spies converged on the same Balochistan police force, SentinelLabs found</description>
      <pubDate>Mon, 13 Jul 2026 14:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/chinese-indian-espionage-pakistani/</guid>
    </item>
    <item>
      <title>Novel OAuth Client ID Spoofing Technique Targets Cloud Environments</title>
      <link>https://www.infosecurity-magazine.com/news/novel-spoofing-technique-targets/</link>
      <description>New research reveals cyber-attackers can spoof OAuth Client IDs in Microsoft Entra ID, creating a stealthy path into cloud environments</description>
      <pubDate>Mon, 13 Jul 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/novel-spoofing-technique-targets/</guid>
    </item>
    <item>
      <title>Progress Software Warns of "External Security Threat" to ShareFile</title>
      <link>https://www.infosecurity-magazine.com/news/progress-warns-security-threat/</link>
      <description>Progress Software, the provider of the popular file-sharing and data storage solutions, has urged customers to shut down the server hosting their Storage Zone Controller</description>
      <pubDate>Mon, 13 Jul 2026 12:05:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/progress-warns-security-threat/</guid>
    </item>
    <item>
      <title>Russian State Hackers Target Vulnerable Routers Worldwide, Joint Advisory Warns</title>
      <link>https://www.infosecurity-magazine.com/news/russian-state-hackers-vulnerable/</link>
      <description>Cybersecurity agencies from 12 countries have warned that Russian state-backed hackers are actively targeting vulnerable routers using weak SNMP credentials</description>
      <pubDate>Mon, 13 Jul 2026 10:40:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/russian-state-hackers-vulnerable/</guid>
    </item>
    <item>
      <title>Hacker Extradited from Ukraine Pleads Guilty to Ryuk Ransomware Charges</title>
      <link>https://www.infosecurity-magazine.com/news/hacker-extradited-ukraine-guilty/</link>
      <description>An Armenian man has pleaded guilty to his role in the infamous Ryuk ransomware operation</description>
      <pubDate>Mon, 13 Jul 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/hacker-extradited-ukraine-guilty/</guid>
    </item>
    <item>
      <title>Australian Cyber Agency Warns of Global CMS Exploitation Campaign</title>
      <link>https://www.infosecurity-magazine.com/news/australia-warns-global-cms/</link>
      <description>Australian Cyber Security Centre warns CMS users of mass scanning and exploitation campaign</description>
      <pubDate>Mon, 13 Jul 2026 08:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/australia-warns-global-cms/</guid>
    </item>
    <item>
      <title>CISA Details Incident Response to Exposed AWS GovCloud Keys</title>
      <link>https://www.infosecurity-magazine.com/news/cisa-incident-response-exposed-aws/</link>
      <description>CISA reveals how it responded after sensitive AWS GovCloud credentials and internal data were exposed in a public GitHub repository</description>
      <pubDate>Fri, 10 Jul 2026 16:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisa-incident-response-exposed-aws/</guid>
    </item>
    <item>
      <title>Microsoft Warns New 'GigaWiper' Malware Combines Espionage and Destructive Capabilities</title>
      <link>https://www.infosecurity-magazine.com/news/new-gigawiper-espionage-destructive/</link>
      <description>A new multi-purpose backdoor allows cyber threat actors to conduct both quiet espionage activity and destructive wiping operations</description>
      <pubDate>Fri, 10 Jul 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/new-gigawiper-espionage-destructive/</guid>
    </item>
    <item>
      <title>Anthropic and OpenAI Security Tools Could Fuel Cyber-Attacks, Researchers Warn</title>
      <link>https://www.infosecurity-magazine.com/news/anthropic-openai-report-exploit/</link>
      <description>Researchers at the AI Now Institute developed a proof-of-concept exploit showing common AI tools used for security could backfire</description>
      <pubDate>Fri, 10 Jul 2026 13:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/anthropic-openai-report-exploit/</guid>
    </item>
    <item>
      <title>New Ransomware Exploits Malicious Driver to Remove Cybersecurity Protections</title>
      <link>https://www.infosecurity-magazine.com/news/ransomware-removes-cybersecurity/</link>
      <description>GodDamn ransomware uses remote desktop application to secretly move around networks and drop the malicious PoisonX kernel driver</description>
      <pubDate>Fri, 10 Jul 2026 13:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ransomware-removes-cybersecurity/</guid>
    </item>
    <item>
      <title>Microsoft Warns of Increase in Number of Security Updates </title>
      <link>https://www.infosecurity-magazine.com/news/microsoft-increase-number-security/</link>
      <description>Microsoft has said the volume of Windows security updates is set to grow as it uses AI to find new bugs</description>
      <pubDate>Fri, 10 Jul 2026 09:33:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/microsoft-increase-number-security/</guid>
    </item>
    <item>
      <title>NHS Warns Staff Over Unauthorized Access to Patient Data </title>
      <link>https://www.infosecurity-magazine.com/news/nhs-warns-staff-unauthorized/</link>
      <description>NHS tells staff they could face prison for “inappropriate” access to patients’ medical records</description>
      <pubDate>Fri, 10 Jul 2026 09:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/nhs-warns-staff-unauthorized/</guid>
    </item>
    <item>
      <title>Vibe-Coded Malware Caught in Active Directory Attack</title>
      <link>https://www.infosecurity-magazine.com/news/vibe-coded-malware-ai-powershell/</link>
      <description>Huntress found a threat actor using vibe-coded PowerShell to map an Active Directory network</description>
      <pubDate>Thu, 09 Jul 2026 14:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/vibe-coded-malware-ai-powershell/</guid>
    </item>
    <item>
      <title>75% CISOs Fear Executives Don’t Understand Cybersecurity Risks Employees Face</title>
      <link>https://www.infosecurity-magazine.com/news/cisos-fear-execs-dont-understand/</link>
      <description>Survey of cybersecurity leaders by MetaCompliance finds that many feel boards are uninterested in ever-evolving cyber risks</description>
      <pubDate>Thu, 09 Jul 2026 12:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cisos-fear-execs-dont-understand/</guid>
    </item>
    <item>
      <title>Chinese-Funded Interpol Cybercrime Crackdown Leads to 5,800 Arrests</title>
      <link>https://www.infosecurity-magazine.com/news/china-interpol-cybercrime-crackdown/</link>
      <description>Operation First Light 2026, coordinated by Interpol and funded by the Chinese government, has led to 5,811 arrests</description>
      <pubDate>Thu, 09 Jul 2026 11:45:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/china-interpol-cybercrime-crackdown/</guid>
    </item>
    <item>
      <title>GhostApproval Flaw Hits Six Major AI Coding Assistants</title>
      <link>https://www.infosecurity-magazine.com/news/ghostapproval-flaw-ai-coding/</link>
      <description>Wiz discovered GhostApproval, a symlink flaw in six major AI coding assistants that bypasses approval</description>
      <pubDate>Thu, 09 Jul 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ghostapproval-flaw-ai-coding/</guid>
    </item>
    <item>
      <title>New AI Security Charter Backed by Over 70 Cyber Firms</title>
      <link>https://www.infosecurity-magazine.com/news/crest-ai-security-charter-cyber/</link>
      <description>Over 70 cybersecurity organizations have signed the CREST AI Charter detailing responsible use of AI for security</description>
      <pubDate>Thu, 09 Jul 2026 09:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/crest-ai-security-charter-cyber/</guid>
    </item>
    <item>
      <title>Cybercriminals Plant Malicious AI Agents in Open Source Tool Repositories</title>
      <link>https://www.infosecurity-magazine.com/news/cybercriminals-plant-ai-agents/</link>
      <description>Cybersecurity researchers at ESET identify big rise in suspicious and malicious toolsets which put users at risk from cyber-attacks</description>
      <pubDate>Thu, 09 Jul 2026 07:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/cybercriminals-plant-ai-agents/</guid>
    </item>
    <item>
      <title>RedWing Android Spyware Sold as a Service on Telegram</title>
      <link>https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/</link>
      <description>Zimperium found RedWing, an Android spyware sold as a service via Telegram to target banking apps</description>
      <pubDate>Wed, 08 Jul 2026 15:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/</guid>
    </item>
    <item>
      <title>China-Linked APT Expands Proxy Network With New Malware</title>
      <link>https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/</link>
      <description>Cisco Talos said China-linked APT UAT-7810 is growing its proxy relay network with new malware</description>
      <pubDate>Wed, 08 Jul 2026 14:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/</guid>
    </item>
    <item>
      <title>Threat Actors Uses Agentic AI to Rapidly Compromise Cloud Target</title>
      <link>https://www.infosecurity-magazine.com/news/threat-actor-agentic-ai-cloud/</link>
      <description>Sygnia report details how agentic AI accelerated weeks-long attack to just 72 hours</description>
      <pubDate>Wed, 08 Jul 2026 12:30:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/threat-actor-agentic-ai-cloud/</guid>
    </item>
    <item>
      <title>New Malicious Campaign Delivers Vidar Infostealer and Monero Crypto Miner</title>
      <link>https://www.infosecurity-magazine.com/news/new-campaign-vidar-stealer-monero/</link>
      <description>Cyber threat actors are infecting victims with the Vidar stealer and the XMRig cryptocurrency miner in a new malicious campaign</description>
      <pubDate>Wed, 08 Jul 2026 11:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/new-campaign-vidar-stealer-monero/</guid>
    </item>
    <item>
      <title>NCSC Touts National Scale, AI-Powered “Cyber Shield” for Defense</title>
      <link>https://www.infosecurity-magazine.com/news/ncsc-national-cyber-sheild-ai/</link>
      <description>The National Cyber Security Centre wants to work with AI partners to build a new “Cyber Shield” to defend the UK</description>
      <pubDate>Wed, 08 Jul 2026 08:10:00 GMT</pubDate>
      <guid isPermaLink="true">https://www.infosecurity-magazine.com/news/ncsc-national-cyber-sheild-ai/</guid>
    </item>
  </channel>
</rss>