Information Security Magazine

LogoKit now builds per-victim phishing pages using live screenshots of the target's real website

TA488 returned with OWA half-click exploit deploying OWAReaper implant that survived re-imaging

IBM Cost of a Data Breach Report warns that the global average cost of a data breach has reached a record high of $4.99m – and AI-backed attacks have played a role

For now, the use of AI benefits vulnerability research more than vulnerability exploitation, a VulnCheck researcher said

AI is dramatically reducing the barriers to entry for scam phone farm operators, Human Security warns

The National Cyber Security Centre has released a detailed framework to assist with incident response and recovery

Three CVEs in Hugging Face diffusers let a malicious model repo run code on any machine that loads it

AI-assisted research uncovered Linux kernel use-after-free allowing root escalation

Analysis of real-life incident response cases by Cisco Talos warns that phishing remains a powerful method of initial compromise

Microsoft has launched a new agentic security system for cyber defenders as well as its first cyber-focused AI model

Coca Cola claims data was stolen from its Fairlife business after a recent ransomware attack

NVIDIA has launched a new Open Secure AI Alliance to build an “open defense stack for agents”

CREST’s new AI standards are optional add-on requirements for cybersecurity service providers wishing to demonstrate responsible AI usage

Impersonating well-known cryptocurrency and trading sites, SourTrade has developed a novel technique to drop infostealers to victims

Halcyon’s latest quarterly ransomware report showed that while ransomware attacks are declining, obfuscation techniques are getting harder to fight against

Researchers at ReliaQuest warned of widespread DNS poisoning attacks targeting the hospitality sector as part of a cyber espionage campaign

OpenAI’s chatbot tool ChatGPT ranked among the top 10 most impersonated brands in phishing attacks for the first time

Comparitech’s analysis of incidents in the first half of 2026 finds that the emergence of The Gentlemen ransomware has resulted in surge in attacks against higher education

International agencies issue joint alert over state-backed campaign exploiting a critical vulnerability in the Zimbra Collaboration Suite

CoreView research finds that security leadership is concerned about AI Assistant exposing confidential data