Infosecurity Magazine
196 briefings written from Infosecurity Magazine's reporting, newest first. Each is a plain-language summary written here for Australian business, with a link to the original.
- Most Severe Security Flaws Never Appear in Vendor Advisories, New Testing Suggests
- Bitter Espionage Group Hides in Trusted Windows Tools While Deploying New PapRAT Malware
- FBI Blames North Korea for Multi-Billion Dollar Binance Theft
- Chainalysis Confirms Breach Involving AI-Driven Attack Techniques
- Free RAID-AI Framework Helps Organisations Check Their AI Systems Against Ransomware
- Binance Confirms $6.3bn Crypto Theft, the Largest Cyber Heist on Record
- New NIK C2 Malware Can Run Up AI Bills on Your Stolen OpenAI Key
- CREST Says Financial Cyber Resilience Depends on the Whole Ecosystem, Not Just Individual Firms
- Online Scams Double and Overtake Phishing for the First Time, Akamai Reports
- UK Police Reprimanded After Abuse Victim's Home Address Shared With Their Abuser
- NIST Sets Out Plan to Help Organisations Prepare for Post-Quantum Encryption
- MR ROBOT Malware Service Lets Criminals Rent Custom Banking Trojans Aimed at Indian Customers
- Japanese Hosting Giant Tells Customers to Unplug PCs After Breach and Ransom Threat
- AI Is Changing the CISO Role: From Security Gatekeeper to Business-Risk Translator
- Engie Warns Customers After Third-Party Marketing Tool Breach Exposes Personal Details
- Researchers Extracted OpenAI's Hidden AI Reasoning Through a Context Compression Flaw
- Online Store Malware Learns to Hide From Security Scanners, Infecting 953 Shops
- ISC2 Launches Coalition to Help Employers Define Cyber and AI Security Jobs
- Danish University Breach Exposes Data on 525,000 People After Test Environment Is Hacked
- ISC2 Plans First AI Security Certification for Early 2027
- UK Inspectors Warn Police and Fire Services: Treat Cybersecurity as a Leadership Priority
- US Cyber Agency Shifts to 'Aggressive, Anticipatory' Defence of Critical Infrastructure
- Gheist Campaign Plants Secret-Stealing Workflows Across 13,500 GitHub Branches Using Stolen Tokens
- Public Root Exploit for Linux Kernel Flaw Lands Before a Fix Is Available
- Microsoft Releases Emergency .NET Updates to Fix Critical Memory Flaw
- New Maritime Vulnerability Database Aims to Cut Through the Noise for Shipping Firms
- PHP Warns of Another Remote Code Execution Flaw, but Says Few Systems Are at Risk
- Capcom Confirms CAPCOM ID Breach: Player Data Exposed and 196 Accounts Had Passwords Changed
- Token-Spraying Campaign Hits Microsoft 365 Accounts, Bypassing Passwords and MFA
- Tech Supplier Breaches Are Driving Most Third-Party Data Breach Victims, Kroll Finds
- EU Opens Investigation into Booking.com Over Phishing and Fake Listing Risks
- Iranian Spy Group 'Prince of Persia' Caught Running Attack Servers from US Hosting
- AI-Driven Attack on ConnectWise Shows How Fast Supply Chain Compromises Can Spread
- PHP2Shell: Attackers Tried to Exploit Critical PHP Flaws Days Before They Were Made Public
- Cloud Security Maturity Gap: Most Firms Are in the Cloud, but Few Have Mastered Protecting It
- New Phishing Service Uses AI to Write Convincing Lures and Hide From Security Scanners
- Researchers Uncover Autonomous AI Attack Agent That Hijacks Other People's AI Models
- Ransomware Attacks Jump 50% as Rival Gangs Compete for Top Spot
- SafePay Ransomware Has Hit 600 Critical Infrastructure Targets, Including Australia
- PHP Flaws Leaked Before Patches: What Website Owners Need to Know
- A 12-Year-Old Test Account and 'Password1' Led to a Ransomware Attack on Children's Data
- Big Business Is Hiring AI Security Chiefs, but Who Is Accountable for AI Is Still Unclear
- Researchers Say Popular AI Coding Tool OpenCode Was Quietly Patched for a Critical Flaw
- AI Agents Are Racing Ahead of the Oversight Meant to Keep Them Safe
- Siemens Warns Attackers Are Abusing Software Center Flaw in Fake Verification Scam
- Half of Exploited Software Flaws Still Unpatched After Three Months, Moody's Warns
- Conduent to Pay $80m Over 2024 Breach That Exposed Data of 62 Million People
- ConnectWise Takes Cloud Services Offline After Attackers Access Backup App Identities
- US Cyber Job Ads Hit a Four Year Low, but AI Security Roles Surge
- Ransomware Gangs Now Targeting Staff Safety to Force Payment
- Suspected China-Linked Group Exploited Critical BeyondTrust Flaw Before Disclosure, Google Warns
- Supermarket Fridge Controllers in France Vanish From the Internet After Cyber-Attack
- New Aoki Infostealer Now Hunts for AI Coding Assistant Logins
- Two High-Risk Flaws in Popular AI Gateway LiteLLM Could Hand Attackers Full Control
- Microsoft Disrupts Yam Store, the Marketplace Behind a Billion Phishing Messages
- Unapproved Platform, Real Consequences: UK Regulator Reprimands London Police Over Third-Party Data Use
- ROMULUS Platform Turns ClickFix Tricks into a Reusable Malware Delivery Service
- Passkey Use Is Doubling, but Most Logins Still Rely on Passwords
- French Supermarket Cyber-Attack Widens to More Refrigeration Brands
- Big Companies Are Twice as Likely to Knowingly Leave Serious Security Flaws Unpatched
- European Retailers Hit by Cyber Incidents, With Systems Taken Offline
- Most Security Teams Are Holding Back on AI Agents for Cyber Defence
- UK Government Turns Frontier AI on Its Own Systems to Find Flaws Before Attackers Do
- One in Five Security Leaders Dodge Patch Tuesday as Update Workloads and Stress Climb
- Leaked Files Reveal How Luna Moth Ransomware Group Runs Like a Business
- Cyber-Attack on Supermarket Refrigeration Systems Puts French Food Stock at Risk
- FBI Arrests Canadian Cyber Executive as Net Tightens on ShinyHunters
- Ransomware Gangs Still Exploiting Palo Alto VPN Flaw Months After a Fix Was Released
- Supplier Malware Infection Puts Data of 8.7 Million Karaoke Customers at Risk
- Wikimedia Says Rogue AI Agents Strained Its Platforms, Raising Alarm for Website Owners
- Ransomware Hits Record High in Q3 2026, With Finance, Tech, Education and Healthcare Hardest Hit
- Allied Governments Warn of Sanctioned Chinese Firm Linked to Global Hacking Operations
- AI Is Spreading Through Workplaces Faster Than the Skills to Govern It
- Ten Major AI Firms Commit to Stronger Data Protection After UK Regulator Pressure
- ASOS Breach Started With a Fake Trusted Contact and a Stolen Staff Login
- Russia-Aligned Hackers Spent Two Years Upgrading Their MATCHBOIL Malware
- AI Tools Helped a Suspected Chinese Hacker Breach South Korean Financial Firms
- Critical Atlassian Data Center Flaw Under Active Attack, Exposing Files and Credentials
- Europol and US Watchdog Urge Organisations to Prepare for the Quantum Threat to Encryption
- Industry Coalition Presses US Agency to Set Mandatory Security Rules for Building and Facility Technology
- Phishing Emails Now Target Your AI Assistant as Well as You
- ASOS Hack Claim: Telegram Account Behind Rogue Alert Previously Used for Gaming Trades
- Even Cybersecurity Professionals Struggle to Move Beyond Passwords, Study Finds
- Pwn2Own Ireland Uncovers 32 Zero-Day Flaws in a Single Day, Including in AI Tools
- Nikkei Hit by Two Cloud Account Compromises, With 9000 Phishing Emails Sent from a Staff Account
- Red Hat's Lightwell Project Fixes More Than 400 Flaws in Core Java Libraries
- Most Medical Devices Cannot Support Quantum-Safe Encryption, Forescout Finds
- ASOS Customers Get Odd 'Hacked' Alert as Snowflake Compromise Is Claimed
- UK Police Push Passkeys as Account Takeover Losses Jump More Than Fivefold
- Ransomware Affiliate Goes Rogue, Running a Private Extortion Site and Keeping the Proceeds
- ClingSTUN Malware Hijacks Unpatched Routers and Cameras to Run Hidden Proxy Networks
- Linux Backdoors Hide as Email Traffic on Telecom and Network Appliances
- Citrix NetScaler Zero Day Under Targeted Attack, Putting Business Availability at Risk
- Google Pauses Open-Source Bug Bounty as Automated Reports Flood the Inbox
- UK Schools Are Bouncing Back Faster From Cyber Attacks, But Leadership Gaps Remain
- Software Supplier Breach Exposes School Staff Data, a Reminder of Third-Party Risk
- Microsoft Warns AI Is Letting Hackers Strike in Minutes, Not Days
- Dutch Cybersecurity Non-Profit Hit by AI-Driven Attack Exploiting Zammad Zero-Days
- China-Linked Hackers Impersonate AI Policy Experts to Steal Microsoft 365 Logins
- Fake Zoom Installer Delivers Stealthy New macOS Backdoor
- AI Security Gaps Are Business Leaders' Biggest Cyber Worry, Survey Finds
- MI5 Warns UK Academics Unwittingly Fuelled Chinese Espionage
- Google Research: AI-Discovered Bugs Twice as Likely to Enable Remote Takeover
- White House Secures Voluntary AI Safety Pledge from Six Tech Giants
- AI Is Giving SOC Analysts More Time, But Is It Costing Them Skills?
- Apple Patches iOS Zero-Day Used in Targeted Attacks
- Two Flaws in Amazon Bedrock AgentCore SDK Could Have Leaked AWS Credentials
- Microsoft Flags NeedyMantis: Stealthy Malware Giving Attackers Long-Term Network Access
- Tokyo Rail and Transport Operators Hit by Cyber Attacks Over Weekend
- Kiteworks Lifts Emergency Shutdown After Government Tip-Off on Possible Attack
- Bitget Resumes Bitcoin Withdrawals After $387.5m Wallet Breach
- NVIDIA Unveils Platform to Rein In Rogue AI Agents
- Deepfake Scams Are Hitting Businesses Hard, New Report Finds
- AI Integration Tool 'MCP' Found Riddled with Governance Blind Spots
- Citrix Fixes Critical Zero-Days Already Being Exploited: Patch Now
- Zero-Click Flaw in Salesforce's AI Agent Let Attackers Silently Steal CRM Data
- CISA Releases Election Security Plan Ahead of 2026 US Midterms
- New Android Trojan 'RemControl' Hijacks Devices to Steal Banking Details
- Researchers Spot AliExpress Phishing Domains Weeks Before They Went Live
- New Ransomware Gang 'n0n' Threatens to Destroy Backups If Ransoms Aren't Paid
- CISA Pushes for a 'Quality Era' in Vulnerability Reporting as CVE Volumes Surge
- UK Government Ditches 'Mandate and Hope' Cybersecurity Model After Damning Audit
- Most Organisations Are Losing Track of Who Can Access Their Microsoft 365 Data
- Threat Hunters' Biggest Enemy Is Now Bad Data, Not Lack of Skills
- Study Finds Hundreds of Leaked GitHub App Keys Still Work, Some With Admin Access
- New Windows Botnet 'x47.c' Can Drain Company AI Credits and Steal Passwords
- Ransomware Attacks Hit Record Levels in August 2026
- ShinyHunters Claims FBI Breach Via PeopleSoft Zero-Day, Highlighting ERP Risk for All Businesses
- EU Cyber Defence Undermined by Poor Information Sharing, Auditors Find
- Businesses Rush to Adopt AI Security Tools, But Few Have a Plan for AI-Related Incidents
- Poor Network Segmentation Is Quietly Widening the Attack Surface for Businesses
- AI Fuels Sharp Rise in Bot Attacks and API Threats, New Report Warns
- Nearly Half of CISOs Report Deepfake Attacks: Time to Update Your Response Plan
- Google Fined €403m for Mishandling Users' Location Data
- New 'Exvicy' ClickFix Toolkit Spreads Malware Through Hacked WordPress Sites
- npm Supply Chain Attack Exploits 'Trusted Publishing' to Smuggle Hidden Malware Loader
- Cybercriminal Infighting: ShinyHunters Claims to Have Hacked Rival Ransomware Gang Clop
- Gyazo Breach Exposes 490 Million Metadata Records, Raising Screenshot Privacy Fears
- Scammers Exploit Revolut Data Breach with Fake Identity-Check Texts
- New Settra Ransomware Hits Retail and Manufacturing Firms
- CISA Rolls Out Upgraded Vulnerability Reporting Platform: VINCE-NT
- Manufacturing Remains Ransomware's Top Target as Attacks Surge Worldwide
- CISA Tells Critical Infrastructure to Set Traps for Hackers Already Inside the Network
- New 'RatHat' Android Malware Uses AI to Steal Banking Details
- UK's Cyber Essentials Scheme Grows, But Most Small Businesses Still Aren't Covered
- Cisco Warns Critical ISE Flaw Is Being Actively Exploited
- Unpatched WooCommerce Plugin Flaw Still Letting Attackers Plant Webshells on WordPress Sites
- New US Guidance Targets Weak Links in Cloud Login Tokens
- Cyber-Attacks Now Cost Businesses an Average of $52,000 Each
- TP-Link Camera Flaws Could Let Attackers Watch Your Footage
- New UK Testing Program Aims to Show Which Cybersecurity Tools Actually Work
- UK, US and Dutch Agencies Warn of Iranian Spyware Targeting Regime Critics
- Fake Job Candidates Are Slipping Through Hiring Checks, Report Finds
- Ransomware Recovery Plans Fail When It Matters Most, Report Finds
- Cyber Budgets Stall, But AI Spending Surges as Top Priority
- Microsoft Issues Emergency Fix After Patch Tuesday Breaks Remote Desktop Services
- Malicious Twitch Browser Extension Steals 31,000 Users' Account Tokens
- Human Hacker Beats AI-Speed Attacks: Marimo Notebook Flaw Exploited in Eight Seconds
- Cyber Warfare Spending Set to Nearly Double by 2031, Report Finds
- Revolut Breach Shows How Fake Government Requests Can Trick Even Fintechs
- Critical GitLab Flaw Under Active Attack: Patch Now
- AI Agent Swarm Linked to RubyGems Attack, Raising Alarm for Software Supply Chains
- Phishing Campaign Exploits Microsoft 365 Direct Send Feature, Mimics Business Hours
- AI Rollouts Outpacing Basic Permission Checks, Study Finds
- CISA Refreshes Insider Threat Guide with New Advice on Remote Work and AI Risks
- New Android Malware 'MantaxOtax' Locks Phones While Stealing Personal Data
- FBI Unveils First-Ever Cyber Strategy Focused on Disrupting Attackers, Not Just Prosecuting Them
- Anthropic Discloses Fourth Case of AI Model Breaching Outside Systems
- US Sanctions Chinese Marketplace Behind Billions in Scam Center Fraud
- Gigabud Banking Trojan Uses Android's Work Profile Trick to Dodge Fraud Alerts
- ClickFix Scam Evolves: Fake Crypto 'Exploits' Trick Users into Hijacking Their Own Browsers
- Machine Identities, Not Phishing, Now the Top Way Hackers Break In
- Microsoft's September Patch Tuesday Sets Record With 974 Security Fixes
- SAP Rushes Fix for Maximum-Severity 'Overpass' Flaw Affecting 10,000+ Systems
- France Launches Rapid-Response Cyber Unit for Government Agencies
- Grindr Agrees to £26m Settlement Over Historical Data Sharing Allegations
- Google Warns AI Coding Tools Are Now a Top Target for Cybercriminals
- New Android Malware THost9 Uses Hidden Loader and Worm to Spread via Exposed Debug Services
- New Phishing Service 'BigBear 2.0' Bypasses MFA, Steals Over 5,000 Microsoft Logins
- Trezor Data Breach Grows Nearly Fivefold to 81,000 Affected Customers
- Shadow AI: The Hidden Risk Lurking in Your Business Tools
- N-able Patches Critical Flaw in N-central Remote Management Platform
- Berlin Government Data Leaked After Refusing €2 Million Ransomware Demand
- North Korea's Lazarus Group Splits Into Six Specialised Hacking Units
- Legal Fallout Grows After Alleged Breach of 153 Million Driver's Licenses
- Zero-Day Flaw Found in CrowdStrike Falcon Sensor Allows Privilege Escalation
- OpenAI Commits $1bn to Give Critical Infrastructure Free Access to AI Cyber Defence Tools
- G7 Calls for Urgent Action on Quantum-Safe Encryption
- Pegasus Spyware Used Zero-Click iPhone Exploit Against Serbian Activist
- Phishing-as-a-Service Operation Rebounds Days After Global Takedown
- CREST Launches AI-Enabled Pentesting Accreditation, Certifies First 10 Providers
- Thomson Reuters Court Software Breach Exposes Sensitive Records Across US and Canada
- FBI Investigates Alleged Breach of 153 Million Driver's Licenses Linked to ID Verification Firm
- Decades-Old Sality Botnet Dismantled in Global Law Enforcement Operation
- Russian National Extradited Over Malware Scheme Targeting Freelance Platform Users
- Chinese-Speaking Hackers Hijack Brazilian Government Sites for Gambling SEO Scam