Phil Muncaster

FCA streamlines and overhauls incident reporting. This will be welcomed by most Finserv CISOs: infosecurity-magazine.com/news/fca-updat…

Serious ransomware campaign by Interlock. Worth a read of AWS advice to patch the zero day Cisco flaw and stay safe: infosecurity-magazine.com/news/interlock…

Is Moltbook a vibe-coded car crash? Well, @wiz_io uncovered some major security issues (all now fixed) stemming from a single misconfiguration: infosecurity-magazine.com/news/moltbook-…

Chinese-language money launderers now driving an $82bn industry, says @chainalysis The true value will be much higher. infosecurity-magazine.com/news/chinese-m…

Malicious open source packages topped 450,000 last year, according to @sonatype: infosecurity-magazine.com/news/454000-ma…

ICE List doxxing site taken out by DDoS at the 11th hour...It's still available via a popular web archiving platform though: infosecurity-magazine.com/news/ice-agent…

The Truman Show operation, as described by @CheckPointSW, is investment fraud on a whole new scale, powered by AI. And with implications for enterprise CISOs: infosecurity-magazine.com/news/ai-truman…

London ransomware attacks incoming! infosecurity-magazine.com/news/london-co…

Open source is a dangerous place to be right now. Shai-Hulud "The Second Coming" hits npm: infosecurity-magazine.com/news/new-shaih…

CISO compensation is on the up in North America. But budget growth is stalling infosecurity-magazine.com/news/ciso-pay-…

New npm worm "IndonesianFoods" has open source security experts concerned: infosecurity-magazine.com/news/indonesia…

A long time coming, but the Cyber Security and Resilience Bill is finally here! infosecurity-magazine.com/news/governmen…

Some great work by @TenableSecurity to uncover these prompt injection and exfiltration flows in Gemini: infosecurity-magazine.com/news/gemini-tr…

European airport snafu looks like poor cyber hygiene and worse incident response. Latest here: infosecurity-magazine.com/news/nca-arres…

Turns out the Salesloft Drift campaign began with a GitHub compromise: infosecurity-magazine.com/news/salesloft…

Red team, agentic-AI tool hijacked by threat actors to accelerate complex exploitation, says @CheckPointSW. If this is a sign of things to come, we'd better start marshalling a response: infosecurity-magazine.com/news/threat-ac…

Small sample size, but the commercial red team entities the govt recently polled seemed pretty dismissive of AI use in cyber: infosecurity-magazine.com/news/uk-red-te…

Eight countries still haven't tranposed NIS2 into law! Will the commission make an example of them? infosecurity-magazine.com/news/eight-cou…

Are new Companies House director ID checks built on sand? infosecurity-magazine.com/news/experts-a…

Some sort of good news for @SonicWall customers. It says a zero-day exploit is unlikely. But much of the firm's previous advice still applies though, especially upgrading your firmware: infosecurity-magazine.com/news/sonicwall…