New government grants for AI safety research are designed to fund work into deepfakes and other cyber risks This article has been indexed from www.infosecurity-magazine.com Read the original article: UK Government Launches AI Safety Scheme to Tackle Deepfakes
Category: www.infosecurity-magazine.com
New ConfusedPilot Attack Targets AI Systems with Data Poisoning
Researchers have discovered a new cyber-attack method called ConfusedPilot that can manipulate AI-generated responses by injecting malicious content into documents referenced by AI systems This article has been indexed from www.infosecurity-magazine.com Read the original article: New ConfusedPilot Attack Targets AI…
Darknet Activity Increases Ahead of 2024 Presidential Vote
Cyber threats surge ahead of the 2024 election, including phishing, ransomware and Darknet activity This article has been indexed from www.infosecurity-magazine.com Read the original article: Darknet Activity Increases Ahead of 2024 Presidential Vote
UK: NCSC Offers Education Organizations Free Cyber Services
The service, developed in collaboration with Cloudflare and Accenture, is available for UK schools and most education service providers This article has been indexed from www.infosecurity-magazine.com Read the original article: UK: NCSC Offers Education Organizations Free Cyber Services
Most Organizations Unprepared for Post-Quantum Threat
Most organizations are not prepared for the post-quantum threat, despite the recent publication of NIST’s first three finalized post-quantum encryption standards This article has been indexed from www.infosecurity-magazine.com Read the original article: Most Organizations Unprepared for Post-Quantum Threat
Microsoft: Nation-States Team Up with Cybercriminals for Attacks
Microsoft has observed nation states ramping up cooperation with cybercriminals to conduct operations in the past year This article has been indexed from www.infosecurity-magazine.com Read the original article: Microsoft: Nation-States Team Up with Cybercriminals for Attacks
Cerberus Android Banking Trojan Deployed in New Multi-Stage Malicious Campaign
The sophisticate campaign, ErrorFather, employs keylogging, virtual networks and a domain generation algorithm to target Android users This article has been indexed from www.infosecurity-magazine.com Read the original article: Cerberus Android Banking Trojan Deployed in New Multi-Stage Malicious Campaign
Insurer Aims to “Clawback” BEC Losses After £1.4m Success
Coalition’s new service aims to mitigate the impact of growing UK corporate fraud losses This article has been indexed from www.infosecurity-magazine.com Read the original article: Insurer Aims to “Clawback” BEC Losses After £1.4m Success
Eight Million Users Install 200+ Malicious Apps from Google Play
Zscaler has found more than 200 malicious apps on Google Play with over eight million installs This article has been indexed from www.infosecurity-magazine.com Read the original article: Eight Million Users Install 200+ Malicious Apps from Google Play
Telekopye Scammers Target Booking.com and Airbnb Users
Online scammers are targeting Booking.com and Airbnb users with Telekopye, a Telegram-based toolkit This article has been indexed from www.infosecurity-magazine.com Read the original article: Telekopye Scammers Target Booking.com and Airbnb Users
CISA Urges Encryption of Cookies in F5 BIG-IP Systems
CISA urged organizations to tackle security risks from unencrypted cookies in F5 BIG-IP LTM systems This article has been indexed from www.infosecurity-magazine.com Read the original article: CISA Urges Encryption of Cookies in F5 BIG-IP Systems
US DoD Tightens Cybersecurity Standards for Defense Contractors
The US DoD has finalized the Cybersecurity Maturity Model Certification (CMMC) Program, which defense contractors must pass to bid for government contracts This article has been indexed from www.infosecurity-magazine.com Read the original article: US DoD Tightens Cybersecurity Standards for Defense…
Pokémon Developer Game Freak Suffers Data Breach
Personal data of over 2600 employees has been exposed and insider information about the Switch 2 and future Pokémon games leaked This article has been indexed from www.infosecurity-magazine.com Read the original article: Pokémon Developer Game Freak Suffers Data Breach
Casio Confirms Ransomware Outage and Data Breach
Japanese electronics firm Casio has reported a ransomware attack and data breach This article has been indexed from www.infosecurity-magazine.com Read the original article: Casio Confirms Ransomware Outage and Data Breach
Skills Shortages Now a Top-Two Security Risk for SMBs
Sophos claims that a lack of cybersecurity talent is considered a major risk by SMBs This article has been indexed from www.infosecurity-magazine.com Read the original article: Skills Shortages Now a Top-Two Security Risk for SMBs
NHS England Warns of Critical Veeam Vulnerability Under Active Exploitation
NHS England has issued an alert regarding a critical Veeam Backup & Replication vulnerability that is being actively exploited, potentially leading to remote code execution This article has been indexed from www.infosecurity-magazine.com Read the original article: NHS England Warns of…
US Border Agency Under Fire for App’s Handling of Personal Data
Access Now announced that the US Customs and Border Protection agency released records on its app following the NGO’s lawsuit This article has been indexed from www.infosecurity-magazine.com Read the original article: US Border Agency Under Fire for App’s Handling of…
Russia’s SVR Targets Zimbra, TeamCity Servers for Cyber Espionage
Russian-backed APT29 has been spying on US and European organizations since at least 2021, a US-UK joint advisory said This article has been indexed from www.infosecurity-magazine.com Read the original article: Russia’s SVR Targets Zimbra, TeamCity Servers for Cyber Espionage
Sonatype Reports 156% Increase in OSS Malicious Packages
A new Sonatype report reveals a 156% surge in open source malware, with over 704,102 malicious packages identified since 2019, as OSS adoption continues to skyrocket This article has been indexed from www.infosecurity-magazine.com Read the original article: Sonatype Reports 156%…
Disinformation Campaign Targets Moldova Ahead of EU Referendum
Operation MiddleFloor targets Moldova’s October elections, spreading EU disinformation via email This article has been indexed from www.infosecurity-magazine.com Read the original article: Disinformation Campaign Targets Moldova Ahead of EU Referendum
Over 10m Conversations Exposed in AI Call Center Hack
The data breach exposed more than 10m customer conversations from an AI call center platform in the Middle East This article has been indexed from www.infosecurity-magazine.com Read the original article: Over 10m Conversations Exposed in AI Call Center Hack
EU Adopts Cyber Resilience Act for Connected Devices
The EU’s Cyber Resilience Act requires cybersecurity standards for all connected products throughout their entire lifecycle This article has been indexed from www.infosecurity-magazine.com Read the original article: EU Adopts Cyber Resilience Act for Connected Devices
Marriott Agrees $52m Settlement for Massive Data Breach
Marriott will pay $52m to 50 US states for a data breach impacting 131.5 million American customers, and has agreed to implement stronger security practices This article has been indexed from www.infosecurity-magazine.com Read the original article: Marriott Agrees $52m Settlement…
Internet Archive Breached, 31 Million Records Exposed
The non-profit digital library was also hit by at least two DDoS attacks in two days This article has been indexed from www.infosecurity-magazine.com Read the original article: Internet Archive Breached, 31 Million Records Exposed
Former RAC Employees Get Suspended Sentence for Data Theft
Two former RAC employees have been handed suspended prison sentences for trading in personal data This article has been indexed from www.infosecurity-magazine.com Read the original article: Former RAC Employees Get Suspended Sentence for Data Theft
Over 240 Million US Breach Victims Recorded in Q3
Supply chain victim numbers surge as more than 240 million US residents are impacted by data breaches in Q3 2024 This article has been indexed from www.infosecurity-magazine.com Read the original article: Over 240 Million US Breach Victims Recorded in Q3
Apple’s iPhone Mirroring Flaw Exposes Employee Privacy Risks
The privacy flaw in Apple’s iPhone mirroring feature enables personal apps on an iPhone to be listed in a company’s software inventory when the feature is used on work computers This article has been indexed from www.infosecurity-magazine.com Read the original…
New BeaverTail Malware Targets Job Seekers via Fake Recruiters
New BeaverTail malware targets tech job seekers via fake recruiters on LinkedIn and X This article has been indexed from www.infosecurity-magazine.com Read the original article: New BeaverTail Malware Targets Job Seekers via Fake Recruiters
New Generation of Malicious QR Codes Uncovered by Researchers
Barracuda researchers have identified a new wave of QR code phishing attacks that evade traditional security measures and pose a significant threat to email security This article has been indexed from www.infosecurity-magazine.com Read the original article: New Generation of Malicious…
UK Launches New Competition to Spur Cybersecurity Careers
The UK government’s Cyber Team Competition offer applicants the chance to receive advanced training, mentorship and networking opportunities This article has been indexed from www.infosecurity-magazine.com Read the original article: UK Launches New Competition to Spur Cybersecurity Careers
Australia Introduces First Standalone Cybersecurity Law
The Australian government’s Cyber Security Bill 2024 will mandate cybersecurity standards for smart devices and introduce ransomware reporting requirements This article has been indexed from www.infosecurity-magazine.com Read the original article: Australia Introduces First Standalone Cybersecurity Law
New EU Body to Centralize Complaints Against Facebook, TikTok, YouTube
The Appeals Centre Europe is supported by Meta’s Oversight Board Trust and certified by Ireland’s media regulator This article has been indexed from www.infosecurity-magazine.com Read the original article: New EU Body to Centralize Complaints Against Facebook, TikTok, YouTube
Ivanti: Three CSA Zero-Days Are Being Exploited in Attacks
Ivanti’s Cloud Services Appliance is being targeted by threat actors exploiting three zero-day bugs This article has been indexed from www.infosecurity-magazine.com Read the original article: Ivanti: Three CSA Zero-Days Are Being Exploited in Attacks
Microsoft Fixes Five Zero-Days in October Patch Tuesday
October’s Patch Tuesday saw Microsoft patch over 100 CVEs including five zero-day vulnerabilities This article has been indexed from www.infosecurity-magazine.com Read the original article: Microsoft Fixes Five Zero-Days in October Patch Tuesday
American Water Hit by Cyber-Attack, Billing Systems Disrupted
American Water, the largest water utility in the US, discovered a cyber-attack impacting internal systems on October 3 This article has been indexed from www.infosecurity-magazine.com Read the original article: American Water Hit by Cyber-Attack, Billing Systems Disrupted
American Water Hit by Cyberattack, Billing Systems Disrupted
American Water, the largest water utility in the US, discovered a cyber-attack impacting internal systems on October 3 This article has been indexed from www.infosecurity-magazine.com Read the original article: American Water Hit by Cyberattack, Billing Systems Disrupted
Cloud Security Risks Surge as 38% of Firms Face Exposures
Tenable’s latest report reveals 38% of organizations face risks from a “toxic cloud triad” of security gaps This article has been indexed from www.infosecurity-magazine.com Read the original article: Cloud Security Risks Surge as 38% of Firms Face Exposures
31 New Ransomware Groups Join the Ecosystem in 12 Months
Secureworks reports a 30% increase in active ransomware groups despite law enforcement efforts, with 31 new groups emerging in the past year This article has been indexed from www.infosecurity-magazine.com Read the original article: 31 New Ransomware Groups Join the Ecosystem…
US Warns of Foreign Interference in Congressional Races Ahead of Election
Iran is targeting the US presidential race, China the congressional races, and Russia both This article has been indexed from www.infosecurity-magazine.com Read the original article: US Warns of Foreign Interference in Congressional Races Ahead of Election
Cyber Fraud Cost up to $37bn in Southeast Asia Last Year
A UN report found that organized crime groups in the region have rapidly integrated malware, generative AI and deepfakes to enhance their fraud activities This article has been indexed from www.infosecurity-magazine.com Read the original article: Cyber Fraud Cost up to…
Global Police Track Human Traffickers in Online Crackdown
Europol claims its EMPACT operation has revealed dozens of human trafficking victims and suspects This article has been indexed from www.infosecurity-magazine.com Read the original article: Global Police Track Human Traffickers in Online Crackdown
MoneyGram Reveals Data Breach After Incident Downed Services
MoneyGram has issued a data breach notification to customers following a security incident This article has been indexed from www.infosecurity-magazine.com Read the original article: MoneyGram Reveals Data Breach After Incident Downed Services
Universal Music Group Admits Data Breach
UMG, a major music corporation, reported a July 2024 data breach affecting 680 US residents This article has been indexed from www.infosecurity-magazine.com Read the original article: Universal Music Group Admits Data Breach
Advanced Threat Group GoldenJackal Exploits Air-Gapped Systems
GoldenJackal targeted air-gapped government systems from May 2022 to March 2024, ESET found This article has been indexed from www.infosecurity-magazine.com Read the original article: Advanced Threat Group GoldenJackal Exploits Air-Gapped Systems
Board-CISO Mismatch on Cyber Responsibility, NCSC Research Finds
The UK NCSC found that there is a lot of confusion between board members and security leaders of who is responsible for cybersecurity within their organizations This article has been indexed from www.infosecurity-magazine.com Read the original article: Board-CISO Mismatch on…
ICO Releases New Data Protection Audit Framework
The UK’s ICO said the framework is designed to help businesses build trust and encourage a positive data protection culture This article has been indexed from www.infosecurity-magazine.com Read the original article: ICO Releases New Data Protection Audit Framework
EU Urged to Harmonize Incident Reporting Requirements
Risk managers association FERMA has warned that new EU cyber legislation means there is an inconsistent approach to incident reporting requirements This article has been indexed from www.infosecurity-magazine.com Read the original article: EU Urged to Harmonize Incident Reporting Requirements
Tech Professionals Highlight Critical AI Security Skills Gap
A new O’Reilly survey showed a shortage of AI security skills, while AI-enabled security tools become tech professionals’ top priority for the coming year This article has been indexed from www.infosecurity-magazine.com Read the original article: Tech Professionals Highlight Critical AI…
Fraud Repayment Rules Could Leave Victims Struggling, CTSI Claims
The Chartered Trading Standards Institute is concerned a new cap on fraud reimbursement is too low This article has been indexed from www.infosecurity-magazine.com Read the original article: Fraud Repayment Rules Could Leave Victims Struggling, CTSI Claims
Fraud Repayment Rules Could Leave Victims Struggling – Non-Profit
The Chartered Trading Standards Institute is concerned a new cap on fraud reimbursement is too low This article has been indexed from www.infosecurity-magazine.com Read the original article: Fraud Repayment Rules Could Leave Victims Struggling – Non-Profit
Get Safe Online Launches New Scam Detector
A new scam detection tool from Get Safe Online uses AI to help individuals and small businesses protect themselves This article has been indexed from www.infosecurity-magazine.com Read the original article: Get Safe Online Launches New Scam Detector
How Confidence Between Teams Impacts Cyber Incident Outcomes
Infosecurity recently joined an Immersive Labs Cyber Drill to experience how organizations can enhance their preparedness through training and simulations This article has been indexed from www.infosecurity-magazine.com Read the original article: How Confidence Between Teams Impacts Cyber Incident Outcomes
New MedusaLocker Ransomware Variant Deployed by Threat Actor
Cisco Talos has observed the financially motivated threat actor targeting organizations globally with a MedusaLocker ransomware variant called “BabyLockerKZ” This article has been indexed from www.infosecurity-magazine.com Read the original article: New MedusaLocker Ransomware Variant Deployed by Threat Actor
Sellafield Fined for Cybersecurity Failures at Nuclear Site
A UK court has fined Sellafield Ltd £332,500 for cybersecurity failings related to the running of the Sellafield nuclear facility This article has been indexed from www.infosecurity-magazine.com Read the original article: Sellafield Fined for Cybersecurity Failures at Nuclear Site
CRI Releases Guidance on Avoiding Ransomware Payments
The Counter Ransomware Initiative has released new guidance discouraging organizations from making ransomware payments This article has been indexed from www.infosecurity-magazine.com Read the original article: CRI Releases Guidance on Avoiding Ransomware Payments
Litespeed Cache Plugin Flaw Allows XSS Attack, Update Now
The new LiteSpeed Cache flaw (CVE-2024-47374) allows unauthenticated code injection across more than six million active installations This article has been indexed from www.infosecurity-magazine.com Read the original article: Litespeed Cache Plugin Flaw Allows XSS Attack, Update Now
Microsoft and US Government Disrupt Russian Star Blizzard Operations
Microsoft and the US government have collectively seized over 100 websites used by Russian nation-state actor Star Blizzard This article has been indexed from www.infosecurity-magazine.com Read the original article: Microsoft and US Government Disrupt Russian Star Blizzard Operations
CeranaKeeper Emerges as New Threat to Thai Government Networks
China-aligned CeranaKeeper discovered targeting Thai govt institutions using cloud services for data exfiltration This article has been indexed from www.infosecurity-magazine.com Read the original article: CeranaKeeper Emerges as New Threat to Thai Government Networks
Cybersecurity Spending on the Rise, But Security Leaders Still Feel Vulnerable
A new report by Red Canary has found that while cybersecurity budgets have risen, many security leaders still feel overwhelmed by the growing threat landscape This article has been indexed from www.infosecurity-magazine.com Read the original article: Cybersecurity Spending on the…
Northern Ireland Police Data Leak Sees Service Fined by ICO
The ICO blamed the Police Service of Northern Ireland for procedural failings that exposed the personal data of 9843 personnel, putting police officers at risk This article has been indexed from www.infosecurity-magazine.com Read the original article: Northern Ireland Police Data…
Crypto-Doubling Scams Surge Following Presidential Debate
Researchers see an uptick in crypto-doubling investment scams following the first presidential debate This article has been indexed from www.infosecurity-magazine.com Read the original article: Crypto-Doubling Scams Surge Following Presidential Debate
Email Phishing Attacks Surge as Attackers Bypass Security Controls
Egress found that attackers are becoming more adept at bypassing email security, such as using compromised accounts and the use of commodity campaigns This article has been indexed from www.infosecurity-magazine.com Read the original article: Email Phishing Attacks Surge as Attackers…
FIN7 Gang Hides Malware in AI “Deepnude” Sites
Threat group FIN7 is hiding infostealer malware on sites promising AI deepnude downloads This article has been indexed from www.infosecurity-magazine.com Read the original article: FIN7 Gang Hides Malware in AI “Deepnude” Sites
ACSC and CISA Launch Critical OT Cybersecurity Guidelines
The ACSC, in collaboration with CISA and international partners, has released a guide for securing operational technology in critical sectors This article has been indexed from www.infosecurity-magazine.com Read the original article: ACSC and CISA Launch Critical OT Cybersecurity Guidelines
Stonefly Group Targets US Firms With New Malware Tools
North Korean APT Stonefly continues to launch cyber-attacks on US firms despite July indictment This article has been indexed from www.infosecurity-magazine.com Read the original article: Stonefly Group Targets US Firms With New Malware Tools
80% of Manufacturing Firms Have Critical Vulnerabilities
A Black Kite report found that 67% of manufacturing firms have at least one vulnerability from CISA’s Known Exploited Vulnerabilities (KEV) catalog This article has been indexed from www.infosecurity-magazine.com Read the original article: 80% of Manufacturing Firms Have Critical Vulnerabilities
Meta Teams Up with Banks to Target Fraudsters
Meta has announced a new information-sharing partnership with UK financial institutions to target social media fraud This article has been indexed from www.infosecurity-magazine.com Read the original article: Meta Teams Up with Banks to Target Fraudsters
Share of Women in UK Cyber Roles Now Just 17%
Socura finds the percentage of women in cybersecurity positions has fallen seven percentage points since 2021 to 17% This article has been indexed from www.infosecurity-magazine.com Read the original article: Share of Women in UK Cyber Roles Now Just 17%
British Hacker Charged in the US For $3.75m Insider Trading Scheme
UK hacker Robert Westbrook allegedly gained unauthorized access to corporate executives’ email accounts to profit from confidential financial information This article has been indexed from www.infosecurity-magazine.com Read the original article: British Hacker Charged in the US For $3.75m Insider Trading…
Ransomware Attack Forces UMC to Divert Emergency Patients
UMC in Lubbock, Texas, confirmed a ransomware attack last week, disrupting patient care and IT systems This article has been indexed from www.infosecurity-magazine.com Read the original article: Ransomware Attack Forces UMC to Divert Emergency Patients
Evil Corp’s LockBit Ties Exposed in Latest Phase of Operation Cronos
The UK has sanctioned 16 members of the notorious Russian hacking group Evil Corp, exposing their links to the prolific LockBit ransomware group This article has been indexed from www.infosecurity-magazine.com Read the original article: Evil Corp’s LockBit Ties Exposed in…
T-Mobile to Pay $15.75m Penalty for Multiple Data Breaches
T-Mobile will pay $15.75m to the US Treasury for multiple data breaches in 2021, 2022 and 2023 and has agreed to invest in improved cybersecurity defenses This article has been indexed from www.infosecurity-magazine.com Read the original article: T-Mobile to Pay…
Ten Million Brits Hit By Fraud in Just Three Years
New Santander research claims 10 million UK consumers have suffered fraud since 2021, costing the economy £16bn This article has been indexed from www.infosecurity-magazine.com Read the original article: Ten Million Brits Hit By Fraud in Just Three Years
ISACA: European Security Teams Are Understaffed and Underfunded
New ISACA research reveals most cybersecurity teams are suffering from staffing and funding shortages This article has been indexed from www.infosecurity-magazine.com Read the original article: ISACA: European Security Teams Are Understaffed and Underfunded
NVIDIA Container Toolkit Vulnerability Exposes AI Systems to Risk
The vulnerability, discovered by Wiz researchers, affects both cloud-based and on-premises AI applications using the toolkit This article has been indexed from www.infosecurity-magazine.com Read the original article: NVIDIA Container Toolkit Vulnerability Exposes AI Systems to Risk
Critical RCE Vulnerabilities Found in Common Unix Printing System
The newly identified vulnerabilities exploit improper input validation when managing printer requests over the network This article has been indexed from www.infosecurity-magazine.com Read the original article: Critical RCE Vulnerabilities Found in Common Unix Printing System
US State CISOs Struggling with Insufficient Cybersecurity Funding
A Deloitte and NASCIO survey found that a third of state CISOs do not have a dedicated cybersecurity budget This article has been indexed from www.infosecurity-magazine.com Read the original article: US State CISOs Struggling with Insufficient Cybersecurity Funding
Cyber-Attacks Hit Over a Third of English Schools
A survey by Ofqual found that 20% of English schools and colleges were unable to immediately recover after being hit by a cyber incident This article has been indexed from www.infosecurity-magazine.com Read the original article: Cyber-Attacks Hit Over a Third…
PwC Urges Boards to Give CISOs a Seat at the Table
PwC claims fewer than 50% of businesses involve their CISOs in strategic planning on cyber This article has been indexed from www.infosecurity-magazine.com Read the original article: PwC Urges Boards to Give CISOs a Seat at the Table
UK and US Warn of Growing Iranian Spear Phishing Threat
Security agencies from the UK and US are urging individuals with Middle East links to beware of Iranian spear phishing attacks This article has been indexed from www.infosecurity-magazine.com Read the original article: UK and US Warn of Growing Iranian Spear…
Ireland’s DPC Hits Meta with €91 Million Penalty for GDPR Violation
Ireland’s Data Protection Commission fines Meta Platforms €91 million for mishandling user passwords and GDPR violations This article has been indexed from www.infosecurity-magazine.com Read the original article: Ireland’s DPC Hits Meta with €91 Million Penalty for GDPR Violation
Governments Urge Improved Security and Resilience for Undersea Cables
The US, UK, EU and other global partners have called for a global approach to strengthening the security of global communications and data This article has been indexed from www.infosecurity-magazine.com Read the original article: Governments Urge Improved Security and Resilience…
US Sanctions Crypto Exchanges for Facilitating Russian Cybercrime
The US has sanctioned Cryptex, PM2BTC and a Russian national for processing hundreds of millions of dollars derived from cybercrime This article has been indexed from www.infosecurity-magazine.com Read the original article: US Sanctions Crypto Exchanges for Facilitating Russian Cybercrime
Man Arrested Over UK Railway Station Wi-Fi Hack
The suspect is an employee of Global Reach Technology, which provides some Wi-Fi services to Network Rail This article has been indexed from www.infosecurity-magazine.com Read the original article: Man Arrested Over UK Railway Station Wi-Fi Hack
Russian Hackers Target Ukrainian Servicemen via Messaging Apps
Russian cyber-attacks on Ukrainian servicemen underscore the escalating use of digital warfare tactics in the ongoing conflict This article has been indexed from www.infosecurity-magazine.com Read the original article: Russian Hackers Target Ukrainian Servicemen via Messaging Apps
Data Breach at MC2 Data Leaves 100 Million at Risk of Fraud
The data leak exposed personal data of 100m US citizens, resulting from a misconfigured database made accessible online This article has been indexed from www.infosecurity-magazine.com Read the original article: Data Breach at MC2 Data Leaves 100 Million at Risk of…
Over a Third of Employees Secretly Sharing Work Info with AI
A CybSafe survey found that 52% of workers have not yet received any training on safe AI use This article has been indexed from www.infosecurity-magazine.com Read the original article: Over a Third of Employees Secretly Sharing Work Info with AI
NIST Scraps Passwords Complexity and Mandatory Changes in New Guidelines
The institute no longer requires regular password changes unless the authenticator has been compromised This article has been indexed from www.infosecurity-magazine.com Read the original article: NIST Scraps Passwords Complexity and Mandatory Changes in New Guidelines
First Mobile Crypto Drainer Found on Google Play
Researchers discover mobile crypto drainer malware hidden in WalletConnect app garnering 10,000 downloads This article has been indexed from www.infosecurity-magazine.com Read the original article: First Mobile Crypto Drainer Found on Google Play
Malicious Ads Hide Infostealer in League of Legends ‘Download’
Bitdefender is warning League of Legends fans not to fall for a phishing campaign designed to spread Lumma Stealer malware This article has been indexed from www.infosecurity-magazine.com Read the original article: Malicious Ads Hide Infostealer in League of Legends ‘Download’
82% of Phishing Sites Now Target Mobile Devices
82% of all phishing sites target mobile devices, with 76% using HTTPS to appear secure This article has been indexed from www.infosecurity-magazine.com Read the original article: 82% of Phishing Sites Now Target Mobile Devices
US House Bill Addresses Growing Threat of Chinese Cyber Actors
House GOP unveiled a bill to combat Chinese cyber threats to US infrastructure, led by CISA and FBI This article has been indexed from www.infosecurity-magazine.com Read the original article: US House Bill Addresses Growing Threat of Chinese Cyber Actors
Thousands of US Congress Emails Exposed to Takeover
Some 3191 email addresses for congressional staff are available on the dark web This article has been indexed from www.infosecurity-magazine.com Read the original article: Thousands of US Congress Emails Exposed to Takeover
CrowdStrike Apologizes for IT Outage, Defends Microsoft Kernel Access
Adam Meyers, CrowdStrike VP for counter-adversary operations, appeared before a US congressional committee to answer questions about its July faulty software update This article has been indexed from www.infosecurity-magazine.com Read the original article: CrowdStrike Apologizes for IT Outage, Defends Microsoft…
Critical Ivanti Authentication Bypass Bug Exploited in Wild
CISA adds critical Ivanti bug to its Known Exploited Vulnerabilities catalog This article has been indexed from www.infosecurity-magazine.com Read the original article: Critical Ivanti Authentication Bypass Bug Exploited in Wild
Cybersecurity Incident Affects Arkansas City Water Treatment Facility
Arkansas City’s water treatment facility faced a cyber incident on Sunday and has since switched to manual operations This article has been indexed from www.infosecurity-magazine.com Read the original article: Cybersecurity Incident Affects Arkansas City Water Treatment Facility
Threat Actors Shift to JavaScript-Based Phishing Attacks
Cybercriminals are increasingly prioritizing script-based phishing techniques over one based on traditional malicious documents This article has been indexed from www.infosecurity-magazine.com Read the original article: Threat Actors Shift to JavaScript-Based Phishing Attacks
New Octo2 Malware Variant Threatens Mobile Banking Security
Cybercriminals have been observed disguising Octo2 as legitimate apps like Google Chrome and NordVPN This article has been indexed from www.infosecurity-magazine.com Read the original article: New Octo2 Malware Variant Threatens Mobile Banking Security
14 Million Patients Impacted by US Healthcare Data Breaches in 2024
SonicWall found that data breaches caused by malware attacks on US healthcare organizations have affected 14 million people so far in 2024 This article has been indexed from www.infosecurity-magazine.com Read the original article: 14 Million Patients Impacted by US Healthcare…
US Mulls Ban on Russian, Chinese Parts in Connected Vehicles
The US Commerce Department wants to prohibit the sale or import of connected vehicles with Russian or Chinese-made hardware and software This article has been indexed from www.infosecurity-magazine.com Read the original article: US Mulls Ban on Russian, Chinese Parts in…