Category: www.infosecurity-magazine.com

ICO Warns of Mobile Phone Festive Privacy Snafu

The Information Commissioner’s Office has warned that millions of Brits don’t know how to erase personal data from their old devices This article has been indexed from www.infosecurity-magazine.com Read the original article: ICO Warns of Mobile Phone Festive Privacy Snafu

LockBit Admins Tease a New Ransomware Version

The LockBitSupp persona said LockBit 4.0 will be launched in February 2025 This article has been indexed from www.infosecurity-magazine.com Read the original article: LockBit Admins Tease a New Ransomware Version

Webcams and DVRs Vulnerable to HiatusRAT, FBI Warns

The FBI has issued a warning about the Hiatus RAT malware targeting Xiongmai and Hikvision web cameras and DVRs, urging users isolate these devices from networks This article has been indexed from www.infosecurity-magazine.com Read the original article: Webcams and DVRs…

CISA Urges Encrypted Messaging After Salt Typhoon Hack

The US Cybersecurity and Infrastructure Security Agency recommended users turn on phishing-resistant MFA and switch to Signal-like apps for messaging This article has been indexed from www.infosecurity-magazine.com Read the original article: CISA Urges Encrypted Messaging After Salt Typhoon Hack

US Organizations Still Using Kaspersky Products Despite Ban

Bitsight found that 40% of US organizations who used Kaspersky products before the government ban came into effect still appear to be using them This article has been indexed from www.infosecurity-magazine.com Read the original article: US Organizations Still Using Kaspersky…

EU Opens Door for AI Training Using Personal Data

The EU Data Protection Board (EDPB) published a long-awaited opinion on how GDPR should apply to AI models This article has been indexed from www.infosecurity-magazine.com Read the original article: EU Opens Door for AI Training Using Personal Data

New Malware Can Kill Engineering Processes in ICS Environments

Forescout identified a new type of malware capable of terminating engineering processes, used to target Siemens engineering workstations This article has been indexed from www.infosecurity-magazine.com Read the original article: New Malware Can Kill Engineering Processes in ICS Environments

Phishing Attacks Double in 2024

SlashNext reports a 202% increase in overall phishing messages and a 703% surge in credential-based phishing attacks in 2024 This article has been indexed from www.infosecurity-magazine.com Read the original article: Phishing Attacks Double in 2024

New Attacks Exploit VSCode Extensions and npm Packages

Malicious campaigns targeting VSCode extensions have recently expanding to npm, risking software supply chains This article has been indexed from www.infosecurity-magazine.com Read the original article: New Attacks Exploit VSCode Extensions and npm Packages

Meta Hit with Massive $263m GDPR Fine

The Irish Data Protection Commission has fined Meta $263m for a 2018 data breach impacting 29 million Facebook accounts This article has been indexed from www.infosecurity-magazine.com Read the original article: Meta Hit with Massive $263m GDPR Fine

European Commission Opens TikTok Election Integrity Probe

The European Commission is investigating whether TikTok allowed foreign actors to influence voters during recent Romanian elections This article has been indexed from www.infosecurity-magazine.com Read the original article: European Commission Opens TikTok Election Integrity Probe

Texas Tech University Data Breach Impacts 1.4 Million

The breach has affected 650,000 individuals at TTUHSC’s Lubbock campus and 815,000 at its El Paso branch This article has been indexed from www.infosecurity-magazine.com Read the original article: Texas Tech University Data Breach Impacts 1.4 Million

Cybercriminals Exploit Google Calendar to Spread Malicious Links

Check Point research reveals cybercriminals are using Google Calendar and Drawings to send malicious links, bypassing traditional email security This article has been indexed from www.infosecurity-magazine.com Read the original article: Cybercriminals Exploit Google Calendar to Spread Malicious Links

EU Sanctions Russian Cyber Actors for “Destabilizing Actions”

The EU announced sanctions against individuals and entities involved in cyber-attacks and disinformation campaigns on behalf of the Russian state This article has been indexed from www.infosecurity-magazine.com Read the original article: EU Sanctions Russian Cyber Actors for “Destabilizing Actions”

New APIs Discovered by Attackers in Just 29 Seconds

Wallarm honeypot research finds potentially exposed APIs are being discovered within half a minute This article has been indexed from www.infosecurity-magazine.com Read the original article: New APIs Discovered by Attackers in Just 29 Seconds

US Unveils New National Cyber Incident Response Plan

The draft plan is designed to help businesses understand how the government will support them during a cyber incident This article has been indexed from www.infosecurity-magazine.com Read the original article: US Unveils New National Cyber Incident Response Plan

All Major European Financial Firms Suffer Supplier Breaches

SecurityScorecard claims 100% of Europe’s top financial services companies have suffered a supply chain breach in the past year This article has been indexed from www.infosecurity-magazine.com Read the original article: All Major European Financial Firms Suffer Supplier Breaches

CISA and EPA Warn of Cyber Risks to Water System Interfaces

CISA and EPA have published guidance for operators of water and wastewater systems to protect against cyber-attacks This article has been indexed from www.infosecurity-magazine.com Read the original article: CISA and EPA Warn of Cyber Risks to Water System Interfaces

Fake Captcha Campaign Highlights Risks of Malvertising Networks

Large-scale campaign identified by Guardio Lans and Infoblox, exploiting malvertising and fake captchas to distribute Lumma infostealer for massive theft This article has been indexed from www.infosecurity-magazine.com Read the original article: Fake Captcha Campaign Highlights Risks of Malvertising Networks

Ofcom Issues Guidance for Tech Firms to Tackle Online Harms

New Ofcom guidance is designed to help tech companies comply with their obligations around tackling illegal online harms under the Online Safety Act This article has been indexed from www.infosecurity-magazine.com Read the original article: Ofcom Issues Guidance for Tech Firms…

YouTube Creators Targeted in Global Phishing Campaign

Over 200,000 YouTube creators have been targeted by malware-laden phishing emails with the aim of infecting their followers This article has been indexed from www.infosecurity-magazine.com Read the original article: YouTube Creators Targeted in Global Phishing Campaign

US Uncovers North Korean IT Worker Fraud, Offers $5M Bounty

The US Government is offering a $5 million reward for information leading to the disruption of financial mechanisms supporting North Korea following a six-year conspiracy This article has been indexed from www.infosecurity-magazine.com Read the original article: US Uncovers North Korean…

US Offers $5M for Info on North Korean IT Worker Fraud

The US Government is offering a $5 million reward for information leading to the disruption of financial mechanisms supporting North Korea following a six-year conspiracy This article has been indexed from www.infosecurity-magazine.com Read the original article: US Offers $5M for…

2024 Sees Sharp Increase in Microsoft Tool Exploits

Sophos found observed a significant rise in Microsoft LOLbins abused by attackers in H1 2024 compared to 2023 This article has been indexed from www.infosecurity-magazine.com Read the original article: 2024 Sees Sharp Increase in Microsoft Tool Exploits

ISC2 Survey Reveals Critical Gaps in Cybersecurity Leadership Skills

ISC2 research has found that cybersecurity leaders have limited skills and training in areas like communication, strategic mindset and business acumen This article has been indexed from www.infosecurity-magazine.com Read the original article: ISC2 Survey Reveals Critical Gaps in Cybersecurity Leadership…

UK Shoppers Frustrated as Bots Snap Up Popular Christmas Gifts

Almost three quarters of UK consumers believe bad bots are ruining Christmas by buying up popular gifts, forcing many to purchase expensive alternatives, according to Imperva research This article has been indexed from www.infosecurity-magazine.com Read the original article: UK Shoppers…

Security Flaws in WordPress Woffice Theme Prompts Urgent Update

Two Woffice theme vulnerabilities have been identified that allow attackers to gain unauthorized access and control of unpatched websites This article has been indexed from www.infosecurity-magazine.com Read the original article: Security Flaws in WordPress Woffice Theme Prompts Urgent Update

Remcos RAT Malware Evolves with New Techniques

Cyber-attacks involving Remcos RAT surged in Q3 2024, enabling attackers to control victim machines remotely, steal data and carry out espionage This article has been indexed from www.infosecurity-magazine.com Read the original article: Remcos RAT Malware Evolves with New Techniques

Lookout Discovers New Spyware Deployed by Russia and China

Russian-made spyware BoneSpy and PlainGnome target former Soviet states, while public security bureaus in mainland China use Chinese surveillance tool EagleMsgSpy This article has been indexed from www.infosecurity-magazine.com Read the original article: Lookout Discovers New Spyware Deployed by Russia and…

Secret Blizzard Targets Ukrainian Military with Custom Malware

Microsoft detailed how Russian espionage group Secret Blizzard is leveraging infrastructure of other threat actors to target the Ukrainian military with custom malware This article has been indexed from www.infosecurity-magazine.com Read the original article: Secret Blizzard Targets Ukrainian Military with…

Cyber Incident Disrupting Krispy Kreme Online Orders

Krispy Kreme said the incident is likely to materially affect operations and short-term financial performance This article has been indexed from www.infosecurity-magazine.com Read the original article: Cyber Incident Disrupting Krispy Kreme Online Orders

Microsoft Azure MFA Flaw Allowed Easy Access Bypass

Microsoft MFA flaw exposed that allowed attackers to bypass security within an hour, putting 400m Office 365 accounts at risk This article has been indexed from www.infosecurity-magazine.com Read the original article: Microsoft Azure MFA Flaw Allowed Easy Access Bypass

Operation PowerOFF Takes Down DDoS Boosters

Operation PowerOFF has dismantled a network of 27 DDoS platforms, leading to the arrests of three administrators and the identification of over 300 users This article has been indexed from www.infosecurity-magazine.com Read the original article: Operation PowerOFF Takes Down DDoS…

US Sanctions Chinese Firm at Center of Global Firewall Hack

The US government has sanctioned Sichuan Silence and one of its employees for the mass compromise of firewalls which led to the deployment of malware and ransomware This article has been indexed from www.infosecurity-magazine.com Read the original article: US Sanctions…

Snowflake Pledges to Make MFA Mandatory

The multi-cloud data warehousing platform said it will completely phase out single factor authentication with passwords by November 2025 This article has been indexed from www.infosecurity-magazine.com Read the original article: Snowflake Pledges to Make MFA Mandatory

Hackers Exploit AWS Misconfigurations in Massive Data Breach

Hackers exploited AWS misconfigurations, leaking 2TB of sensitive data, including customer information, credentials and proprietary source code This article has been indexed from www.infosecurity-magazine.com Read the original article: Hackers Exploit AWS Misconfigurations in Massive Data Breach

Utility Companies Face 42% Surge in Ransomware Attacks

The utilities sector saw a 42% surge in ransomware incidents over the past year, with groups like Play focusing on targets with IT and OT systems This article has been indexed from www.infosecurity-magazine.com Read the original article: Utility Companies Face…

Scottish Parliament TV at Risk of Deepfake Attacks

Researchers found that the broad accessibility of streams of Scottish Parliamentary proceedings make them highly susceptible to deepfake attacks This article has been indexed from www.infosecurity-magazine.com Read the original article: Scottish Parliament TV at Risk of Deepfake Attacks

Public Reprimands, an Effective Deterrent Against Data Breaches

The UK’s ICO has published its findings following a two-year trial of its Public Sector Approach, which aimed to improve data protection compliance and deter data breaches This article has been indexed from www.infosecurity-magazine.com Read the original article: Public Reprimands,…

Phishing Scam Targets Ukrainian Defense Companies

CERT-UA has issued a warning about phishing emails targeting Ukrainian defense companies and security forces This article has been indexed from www.infosecurity-magazine.com Read the original article: Phishing Scam Targets Ukrainian Defense Companies

FCC Proposes Stricter Cybersecurity Rules for US Telecoms

The Salt Typhoon hack against US telecommunications firms has prompted the FCC to suggest stricter security rules to protect the sector from future cyber threats This article has been indexed from www.infosecurity-magazine.com Read the original article: FCC Proposes Stricter Cybersecurity…

FBI Warns GenAI is Boosting Financial Fraud

An FBI alert warned that GenAI tools are improving the believability of fraud schemes and enabling large scale attacks This article has been indexed from www.infosecurity-magazine.com Read the original article: FBI Warns GenAI is Boosting Financial Fraud

G20 Leaders Fear Economic Over Cyber Risks

World Economic Forum data shows G20 executives are more concerned about economic risks that cyber-threats This article has been indexed from www.infosecurity-magazine.com Read the original article: G20 Leaders Fear Economic Over Cyber Risks

Pro-Russian Hacktivist Group Claims 6600 Attacks Targeting Europe

Orange Cyberdefense found that hacktivist gang Noname has almost exclusively targeted European countries since March 2022, with no attacks impacting the US This article has been indexed from www.infosecurity-magazine.com Read the original article: Pro-Russian Hacktivist Group Claims 6600 Attacks Targeting…

Ransomware Costs Manufacturing Sector $17bn in Downtime

Ransomware attacks cost manufacturing $17bn in downtime since 2018, with $1.9m daily losses, according to Comparitech This article has been indexed from www.infosecurity-magazine.com Read the original article: Ransomware Costs Manufacturing Sector $17bn in Downtime

Wirral Hospital Recovery Continues One Week After Cyber Incident

Wirral University Teaching Hospital is recovering from a cybersecurity incident that occurred on November 25, with some patient services still disrupted as systems are being restored This article has been indexed from www.infosecurity-magazine.com Read the original article: Wirral Hospital Recovery…

FTC Safeguards US Consumers from Location Data Misuse

In a settlement announced on Tuesday, the FTC banned Gravy Analytics and Mobilewalla from selling sensitive location data This article has been indexed from www.infosecurity-magazine.com Read the original article: FTC Safeguards US Consumers from Location Data Misuse

Liverpool Children’s Hospital Confirms Cyber-Attack

Alder Hey Children’s NHS Foundation Trust said a single attack compromised the systems of three NHS entities This article has been indexed from www.infosecurity-magazine.com Read the original article: Liverpool Children’s Hospital Confirms Cyber-Attack

German Police Shutter Country’s Largest Dark Web Market

Law enforcers in Germany have taken down dark web marketplace Crimenetwork and arrested a suspected administrator This article has been indexed from www.infosecurity-magazine.com Read the original article: German Police Shutter Country’s Largest Dark Web Market

Vodka Giant Stoli Files for Bankruptcy After Ransomware Attack

Russian vodka-maker Stoli Group has filed for bankruptcy in the US after ransomware attack and alleged persecution by the Putin regime This article has been indexed from www.infosecurity-magazine.com Read the original article: Vodka Giant Stoli Files for Bankruptcy After Ransomware…

ENISA Launches First State of EU Cybersecurity Report

The NIS2 directive requires the EU cybersecurity agency to produce a biennial report on the state of cybersecurity in the Union This article has been indexed from www.infosecurity-magazine.com Read the original article: ENISA Launches First State of EU Cybersecurity Report

Security Risks Persist in Open Source Ecosystem

An analysis by the Linux Foundation, OpenSSF and Harvard University found that there continues to be significant cybersecurity risks in open source software practices This article has been indexed from www.infosecurity-magazine.com Read the original article: Security Risks Persist in Open…

French Mobile Operators Join Forces to Tackle Rising Fraud

France’s four leading mobile operators, Bouygues, Free, Orange and SFR, have taken steps to combat mobile fraud as part of the GSMA Open Gateway initiative This article has been indexed from www.infosecurity-magazine.com Read the original article: French Mobile Operators Join…

Police Shut Down Matrix Encrypted Criminal Hub

A law enforcement operation executed by Dutch and French authorities resulted in the main servers used by Matrix being taken down This article has been indexed from www.infosecurity-magazine.com Read the original article: Police Shut Down Matrix Encrypted Criminal Hub

Hydra Market Leader Sentenced to Life by Moscow Court

The “organizer” of notorious dark web drugs marketplace Hydra Market has been handed a life sentence in Russia This article has been indexed from www.infosecurity-magazine.com Read the original article: Hydra Market Leader Sentenced to Life by Moscow Court

UK Cyber-Attacks Surge as Threats Hit Harder, Warns NCSC

In 2024, the UK National Cyber Security Centre issued over 500 notifications to UK organizations about cyber incidents – double the number recorded in 2023 This article has been indexed from www.infosecurity-magazine.com Read the original article: UK Cyber-Attacks Surge as…