ASIC said the financial services firm’s failings led to a data breach impacting nearly 10,000 clients This article has been indexed from www.infosecurity-magazine.com Read the original article: Australian Regulator Alleges Financial Firm Exposed Clients to Unacceptable Cyber Risks
Tag: www.infosecurity-magazine.com
AI Adoption is Driving SOC Role Reallocation Without Cutting Headcount
Abnormal AI found that 96% of security leaders have no plans to reduce the headcount in SOC teams as a result of AI adoption, instead focusing on reallocating roles This article has been indexed from www.infosecurity-magazine.com Read the original article:…
Iranian Hackers Deploy New Android Spyware Version
New samples of DCHSpy, a spyware implant linked to Iranian APT group MuddyWater, were detected by Lookout one week after the start of the Israel-Iran conflict This article has been indexed from www.infosecurity-magazine.com Read the original article: Iranian Hackers Deploy…
Accounting Firm Targeted by Malware Campaign Using New Crypter
An attack on a US accounting firm delivered PureRAT via Ghost Crypt, involving social engineering and advanced obfuscation techniques This article has been indexed from www.infosecurity-magazine.com Read the original article: Accounting Firm Targeted by Malware Campaign Using New Crypter
Fake Receipt Generators Fuel Rise in Online Fraud
An investigation has revealed novel scams using tools like MaisonReceipts, creating realistic fake receipts to resell stolen or counterfeit good This article has been indexed from www.infosecurity-magazine.com Read the original article: Fake Receipt Generators Fuel Rise in Online Fraud
New CrushFTP Critical Vulnerability Exploited in the Wild
CVE-2025-54309 could allow remote attackers to obtain admin access via HTTPS This article has been indexed from www.infosecurity-magazine.com Read the original article: New CrushFTP Critical Vulnerability Exploited in the Wild
Microsoft: Attackers Actively Compromising On-Prem SharePoint Customers
On-prem SharePoint customers have been told to assume compromise, with attackers observed to be exfiltrating data from victim servers across critical sectors This article has been indexed from www.infosecurity-magazine.com Read the original article: Microsoft: Attackers Actively Compromising On-Prem SharePoint Customers
CISA Issues Advisories on Critical ICS Vulnerabilities Across Multiple Sectors
The US CISA has issued advisories for Industrial Control Systems vulnerabilities affecting multiple vendors including Johnson Controls, ABB, Hitachi Energy, and Schneider Electric This article has been indexed from www.infosecurity-magazine.com Read the original article: CISA Issues Advisories on Critical ICS…
Russia Linked to New Malware Targeting Email Accounts for Espionage
Russian military intelligence-linked hackers are using a new malware called “Authentic Antics” to secretly access Microsoft cloud email accounts, the UK’s NCSC reports This article has been indexed from www.infosecurity-magazine.com Read the original article: Russia Linked to New Malware Targeting…
New “LameHug” Malware Deploys AI-Generated Commands
Ukraine’s CERT-UA has identified a new AI-powered malware, dubbed “LameHug,” which executes commands on compromised Windows systems in cyber-attacks, targeting the nation’s security and defense sector This article has been indexed from www.infosecurity-magazine.com Read the original article: New “LameHug” Malware…
Retail Becomes New Target as Healthcare Ransomware Attacks Slow
Comparitech found that healthcare ransomware attacks rose 4% in H1 2025, a significantly lower rate than the cross-sector average of 50% This article has been indexed from www.infosecurity-magazine.com Read the original article: Retail Becomes New Target as Healthcare Ransomware Attacks…
AI-Generated Lcryx Ransomware Discovered in Cryptomining Botnet
A cryptomining botnet active since 2019 has incorporated likely AI-generated Lcryx ransomware into its operations This article has been indexed from www.infosecurity-magazine.com Read the original article: AI-Generated Lcryx Ransomware Discovered in Cryptomining Botnet
Malware-as-a-Service Campaign Exploits GitHub to Deliver Payloads
A new malware campaign uses GitHub to deliver payloads via Amadey botnet, bypassing email distribution This article has been indexed from www.infosecurity-magazine.com Read the original article: Malware-as-a-Service Campaign Exploits GitHub to Deliver Payloads
AI Cloaking Tools Enable Harder-to-Detect Cyber-Attacks
Cybercriminals are using AI cloaking tools to evade detection, disguising phishing and malware sites This article has been indexed from www.infosecurity-magazine.com Read the original article: AI Cloaking Tools Enable Harder-to-Detect Cyber-Attacks
Microsoft Exposes Scattered Spider’s Latest Tactics
Microsoft has reported Scattered Spider continues to evolve tactics to compromise both on-premises infrastructure and cloud environments This article has been indexed from www.infosecurity-magazine.com Read the original article: Microsoft Exposes Scattered Spider’s Latest Tactics
One in 12 US/UK Employees Uses Chinese GenAI Tools
Harmonic Security raises the alarm as one in 12 British and American employees uses Chinese GenAI tools This article has been indexed from www.infosecurity-magazine.com Read the original article: One in 12 US/UK Employees Uses Chinese GenAI Tools
Pro-Russian Cybercrime Network Demolished in Operation Eastwood
A Europol coordinated operation has taken down key infrastructure used by pro-Russian hacktivist group NoName057(16), as well as a number of arrests This article has been indexed from www.infosecurity-magazine.com Read the original article: Pro-Russian Cybercrime Network Demolished in Operation Eastwood
SquidLoader Malware Campaign Targets Hong Kong Financial Sector
A new malware campaign targeting Hong Kong finance has been identified, featuring SquidLoader to deploy Cobalt Strike Beacon This article has been indexed from www.infosecurity-magazine.com Read the original article: SquidLoader Malware Campaign Targets Hong Kong Financial Sector
Most European Financial Firms Still Lagging on DORA Compliance
A Veeam survey found that 96% of financial services organizations believe their current levels of data resilience falls short of DORA compliance, citing major challenges This article has been indexed from www.infosecurity-magazine.com Read the original article: Most European Financial Firms…
US Data Breaches Head for Another Record Year After 11% Surge
There were 1732 publicly reported US data breaches in the first half of 2025, according to the latest ITRC report This article has been indexed from www.infosecurity-magazine.com Read the original article: US Data Breaches Head for Another Record Year After…