Tag: www.infosecurity-magazine.com

Turkey-Aligned Hackers Targeted Iraq-Based Kurds with Zero-Day Exploit

Marbled Dust has been exploiting a vulnerability in user accounts associated with the Kurdish military operating in Iraq for over a year, according to Microsoft This article has been indexed from www.infosecurity-magazine.com Read the original article: Turkey-Aligned Hackers Targeted Iraq-Based…

DPRK-Backed TA406 Targets Ukraine With Malware Campaigns

Cyber espionage campaign linked to North Korean actor TA406 targeted Ukrainian government entities This article has been indexed from www.infosecurity-magazine.com Read the original article: DPRK-Backed TA406 Targets Ukraine With Malware Campaigns

CISA Shifts Alert Distribution Strategy to Email, Social Media

CISA won’t post standard cybersecurity updates on its website, shifting to email and social media This article has been indexed from www.infosecurity-magazine.com Read the original article: CISA Shifts Alert Distribution Strategy to Email, Social Media

M&S Confirms Customer Data Stolen in Cyber-Attack

M&S Chief Executive, Stuart Machin, said that the firm has written to customers to inform them that some personal information was accessed by threat actors This article has been indexed from www.infosecurity-magazine.com Read the original article: M&S Confirms Customer Data…

European Vulnerability Database Launches Amid US CVE Chaos

ENISA has officially launched the European Vulnerability Database as required by the NIS2 directive This article has been indexed from www.infosecurity-magazine.com Read the original article: European Vulnerability Database Launches Amid US CVE Chaos

UK Considers New Enterprise IoT Security Law

The UK government wants to hear feedback on a possible new standard or legislation to improve enterprise IoT security This article has been indexed from www.infosecurity-magazine.com Read the original article: UK Considers New Enterprise IoT Security Law

Criminal Proxy Network Infects Thousands of IoT Devices

The criminal proxy network infected thousands of IoT and end-of-life devices, creating dangerous botnet This article has been indexed from www.infosecurity-magazine.com Read the original article: Criminal Proxy Network Infects Thousands of IoT Devices

EU Launches Free Entry-Level Cyber Training Program

She@Cyber training program is focused on improving the representation of women and other underrepresented groups in the cybersecurity industry This article has been indexed from www.infosecurity-magazine.com Read the original article: EU Launches Free Entry-Level Cyber Training Program

FreeDrain Phishing Scam Drains Crypto Hobbyists’ Wallets

A global cryptocurrency phishing operation likely based in India or Sri Lanka has been stealing digital assets since at least 2022 This article has been indexed from www.infosecurity-magazine.com Read the original article: FreeDrain Phishing Scam Drains Crypto Hobbyists’ Wallets

Japanese Account Hijackers Make $2bn+ of Illegal Trades

Hackers have compromised Japanese trading accounts in an apparent attempt to manipulate the stock market This article has been indexed from www.infosecurity-magazine.com Read the original article: Japanese Account Hijackers Make $2bn+ of Illegal Trades

German Police Shutter “eXch” Money Laundering Service

Germany’s BKA has seized the infrastructure behind the crypto swapping service eXch This article has been indexed from www.infosecurity-magazine.com Read the original article: German Police Shutter “eXch” Money Laundering Service

UN Launches New Cyber-Attack Assessment Framework

The UNIDR Intrusion Path is designed to provide a simplified view of cyber-threats and security across the network perimeter This article has been indexed from www.infosecurity-magazine.com Read the original article: UN Launches New Cyber-Attack Assessment Framework

PowerSchool Admits Ransom Payment Amid Fresh Extortion Demands

PowerSchool said its customers had been hit by new extortion demands using data stolen in a previous attack, despite attacker claims the data had been deleted This article has been indexed from www.infosecurity-magazine.com Read the original article: PowerSchool Admits Ransom…

Russian Group Launches LOSTKEYS Malware in Attacks

New LOSTKEYS malware has been identified and linked to COLDRIVER by GTIG, stealing files and system data in targeted attacks This article has been indexed from www.infosecurity-magazine.com Read the original article: Russian Group Launches LOSTKEYS Malware in Attacks

LockBit Ransomware Hacked, Insider Secrets Exposed

The data dump will likely shed light on LockBit’s recent activity and help law enforcement trace cryptocurrency transactions This article has been indexed from www.infosecurity-magazine.com Read the original article: LockBit Ransomware Hacked, Insider Secrets Exposed

UK Cyber Essentials Certification Numbers Falling Short

The UK government is set to prioritize increasing the number of UK organizations who are Cyber Essentials certified over the coming year This article has been indexed from www.infosecurity-magazine.com Read the original article: UK Cyber Essentials Certification Numbers Falling Short

Hacker Finds New Technique to Bypass SentinelOne EDR Solution

Security researchers at Aon have discovered a threat actor who bypassed SentinelOne EDR protection to deploy Babuk ransomware This article has been indexed from www.infosecurity-magazine.com Read the original article: Hacker Finds New Technique to Bypass SentinelOne EDR Solution

DDoS-for-Hire Network Dismantled in International Operation

A prolific DDoS-for-hire network has been dismantled by Polish authorities as part of a coordinated international crackdown This article has been indexed from www.infosecurity-magazine.com Read the original article: DDoS-for-Hire Network Dismantled in International Operation

NSO Group Hit with $168m Fine for WhatsApp Pegasus Spyware Abuse

The Israeli spyware maker must pay $444,719 in compensatory damages to Meta and $167.25m in punitive damages This article has been indexed from www.infosecurity-magazine.com Read the original article: NSO Group Hit with $168m Fine for WhatsApp Pegasus Spyware Abuse

Passkeys Set to Protect GOV.UK Accounts Against Cyber-Attacks

The UK government has announced that it will be replace its current SMS verification system with passkeys by the end of 2025 This article has been indexed from www.infosecurity-magazine.com Read the original article: Passkeys Set to Protect GOV.UK Accounts Against…

UK Cyber Insurance Claims Second Highest on Record

Marsh says ransomware drove cyber insurance claims to second highest on record in 2024 This article has been indexed from www.infosecurity-magazine.com Read the original article: UK Cyber Insurance Claims Second Highest on Record

UK Government Warns Retail Attacks Must Serve as a “Wake-up Call”

UK government minister Pat McFadden said during CYBERUK that the incidents affecting M&S, Co-op and Harrods show that cybersecurity is a necessity This article has been indexed from www.infosecurity-magazine.com Read the original article: UK Government Warns Retail Attacks Must Serve…

Texas School District Notifies Over 47,000 People of Major Data Breach

The Alvin Independent School District in Texas has notified over 47,000 individuals affected by a data breach exposing sensitive personal information This article has been indexed from www.infosecurity-magazine.com Read the original article: Texas School District Notifies Over 47,000 People of…

Smishing Triad Upgrades Tools and Tactics for Global Attacks

Global smishing campaigns linked to Chinese cybercriminals escalate with Smishing Triad’s new tools and techniques This article has been indexed from www.infosecurity-magazine.com Read the original article: Smishing Triad Upgrades Tools and Tactics for Global Attacks

Inside DragonForce, the Group Tied to M&S, Co-op and Harrods Hacks

Individuals allegedly linked to the DragonForce cybercriminal syndicate have claimed the attack on the three UK retailers This article has been indexed from www.infosecurity-magazine.com Read the original article: Inside DragonForce, the Group Tied to M&S, Co-op and Harrods Hacks

Darcula Phishing as a Service Operation Snares 800,000+ Victims

Prolific PhaaS operation Darcula uses Magic Cat software to steal over 800,000 cards in a seven-month period This article has been indexed from www.infosecurity-magazine.com Read the original article: Darcula Phishing as a Service Operation Snares 800,000+ Victims

UK’s NCSC Offers Security Tips as Co-op Confirms Data Loss

The National Cyber Security Centre has published advice for retailers while the Co-op admits customer data was stolen This article has been indexed from www.infosecurity-magazine.com Read the original article: UK’s NCSC Offers Security Tips as Co-op Confirms Data Loss

TikTok Fined €530m Over Transfers of European User Data to China

Ireland’s data protection watchdog accuses the Chinese social media giant of violating GDPR with transfers of European users’ data to China This article has been indexed from www.infosecurity-magazine.com Read the original article: TikTok Fined €530m Over Transfers of European User…

Ransomware Attacks Fall in April Amid RansomHub Outage

Comparitech observed a significant decline in ransomware attacks in April, partly as a result of the RansomHub gang “going dark” This article has been indexed from www.infosecurity-magazine.com Read the original article: Ransomware Attacks Fall in April Amid RansomHub Outage

CISA Confirms Exploitation of SonicWall Vulnerabilities

The US Cybersecurity and Infrastructure Security Agency has added two flaws affecting SonicWall products to its catalog of Known Exploited Vulnerabilities This article has been indexed from www.infosecurity-magazine.com Read the original article: CISA Confirms Exploitation of SonicWall Vulnerabilities

White House Warns China of Cyber Retaliation Over Infrastructure Hacks

NSC’s Alexei Bulazel said that failing to robustly respond to constant Chinese intrusions into critical infrastructure is in itself “escalatory” This article has been indexed from www.infosecurity-magazine.com Read the original article: White House Warns China of Cyber Retaliation Over Infrastructure…

Claude Chatbot Used for Automated Political Messaging

Anthropic has found its Claude chatbot is being used for automated political messaging, enabling AI-driven influence campaigns This article has been indexed from www.infosecurity-magazine.com Read the original article: Claude Chatbot Used for Automated Political Messaging

Large-Scale Phishing Campaigns Target Russia and Ukraine

A large-scale phishing campaign using DarkWatchman and Sheriff malware has been observed targeting companies in Russia and Ukraine This article has been indexed from www.infosecurity-magazine.com Read the original article: Large-Scale Phishing Campaigns Target Russia and Ukraine

Mystery Box Scams Deployed to Steal Credit Card Data

Bitdefender highlighted the growing use of subscription scams, in which victims are lured by adverts into recurring payments for fake products This article has been indexed from www.infosecurity-magazine.com Read the original article: Mystery Box Scams Deployed to Steal Credit Card…

Meta Unveils New Advances in AI Security and Privacy Protection

Alongside its new Meta AI app, Facebook’s parent company launched several new products to help secure open-source AI applications This article has been indexed from www.infosecurity-magazine.com Read the original article: Meta Unveils New Advances in AI Security and Privacy Protection

FBI Publishes 42,000 LabHost Phishing Domains

The FBI has released details of 42,000 phishing domains associated with the LabHost operation, in order to help the security community This article has been indexed from www.infosecurity-magazine.com Read the original article: FBI Publishes 42,000 LabHost Phishing Domains

RansomHub Refines Extortion Strategy as RaaS Market Fractures

RansomHub refines extortion strategy amid RaaS market fractures, expanding affiliate recruitment This article has been indexed from www.infosecurity-magazine.com Read the original article: RansomHub Refines Extortion Strategy as RaaS Market Fractures

Microsoft Expands Cloud, AI Footprint Across Europe

Microsoft has announced plans to expand cloud and AI infrastructure in the EU, increasing data center capacity by 40% by 2027 This article has been indexed from www.infosecurity-magazine.com Read the original article: Microsoft Expands Cloud, AI Footprint Across Europe

DHS Head Accuses CISA of Acting Like “the Ministry of Truth”

Kristi Noem said the Trump administration is introducing reforms to ensure CISA is focusing on the core security functions it was created for This article has been indexed from www.infosecurity-magazine.com Read the original article: DHS Head Accuses CISA of Acting…

JPMorgan CISO Urges SaaS Security Reset

JPMorgan’s CISO has argued that SaaS apps represent a growing risk to businesses, “quietly enabling cyber attackers” This article has been indexed from www.infosecurity-magazine.com Read the original article: JPMorgan CISO Urges SaaS Security Reset

France Slams Russia’s APT28 for Four-Year Cyber-Espionage Campaign

The French government has criticized Russia’s APT28 group for attacking 12 entities in a long-running espionage campaign This article has been indexed from www.infosecurity-magazine.com Read the original article: France Slams Russia’s APT28 for Four-Year Cyber-Espionage Campaign

New WordPress Malware Masquerades as Plugin

New WordPress malware disguised as a plugin gives attackers persistent access and injects malicious code enabling administrative control This article has been indexed from www.infosecurity-magazine.com Read the original article: New WordPress Malware Masquerades as Plugin

New Gremlin Infostealer Distributed on Telegram

Administrators of a Telegram channel named CoderSharp have been advertising Gremlin Stealer since March 2025 This article has been indexed from www.infosecurity-magazine.com Read the original article: New Gremlin Infostealer Distributed on Telegram

Infostealers Harvest Over 30,000 Australian Banking Credentials

Dvuln researchers highlighted the growing impact of infostealers on the cybercrime landscape, enabling attackers to bypass traditional defenses This article has been indexed from www.infosecurity-magazine.com Read the original article: Infostealers Harvest Over 30,000 Australian Banking Credentials

Zero-Day Exploitation Figure Surges 19% in Two Years

Google claims 19% more zero-day bugs were exploited in 2024 than 2022 as threat actors focus on security products This article has been indexed from www.infosecurity-magazine.com Read the original article: Zero-Day Exploitation Figure Surges 19% in Two Years

Europol Creates “Violence-as-a-Service” Taskforce

Europol has launched a new initiative designed to combat recruitment of youngsters into violent organized crime groups This article has been indexed from www.infosecurity-magazine.com Read the original article: Europol Creates “Violence-as-a-Service” Taskforce

Uyghur Diaspora Group Targeted with Remote Surveillance Malware

Members of the World Uyghur Congress living in exile were targeted with a spear phishing campaign deploying surveillance malware, according to the Citizen Lab This article has been indexed from www.infosecurity-magazine.com Read the original article: Uyghur Diaspora Group Targeted with…

Half of Mobile Devices Run Outdated Operating Systems

50% of mobile devices run outdated operating systems, increasing vulnerability to cyber-attacks, according to the latest report from Zimperium This article has been indexed from www.infosecurity-magazine.com Read the original article: Half of Mobile Devices Run Outdated Operating Systems

Researchers Note 16.7% Increase in Automated Scanning Activity

According to the 2025 Global Threat Landscape Report from FortiGuard, threat actors are executing 36,000 scans per second This article has been indexed from www.infosecurity-magazine.com Read the original article: Researchers Note 16.7% Increase in Automated Scanning Activity

FBI Asks for Help Tracking Chinese Salt Typhoon Actors

The US authorities have asked the public to help them unmask China’s Salt Typhoon threat actors This article has been indexed from www.infosecurity-magazine.com Read the original article: FBI Asks for Help Tracking Chinese Salt Typhoon Actors

Government Set to Ban SIM Farms in European First

The UK government says it will ban the possession or supply of SIM farms, in a fraud crackdown This article has been indexed from www.infosecurity-magazine.com Read the original article: Government Set to Ban SIM Farms in European First

Law Enforcement Crackdowns Drive Novel Ransomware Affiliate Schemes

Increased law enforcement pressure has forced ransomware groups like DragonForce and Anubis to move away from traditional affiliate models This article has been indexed from www.infosecurity-magazine.com Read the original article: Law Enforcement Crackdowns Drive Novel Ransomware Affiliate Schemes

M&S Shuts Down Online Orders Amid Ongoing Cyber Incident

British retailer M&S continues to tackle a cyber incident with online orders now paused for customers This article has been indexed from www.infosecurity-magazine.com Read the original article: M&S Shuts Down Online Orders Amid Ongoing Cyber Incident

US Data Breach Lawsuits Total $155M Amid Cybersecurity Failures

Panaseer’s latest cybersecurity study revealed that US companies have paid $155M in data breach lawsuit settlements over just six months This article has been indexed from www.infosecurity-magazine.com Read the original article: US Data Breach Lawsuits Total $155M Amid Cybersecurity Failures

Popular LLMs Found to Produce Vulnerable Code by Default

Backslash Security found that naïve prompts resulted in code vulnerable to at least four of the of the 10 most common vulnerabilities across popular LLMs This article has been indexed from www.infosecurity-magazine.com Read the original article: Popular LLMs Found to…

ELENOR-corp Ransomware Targets Healthcare Sector

ELENOR-corp ransomware, a new version of Mimic, is targeting healthcare organizations using advanced capabilities This article has been indexed from www.infosecurity-magazine.com Read the original article: ELENOR-corp Ransomware Targets Healthcare Sector

Blue Shield of California Data Breach Affects 4.7 Million Members

A misconfigured tracking tool has exposed protected health information of 4.7 million Blue Shield members to Google Ads This article has been indexed from www.infosecurity-magazine.com Read the original article: Blue Shield of California Data Breach Affects 4.7 Million Members

Highest-Risk Security Flaw Found in Commvault Backup Solutions

A critical path traversal vulnerability in Commvault’s backup and replication solutions has been reported This article has been indexed from www.infosecurity-magazine.com Read the original article: Highest-Risk Security Flaw Found in Commvault Backup Solutions

Ransomware Attacks Fall Sharply in March

NCC Group found that ransomware attacks fell by 32% in March compared to February, but described this finding as a “red herring” This article has been indexed from www.infosecurity-magazine.com Read the original article: Ransomware Attacks Fall Sharply in March

ETSI Unveils New Baseline Requirements for Securing AI

ETSI’s says new technical specification for securing AI models and systems sets international benchmark This article has been indexed from www.infosecurity-magazine.com Read the original article: ETSI Unveils New Baseline Requirements for Securing AI

Ofcom Lays Down the Law with Child Safety Rules for Tech Giants

Ofcom’s Protection of Children Codes and Guidance lists 40 new child safety measures for tech firms This article has been indexed from www.infosecurity-magazine.com Read the original article: Ofcom Lays Down the Law with Child Safety Rules for Tech Giants

Verizon’s DBIR Reveals 34% Jump in Vulnerability Exploitation

After a 180% rise in last year’s report, the exploitation of vulnerabilities continues to grow, now accounting for 20% of all breaches This article has been indexed from www.infosecurity-magazine.com Read the original article: Verizon’s DBIR Reveals 34% Jump in Vulnerability…

FBI Reveals “Staggering” $16.6bn Lost to Cybercrime in 2024

The FBI found that cybercrime losses climbed by 33% compared to 2023, driven by tactics like investment fraud and BEC This article has been indexed from www.infosecurity-magazine.com Read the original article: FBI Reveals “Staggering” $16.6bn Lost to Cybercrime in 2024

M&S Grapples with Cyber Incident Affecting In-Store Services

Marks and Spencer has confirmed that it has been managing a cyber incident for the past few days which affected its contactless payments and click and collect services This article has been indexed from www.infosecurity-magazine.com Read the original article: M&S…

US Data Breach Victim Count Surges 26% Annually

The latest ITRC data finds breach volumes remained flat in Q1 but victim numbers increased 26% annually This article has been indexed from www.infosecurity-magazine.com Read the original article: US Data Breach Victim Count Surges 26% Annually

UK Romance Scams Spike 20% as Online Dating Grows

Barclays found that romance scam victims lost £8000 on average in 2024, a significant increase from the previous year This article has been indexed from www.infosecurity-magazine.com Read the original article: UK Romance Scams Spike 20% as Online Dating Grows

SuperCard X Enables Contactless ATM Fraud in Real-Time

A new malware campaign utilizing NFC-relay techniques has been identified carrying out unauthorized transactions through POS systems and ATMs This article has been indexed from www.infosecurity-magazine.com Read the original article: SuperCard X Enables Contactless ATM Fraud in Real-Time

Billbug Espionage Group Deploys New Tools in Southeast Asia

Billbug, a China-linked espionage group, has been observed targeting critical sectors in Southeast Asia with new tools This article has been indexed from www.infosecurity-magazine.com Read the original article: Billbug Espionage Group Deploys New Tools in Southeast Asia

NTLM Hash Exploit Targets Poland and Romania Days After Patch

An NTLM hash disclosure spoofing vulnerability that leaks hashes with minimal user interaction has been observed being exploited in the wild This article has been indexed from www.infosecurity-magazine.com Read the original article: NTLM Hash Exploit Targets Poland and Romania Days…