Information Security Magazine

Proofpoint’s Selena Larson notes that threat actors’ reliance on AI has led to lots of mistakes being made, with little evidence of increased sophistication

While Microsoft resolves the global M365 and Outlook outage, cybersecurity teams remain on high alert as cybercriminals prepare to exploit the chaos

New Proofpoint research reveals phishing detections surged 4.5x across Europe year over year, compared with 1.5x globally

TrendAI’s Bob McArdle said ransomware techniques will change significantly in the next year, with AI making attacks more dangerous and profitable

Fortinet finds weak SQL Server passwords used to deliver a miner and Gh0st RAT

Enea linked SilentAir and Liminal Panda to attacks on Asian mobile operators

Lego has taken its BrickLink Marketplace offline after detecting unusual activity as the company investigates the incident

Symantec’s Dick O’Brien says the rapid closure of the patch window means organizations must move beyond patching and adopt an assume exploit mindset

The UK’s National Cyber Security Centre has launched a new Cyber Adversary Simulation (CyAS) scheme

Maersk has revealed a threat actor extracted data from one of its legacy systems

N-able fixes seven N-central CVEs after 33 alleged zero-days are published

VulnCheck’s Patrick Garrity has found that seven months on, Project Glasswing resulted in only 217 vulnerabilities getting fixed, despite thousands reported

Check Point links three China-nexus clusters through a shared Sparrow malware framework

SANS Institute records largest single-year jump in ICS/OT cyber incidents

Microsoft patched a record-breaking 1235 CVEs in November’s Patch Tuesday

CISA adds MITRE ATT&CK detail to incident reports as CIRCIA rule awaits White House review

Turla used compromised Exchange servers to collect NATO and EU-linked emails

AI is amplifying the impact of vulnerabilities, long-lived credentials and other cloud risks, says Datadog

Default admin password on automaker login servers let researchers unlock and start test cars

The BYOD ransomware group has claimed to have locked the university’s databases and stolen sensitive data from its systems