Information Security Magazine

Murdoc_Botnet used Mirai malware to exploit IoT vulnerabilities, targeting devices globally

Security experts have outlined security and privacy concerns around the UK government’s GOV.UK Wallet, which will allow citizens to store all their ID documents in a single place

A CloudSEK report revealed Zendesk's platform can be exploited for phishing and investment scams

Data from DLA Piper showed a 33% year-on-year fall in GDPR fines issued in Europe in 2024, with total penalties reaching €1.2bn

Critical flaws include those in Oracle Supply Chain products

Sophos has warned of IT impersonation vishing attacks designed to remotely deploy ransomware

ISACA research claims privacy budgets are set to decline further in 2025

HPE is investigating claims of data breach by hacker IntelBroker, who offered stolen files for sale

Android apps, linked to APT group DONOT, disguised as a chat platform for intelligence gathering

The December 2024 cyber-attack on the country’s state registers, was attributed to Russian military intelligence services

The US has issued sanctions against an individual and a company involved in recent high-profile compromises of government officials by Chinese state-affiliated hackers

CIA analysts Asif William Rahman has pleaded guilty to sharing classified documents about an Israeli attack

At least half a million accounts have been compromised after a breach at hotel management software firm Otelier

The Supreme Court has upheld a law that could potentially ban TikTok in the US

SecurityScorecard identified a new campaign in which the North Korean Lazarus group aims to steal source code, secrets and cryptocurrency wallet keys from developer environments

Microsoft highlighted a new Star Blizzard campaign targeting WhatsApp accounts, as the group adapts its TTPs following the takedown of its infrastructure by law enforcement

AliExpress, Shein, Temu, TikTok, WeChat and Xiaomi are accused of operating unlawful data transfers to China

The EU’s DORA regulation is in effect as of January 17, with mixed evidence around compliance levels among financial firms

Middle East real estate scams are surging as fraudsters exploit online listings and bypassed due diligence checks

Truth Social, launched by the Trump Media & Technology Group in 2022, has become a hotspot for scams like phishing and investment fraud