Information Security Magazine

The ACSC, in collaboration with CISA and international partners, has released a guide for securing operational technology in critical sectors

North Korean APT Stonefly continues to launch cyber-attacks on US firms despite July indictment

A Black Kite report found that 67% of manufacturing firms have at least one vulnerability from CISA’s Known Exploited Vulnerabilities (KEV) catalog

Meta has announced a new information-sharing partnership with UK financial institutions to target social media fraud

Socura finds the percentage of women in cybersecurity positions has fallen seven percentage points since 2021 to 17%

UK hacker Robert Westbrook allegedly gained unauthorized access to corporate executives’ email accounts to profit from confidential financial information

The UK has sanctioned 16 members of the notorious Russian hacking group Evil Corp, exposing their links to the prolific LockBit ransomware group

UMC in Lubbock, Texas, confirmed a ransomware attack last week, disrupting patient care and IT systems

T-Mobile will pay $15.75m to the US Treasury for multiple data breaches in 2021, 2022 and 2023 and has agreed to invest in improved cybersecurity defenses

New Santander research claims 10 million UK consumers have suffered fraud since 2021, costing the economy £16bn

New ISACA research reveals most cybersecurity teams are suffering from staffing and funding shortages

The vulnerability, discovered by Wiz researchers, affects both cloud-based and on-premises AI applications using the toolkit

The newly identified vulnerabilities exploit improper input validation when managing printer requests over the network

A Deloitte and NASCIO survey found that a third of state CISOs do not have a dedicated cybersecurity budget

A survey by Ofqual found that 20% of English schools and colleges were unable to immediately recover after being hit by a cyber incident

PwC claims fewer than 50% of businesses involve their CISOs in strategic planning on cyber

Security agencies from the UK and US are urging individuals with Middle East links to beware of Iranian spear phishing attacks

The US, UK, EU and other global partners have called for a global approach to strengthening the security of global communications and data

Ireland's Data Protection Commission fines Meta Platforms €91 million for mishandling user passwords and GDPR violations

The US has sanctioned Cryptex, PM2BTC and a Russian national for processing hundreds of millions of dollars derived from cybercrime