Information Security Magazine

Revival Hijack Python Package Index supply chain attack threatens 22,000 packages through malicious downloads

Despite rising threats researchers find a third of firms see flat or falling security budgets and hiring slows

The first legally binding international treaty on AI was adopted by all 46 Council of Europe member states in May 2024

Cisco has urged customers to apply software updates to fix the critical vulnerabilities, which could allow attackers to collect sensitive data or administer services

A security flaw exploiting side channel attacks means some Yubikeys can be cloned

Hackers interested in targeting OnlyFans users have themselves been singled out by an infostealing campaign

The DoJ says Russia paid a US company $10m to post disinformation that attracted millions of views online

The US White House Office of the National Cyber Director proposes improving internet security by protecting the Border Gateway Protocol

US law enforcement is tracking aggressive social engineering attacks against cryptocurrency operations

Cisco Talos has assessed that red teaming tool MacroPack is being abused by various threat actors in different geographies to deploy malware

The US-based facial recognition data company may even have to pay up to €5.1m in penalties for non-compliance

Cyberint claims that initial access brokers target companies with average revenue of nearly $2bn

UK’s Financial Ombudsman warns fraud and scams hit a record high in Q2 2024

Civil society and journalists’ organizations in Europe ask the EU to take steps to regulate spyware technologies

Researchers say password reset attacks have grown fourfold in the last year and one in four password reset attempts are fraudulent

Searchlight Cyber observed a 56% rise in active ransomware groups in H1 2024, demonstrating the growing fragmentation of the ransomware landscape

A variant of the WikiLoader malware was observed being delivered via SEO poisoning and spoofing Palo Alto Networks’ GlobalProtect VPN software

Three British men are facing jail after pleading guilty to running an MFA bypass site dubbed “OTP Agency”

London’s transport body, TfL, is playing down the impact of a cybersecurity incident on its services

Fota Wildlife Park in Co Cork has told visitors to its website to cancel credit and debit cards, following a cyber-attack