Information Security Magazine

IBM reveals a 10% increase in the global cost of a data breach to $4.9m

Zscaler warns of copycat attacks after revealing one ransomware victim paid $75m

The OneDrive campaign uses social engineering to trick users into executing a PowerShell script

According to eSentire, around 400 GenAI account logins are sold daily on the dark web, including credentials for GPT, Quillbot, Notion and Replit

The ICO found that the Electoral Commission did not have appropriate security measures in place, allowing hackers to access the personal details of 40 million UK voters

Picus Security claims just 12% of simulated attacks trigger an alert

Guardio Labs found that attackers exploited a configuration setting in Proofpoint’s email protection service, allowing outbound messages to bypass email protections

Health savings specialist HealthEquity reveals over four million customers were impacted in a recent breach

Updated Mandrake samples, identified by Kaspersky, displayed enhanced obfuscation and evasion tactics

Walmart detailed findings about an unknown PowerShell backdoor, which was potentially utilized alongside a new Zloader variant

Salt Labs also said XSS combined with OAuth can lead to severe breaches

Sapio Research claims that fewer than 50% of European companies place usage and other restrictions on AI

Thousands of customers of cryptocurrency exchange Gemini have had personal data compromised

Synnovis has rebuilt “substantial parts” of its systems following the Qilin ransomware attack on June 3, enabling the restoration of core blood supplies to NHS hospitals

CrowdStrike has acknowledged the claims by the USDoD hacktivist group, which has provided a link to download the alleged threat actor list on a cybercrime forum

Despite bans on AI code generation tools, widespread use and lack of governance are creating significant security risks for organizations

A joint advisory by the UK, US and South Korea have warned of a global espionage campaign by a North Korea threat actor, Andariel, targeting CNI organizations

Cisco Talos found that ransomware and BEC accounted for 60% of all cyber incidents in Q2 2024, with ransomware rising by 22% compared to Q1

SonicWall observed a surge in malware attacks in H1 2024, with strains becoming more adept at defense evasion