Information Security Magazine

New report warns of escalating hardware supply chain attacks, with 19% of organizations impacted and nearly all IT leaders expecting nation-state involvement

SonicWall discovered the Apache OFBiz flaw, identifying it as a critical issue enabling unauthenticated remote code execution

50% of professionals also cited a lack of expertise as a barrier to effective cyber-risk management

TikTok has committed to permanently withdraw the Lite Rewards program from the EU, after legal proceedings were launched relating to its risks to users, particularly children

The White House and EC-Council scholarship program aims to train over 50,000 students in critical cybersecurity skills

The US government is taking TikTok to court for alleged violations of the COPPA regulation

Volexity claims the StormBamboo group compromised an ISP to push malicious software updates to customers

The UK’s ICO has identified children’s privacy concerns in 11 social media and video sharing platforms, warning of regulatory action if these issues are not addressed

The US Government Accountability Office has told the Environmental Protection Agency to urgently develop a strategy to tackle rising cyber-threats to the water industry

The UK's NCSC is launching ACD 2.0, an advanced suite of cybersecurity tools and services designed to protect businesses from evolving cyber threats

The rise in DDOS attacks against the gaming industry is accompanied by increasing bot activity

UK authorities shut down a scam platform responsible for over 1.3 million calls to 500,000 victims, resulting in millions of pounds in losses

CloudSek said the RansomEXX breach occurred via a misconfigured Jenkins server at Brontoo Technology

Pharma company Cencora confirmed in an updated SEC filing that sensitive personal and health data was exfiltrated by attackers in a February 2024 incident

The “Eriakos” info-stealing campaign is using hundreds of fake web shops to defraud victims

A Vipre study reveals a 20% increase in business email compromise attacks

US non-profit OneBlood has issued an urgent appeal for donations after a ransomware attack has significantly reduced its capacity to distribute blood to hospitals

Discovered by Zimperium’s zLabs team, the SMS Stealer malware was found in over 105,000 samples

Meta has agreed a $1.4bn settlement with the State of Texas for failing to inform Facebook users about its biometric data capturing practices

According to Fortinet, PyPI package Zlibxjson steals Discord tokens and browser data, including passwords and extensive user information