Information Security Magazine

A Vipre study reveals a 20% increase in business email compromise attacks

US non-profit OneBlood has issued an urgent appeal for donations after a ransomware attack has significantly reduced its capacity to distribute blood to hospitals

Discovered by Zimperium’s zLabs team, the SMS Stealer malware was found in over 105,000 samples

Meta has agreed a $1.4bn settlement with the State of Texas for failing to inform Facebook users about its biometric data capturing practices

According to Fortinet, PyPI package Zlibxjson steals Discord tokens and browser data, including passwords and extensive user information

A global outage of Microsoft services was triggered by a DDoS attack, with an error Microsoft’s DDoS protection measures amplifying the impact

IBM reveals a 10% increase in the global cost of a data breach to $4.9m

Zscaler warns of copycat attacks after revealing one ransomware victim paid $75m

The OneDrive campaign uses social engineering to trick users into executing a PowerShell script

According to eSentire, around 400 GenAI account logins are sold daily on the dark web, including credentials for GPT, Quillbot, Notion and Replit

The ICO found that the Electoral Commission did not have appropriate security measures in place, allowing hackers to access the personal details of 40 million UK voters

Picus Security claims just 12% of simulated attacks trigger an alert

Guardio Labs found that attackers exploited a configuration setting in Proofpoint’s email protection service, allowing outbound messages to bypass email protections

Health savings specialist HealthEquity reveals over four million customers were impacted in a recent breach

Updated Mandrake samples, identified by Kaspersky, displayed enhanced obfuscation and evasion tactics

Walmart detailed findings about an unknown PowerShell backdoor, which was potentially utilized alongside a new Zloader variant

Salt Labs also said XSS combined with OAuth can lead to severe breaches

Sapio Research claims that fewer than 50% of European companies place usage and other restrictions on AI

Thousands of customers of cryptocurrency exchange Gemini have had personal data compromised

Synnovis has rebuilt “substantial parts” of its systems following the Qilin ransomware attack on June 3, enabling the restoration of core blood supplies to NHS hospitals