Information Security Magazine

The new NIST guidance sets out 19 example implementations of zero trust using commercial, off-the-shelf technologies

Europol warns of “vicious circle” of data breaches and cybercrime

Erie Insurance reveals suspected network breach and ongoing outage

The legislation aims to expand the federal government’s role in helping healthcare providers protect and respond to cyber-attacks

Interpol-coordinated Operation Secure led to 32 arrests, including the suspected ringleader of a cybercriminal organization

An ISC2 study found that 90% of security hiring managers would consider entry-level candidates with only previous IT work experience

The products affected by the issues are part of the Salesforce OmniStudio suite, including FlexCards and Data Mappers

Malwarebytes claims 44% of mobile users are exposed to scams every day

Microsoft has patched two zero days this month, one of which is being exploited in the wild

Android Enterprise has introduced features for mobile security, device management and user productivity in its latest update

A ransomware attack on Mastery Schools, Philadelphia, has compromised personal information of 37,031 individuals, exposing sensitive data

The financial sector was the industry most targeted by distributed denial-of-service (DDoS) attacks in 2024, with a peak in October

SentinelOne revealed details of two new intrusion attempts by China-nexus actors

UNFI says it is investigating unauthorized network activity, and that some operations are affected

Vulnerability in PayU CommercePro plugin allows account hijacking on thousands of WordPress sites

New PathWiper malware targeted Ukrainian critical infrastructure, using legitimate tools for cyber-attacks

A new Trump Executive Order limits the use of cybersecurity-related sanctions only against foreign malicious actors

The Justice Department has filed a civil forfeiture complaint alleging North Korean IT workers amassed $7m+

The FBI says mainly Chinese-made IoT devices pose a threat from Badbox 2.0 malware

The ransomware group combines IT vendor impersonation and phishing frameworks like Evilginx to breach its targets