Information Security Magazine

A Ukrainian man has pleaded guilty to charges connecting him to Nefilim ransomware attacks

Fortra has uncovered a prolific BEC group dubbed “Scripted Sparrow” spanning three continents and at least five countries

The Danish intelligence service believes some pro-Russian hacktivist groups have links with the Kremlin

The US has charged 54 individuals in a massive ATM jackpotting conspiracy linked to Venezuelan crime syndicate Tren de Aragua, accused of stealing millions

A 39-year-old Russian national is accused of working with cybercriminals to convert criminal proceeds from cryptocurrency into various cash currencies

A surge in phishing attacks exploiting Microsoft’s OAuth device code flow has been identified by Proofpoint

Chainalysis warns North Korea continues to steal billions in crypto for its weapons program

A new variant of the BeaverTail malware linked to North Korean hackers has been identified targeting cryptocurrency traders and developers

The UK’s tax office has received 135,500 reports of suspected scams in the past 10 months including 4800 related to self assessment filings

A critical flaw in the Motors WordPress theme affecting more than 20,000 installations allows low-privileged users to gain full control of websites

A novel attack technique dubbed ”Lies-in-the-Loop” (LITL) has been observed manipulating human approval prompts in agentic AI systems

ISACA has been appointed by the US DoD as the global credentialing authority for its CMMC program

LKQ confirmed that over 9000 individuals saw their personal data compromised because of the breach

Eurojust reveals new policing operation which helped to smash a Ukraine-based call center fraud gang

China’s Ink Dragon is using European government networks to hide its espionage activity

The browser extension Urban VPN Proxy has been reportedly collecting users’ AI chat conversations

A flaw in JumpCloud Remote Assist for Windows has exposed managed endpoints to local privilege escalation and denial-of-service attacks

Amazon researchers believe this campaign is part of a bigger operation spearheaded by Russia’s military intelligence service, the GRU

US financial services firm Credit700 has revealed a major data breach impacting 5.8 million people

Check Point has detected thousands of phishing emails in the past fortnight, offering fake promotions and special deals