Information Security Magazine

The US government has sanctioned Sichuan Silence and one of its employees for the mass compromise of firewalls which led to the deployment of malware and ransomware

Microsoft has patched dozens of vulnerabilities in December, including one zero-day being exploited in the wild

A zero-day vulnerability in Cleo file transfer software is being exploited in data theft attacks

The multi-cloud data warehousing platform said it will completely phase out single factor authentication with passwords by November 2025

Hackers exploited AWS misconfigurations, leaking 2TB of sensitive data, including customer information, credentials and proprietary source code

The utilities sector saw a 42% surge in ransomware incidents over the past year, with groups like Play focusing on targets with IT and OT systems

New AppLite Banker malware targets Android devices, employing advanced phishing techniques to steal credentials and data

Researchers found that the broad accessibility of streams of Scottish Parliamentary proceedings make them highly susceptible to deepfake attacks

The UK’s privacy regulator the Information Commissioner’s Office has welcomed a Court of Appeal ruling

Artivion has revealed in an SEC filing that it suffered a double-extortion ransomware attack

A Hack The Box Freedom of Information request has shown a significant drop in cyber-attacks reported to the Financial Conduct Authority (FCA) in 2024

Appeals court upheld law forcing TikTok divestiture, citing national security risks over China ties

The compromised ultralytics AI library delivered XMRig miner via GitHub Actions exploit

The UK's ICO has published its findings following a two-year trial of its Public Sector Approach, which aimed to improve data protection compliance and deter data breaches

This new ransomware group is likely a new variant of Babuk, said Cyble threat intelligence analysts

CERT-UA has issued a warning about phishing emails targeting Ukrainian defense companies and security forces

Massachusetts’ Anna Jacques Hospital notifies over 316,000 patients of a data breach a year ago

Dutch and Belgian police have arrested eight in connection with a long-running phone phishing operation

The Salt Typhoon hack against US telecommunications firms has prompted the FCC to suggest stricter security rules to protect the sector from future cyber threats

Cǎlin Georgescu went from polling around 1% a month before the Romanian presidential election to winning the first round