Information Security Magazine

Most organizations are not prepared for the post-quantum threat, despite the recent publication of NIST's first three finalized post-quantum encryption standards

Microsoft has observed nation states ramping up cooperation with cybercriminals to conduct operations in the past year

The sophisticate campaign, ErrorFather, employs keylogging, virtual networks and a domain generation algorithm to target Android users

Coalition’s new service aims to mitigate the impact of growing UK corporate fraud losses

Zscaler has found more than 200 malicious apps on Google Play with over eight million installs

Online scammers are targeting Booking.com and Airbnb users with Telekopye, a Telegram-based toolkit

CISA urged organizations to tackle security risks from unencrypted cookies in F5 BIG-IP LTM systems

The US DoD has finalized the Cybersecurity Maturity Model Certification (CMMC) Program, which defense contractors must pass to bid for government contracts

Personal data of over 2600 employees has been exposed and insider information about the Switch 2 and future Pokémon games leaked

Japanese electronics firm Casio has reported a ransomware attack and data breach

Sophos claims that a lack of cybersecurity talent is considered a major risk by SMBs

NHS England has issued an alert regarding a critical Veeam Backup & Replication vulnerability that is being actively exploited, potentially leading to remote code execution

Access Now announced that the US Customs and Border Protection agency released records on its app following the NGO’s lawsuit

A new Sonatype report reveals a 156% surge in open source malware, with over 704,102 malicious packages identified since 2019, as OSS adoption continues to skyrocket

Russian-backed APT29 has been spying on US and European organizations since at least 2021, a US-UK joint advisory said

Operation MiddleFloor targets Moldova’s October elections, spreading EU disinformation via email

The data breach exposed more than 10m customer conversations from an AI call center platform in the Middle East

The EU's Cyber Resilience Act requires cybersecurity standards for all connected products throughout their entire lifecycle

Marriott will pay $52m to 50 US states for a data breach impacting 131.5 million American customers, and has agreed to implement stronger security practices

The non-profit digital library was also hit by at least two DDoS attacks in two days