Information Security Magazine

Medtronic confirms IT breach as ShinyHunters claims millions of records accesseda

Ransomware groups 0APT and KryBit have doxxed each other online

Extradition links alleged MSS-directed hacker to Silk Typhoon and COVID-19 espionage

The National Cyber Security Centre has warned against measuring SOCs with ticket-based metrics

Arctic Wolf attributed this large-scale spear-phishing campaign to BlueNoroff, a financially motivated subgroup of the Lazarus Group

US sanctions target Cambodian scam networks tied to crypto fraud and trafficking

Itron confirmed a cyber incident but does not believe it is likely to have a material impact on the company

Dozens of browser extensions openly sell user data via privacy policy disclosures

A new report by global technology recruitment firm, Harvey Nash, found that three quarters of cybersecurity staff are pessimistic on pay and half are looking for a new job

The “fast16” malware may have been used to target Iran’s nuclear program prior to Stuxnet

Researchers uncover a new data theft and extortion group dubbed “BlackFile”

UK government Minister confirms that breached health records of UK Biobank volunteers were up for sale on Chinese ecommerce platforms before being removed

AI tools are not just creating new vulnerabilities, they are reviving old security failures, warned Jurgen Kutscher, VP of Mandiant Consulting

Malicious npm packages spread via worm-like propagation and steal developer credentials

Google Cloud’s COO advocated for combining general-purpose frontier large language models with task-specific AI agents

Apple patches iOS flaw that retained deleted notifications, exposing message data

Google Cloud will attribute a unique cryptographic ID every AI agent that will be tied to “traceable and auditable” authorization policies

Quorum Cyber report finds higher and further education institutions experienced 63% increase in attacks over a year

Forcepoint has found 10 new indirect prompt injection attacks targeting AI agents

The UK’s NCSC has fully backed passkeys as consumers’ first choice for login, citing progress with FIDO and successful use across the NHS