Information Security Magazine

Researchers have warned that a critical SonicWall vulnerability is being exploited in ransomware attacks

Increasingly complex regulations are stretching governance and compliance in organizations, warns the IAPP

Distributed denial of service attacks continue to increase, with government the most targeted vertical

A cyber-attack on Slim CD, which handles electronic payments for US and Canadian-based merchants, has potentially exposed the credit card details of 1.7 million people

A North Carolina resident made over $10m in unlawful royalty payments by producing hundreds of thousands of fake songs listened to by bots using AI

Rental hire company Avis has notified 300,000 customers of a data breach

Transport for London has revealed several digital services are suspended after a cyber-attack last week

The secret web of at least 435 entities across 42 countries making up the spyware landscape facilitates unpunished security and human rights violations, the Atlantic Council found

The joint government advisory highlighted the cyber activities of Unit 29155, which has launched destructive cyber-attacks against critical infrastructure globally

Revival Hijack Python Package Index supply chain attack threatens 22,000 packages through malicious downloads

Despite rising threats researchers find a third of firms see flat or falling security budgets and hiring slows

The first legally binding international treaty on AI was adopted by all 46 Council of Europe member states in May 2024

Cisco has urged customers to apply software updates to fix the critical vulnerabilities, which could allow attackers to collect sensitive data or administer services

A security flaw exploiting side channel attacks means some Yubikeys can be cloned

Hackers interested in targeting OnlyFans users have themselves been singled out by an infostealing campaign

The DoJ says Russia paid a US company $10m to post disinformation that attracted millions of views online

The US White House Office of the National Cyber Director proposes improving internet security by protecting the Border Gateway Protocol

US law enforcement is tracking aggressive social engineering attacks against cryptocurrency operations

Cisco Talos has assessed that red teaming tool MacroPack is being abused by various threat actors in different geographies to deploy malware

The US-based facial recognition data company may even have to pay up to €5.1m in penalties for non-compliance