Information Security Magazine

Marbled Dust has been exploiting a vulnerability in user accounts associated with the Kurdish military operating in Iraq for over a year, according to Microsoft

Cyber espionage campaign linked to North Korean actor TA406 targeted Ukrainian government entities

CISA won't post standard cybersecurity updates on its website, shifting to email and social media

ENISA has officially launched the European Vulnerability Database as required by the NIS2 directive

M&S Chief Executive, Stuart Machin, said that the firm has written to customers to inform them that some personal information was accessed by threat actors

The UK government wants to hear feedback on a possible new standard or legislation to improve enterprise IoT security

Hacktivist claims on Indian infrastructure raised alarms, but investigations showed minimal damage

The criminal proxy network infected thousands of IoT and end-of-life devices, creating dangerous botnet

During Infosecurity Europe 2025 experts will explore how to strengthen organizational resilience against persistent third-party risks

She@Cyber training program is focused on improving the representation of women and other underrepresented groups in the cybersecurity industry

A global cryptocurrency phishing operation likely based in India or Sri Lanka has been stealing digital assets since at least 2022

Hackers have compromised Japanese trading accounts in an apparent attempt to manipulate the stock market

Germany’s BKA has seized the infrastructure behind the crypto swapping service eXch

The tech giant plans to leverage its Gemini Nano LLM on-device to enhance scam detection on Chrome

The UNIDR Intrusion Path is designed to provide a simplified view of cyber-threats and security across the network perimeter

The FBI has detected indicators of malware targeting end-of-life routers associated with Anyproxy and 5Socks proxy services

PowerSchool said its customers had been hit by new extortion demands using data stolen in a previous attack, despite attacker claims the data had been deleted

Cyber incidents targeting OT in US critical infrastructure have prompted renewed federal action

New LOSTKEYS malware has been identified and linked to COLDRIVER by GTIG, stealing files and system data in targeted attacks

The data dump will likely shed light on LockBit’s recent activity and help law enforcement trace cryptocurrency transactions