Information Security Magazine

CERT-UA said the phishing campaign lures victims into downloading malware used to exfiltrate files containing sensitive personal data

LinkedIn violated the EU’s GDPR in how it processes its users personal data for behavioral purposes

A new ISACA study reveals that pay inequity and a lack of female leadership are significant issues noted by women in the digital trust sector

An unidentified threat actor has attempted to develop ransomware targeting macOS devices, posing as LockBit

Lazarus Group exploited Google Chrome zero-day, infecting systems with Manuscrypt malware

Penn State will pay $1.25m for failing federal cybersecurity standards in DoD and NASA contracts

The National Security Memorandum on AI sets out actions for the federal government to ensure the safe, secure and trustworthy development of AI

This high-severity flaw, dubbed FortiJump by security researcher Kevin Beaumont, has been added to CISA’s KEV catalog

The Data (Use and Access) Bill governs digital verification services and the use of personal data in public services, and will revamp the Information Commissioner’s Office

A new ISACA study has revealed that cybersecurity professionals are often overlooked in the development of AI policies

On the 10th anniversary since Cyber Essentials was introduced, the UK government has highlighted the impact the scheme has had in preventing attacks

WarmCookie malware, aka BadSpace, spreads via malspam, malvertising and enables persistent access

The recently discovered Embargo ransomware group is using Rust-based custom tools to overcome victims’ security defenses, ESET researchers have observed

Former UK PM David Cameron called for stronger defenses against Chinese cyber espionage while advocating collaboration with Beijing, coinciding with the BRICS Summit

70% of leaders see cyber knowledge gap; AI attacks are harder to detect, 60% expect more victims

While Internet Archive’s services slowly resume, the data breach reveals the non-profit’s security failures

The US government has issued guidance for federal agencies on the use of Traffic Light Protocol, designed to boost intelligence sharing with the cybersecurity community

The British Minister for Security Dan Jarvis said at Recorded Future’s Predict 2024 that the new government was considering reforming the 1990 legislation

45% of security breaches in the energy sector in the past year were third-party related, according to a report by Security Scorecard and KPMG

Cloud attacks surged in 2024 as attackers exploited cloud resources at unprecedented levels