Information Security Magazine

The FBI provided details of Funnull’s malicious activities, selling infrastructure to criminal groups to facilitate cryptocurrency fraud in the US

The UK MoD has unveiled a new Cyber and Electromagnetic Command, which will focus on offensive cyber operations and “electromagnetic warfare” capabilities

Security teams should use vulnerability context alongside KEV lists to prioritize patching, OX argued

The firm’s remote monitoring management tool, ScreenConnect, has reportedly been patched

Fullscreen Browser-in-the-Middle attacks are making it harder for users to detect malicious websites

Fortinet has identified a new Windows RAT operating stealthily on compromised systems with advanced evasion techniques

A threat actor has used ASUS routers’ legitimate features to create persistent backdoors that survive firmware updates and reboots

A new EY report found that cybersecurity teams are a major vehicle for business growth, and CISOs should push for a seat at the top table

EasyDMARC found that just 7.7% of the world’s top 1.8 million email domains have implemented the most stringent DMARC policy

Two NHS England trusts could see highly sensitive patient records exposed

A spoofed Bitdefender site has been used in a malicious campaign distributing VenomRAT and other malware, according to DomainTools

This is the first time Czech authorities have officially called out a nation-state over a cyber-attack

A flaw in OneDrive File Picker has exposed millions to data overreach through excessive OAuth permissions

Adidas revealed that customer contact information, including names, emails and phone numbers were accessed by an unauthorized party

A Vietnam-nexus hacking group distributes infostealers and backdoors via social media ads promoting fake AI generator websites

A newly-discovered Russian group, Void Blizzard, has successfully compromised organizations in critical industries, Microsoft warned

A targeted cyber-attack on an MSP exploited flaws in remote management tools, resulting in ransomware deployment and data theft

A novel attack exploited machine learning models on PyPI, using zipped Pickle files to deliver infostealer malware

Former UK government minister Rory Stewart and NCSC Director of Operations Paul Chichester will explore the growing link between geopolitics and cybersecurity

The audit of the NVD will be conducted by the US Department of Commerce’s Office of Inspector General