Information Security Magazine

Security experts tell Infosecurity about the cloud attack trends in the past year, and how CISOs can mitigate evolving techniques

The FBI has warned about an ongoing smishing and vishing scheme using AI deepfakes to impersonate US officials

An analysis by Robert Walters found there are around 17,000 cybersecurity vacancies in the UK currently, with organizations struggling to fill open positions

In Operation RoundPress, the compromise vector is a spearphishing email leveraging an XSS vulnerability to inject malicious JavaScript code into the victim's webmail page

New data from Darktrace showed that cyber-attacks targeting healthcare organizations increased in intensity in 2024

Coinbase is offering a $20m reward to help catch the threat actor behind a cyber-attack that could cost it between $180-$400m

A stealthy fileless PowerShell attack using Remcos RAT bypassed antivirus by operating in memory

The critical vulnerability is being exploited by BianLian, RansomwEXX and a Chinese nation-state actor known as Chaya_004

Dior confirmed a data breach compromising customer personal information, discovered on May 7

Researchers discovered over 3000 Linux vulnerabilities in 2024, the most of any category

The voluntary cybersecurity charter asks NHS suppliers to commit to eight cybersecurity pledges, amid rising attacks on healthcare

Most online merchants now believe customers pose as big a threat as professional fraudsters

The ransomware landscape is more fragmented than ever, with no “market leader,” says William Lyne, Head of Intelligence at the NCA

Android Enterprise introduced Device Trust to enhance mobile security on Android devices

CISA paused plans to overhaul its advisory system after backlash from the infosec community

Fortinet and Ivanti published advisories on the same day revealing that attackers are exploiting new zero days, one of which is rated critical

While appearing unsophisticated on the surface, Chihuahua Stealer uses advanced methods

Law enforcers from multiple countries team up to dismantle a multimillion-euro fraud gang

Microsoft has patched seven zero-day bugs, five of which were exploited in the wild

Marbled Dust has been exploiting a vulnerability in user accounts associated with the Kurdish military operating in Iraq for over a year, according to Microsoft