Information Security Magazine

An investigation has revealed that files were stolen in a data breach affecting a South Carolina school district

Trend Micro observed the attackers using terminal-based installation methods for the AMOS malware, luring macOS users into installing cracked versions of apps

The joint guidance is a welcome first step towards a common, global adoption of SBOMs, experts argued

The OPSWAT report found that insider breaches cost impacted firms $2.7m on average due to factors such as regulatory fines and diminished productivity

A newly identified hacking group named GhostRedirector has compromised 65 Windows servers using previously unknown tools

North Korean hackers have been observed exploiting cyber threat intelligence platforms in a campaign targeting job seekers with malware-laced lures

Google Cloud’s Mandiant successfully disrupted an active ViewState deserialization attack affecting Sitecore deployments

JLR said it is investigating following claims by the actor “Scattered Lapsus$ Hunters” that it had stolen data from the firm and had issued an extortion demand

Hackers are using legitimate red team tool Hexstrike-AI to simplify and speed up vulnerability exploitation

A new Cobalt study finds healthcare organizations among the slowest at resolving serious vulnerabilities

A malicious campaign using Ethereum smart contracts has been observed targeting developers via npm and GitHub

The backdoor is a sophisticated VBA-based malware targeting Microsoft Outlook

A massive IPTV privacy network has been uncovered distributing unlicensed content from major brands including Apple TV, Disney+, HBO, Netflix and more

Cloudflare has notified customers that hackers may have accessed their data as part of the Salesloft Drift campaign

Barracuda observed new methods to disguise phishing links in Tycoon phishing attacks, which are designed to bypass automated email security systems

Evertec subsidiary Sinqia has posted details of an attempt to steal $130m from two B2B partners

The US Immigration agency has resumed a $2m contract with the Graphite spyware developer, now owned by US investor AE Industrial Partners

A malicious npm package “nodejs-smtp” has been discovered impersonating nodemailer and injecting code to drain crypto wallets

Experts have revealed an Azure AD vulnerability exposing ClientId and ClientSecret in a publicly accessible appsettings.json file

Jaguar has proactively shut down systems to mitigate the impact of the incident, amid reports that workers at a UK manufacturing plant had been told to stay at home