Information Security Magazine

PlushDaemon APT hacked South Korean VPN software with SlowStepper backdoor as part of a 2023 espionage campaign

Threat researchers analyzed the updated Tycoon 2FA phishing kit, which bypasses MFA

New ESET research reveals that 73% of UK educational institutions experienced at least one cyber-attack or breach in the past five years

NCC Group observed 574 global ransomware attacks in December, the highest monthly volume it has recorded

Cyble has found thousands of security vendors' credentials on the dark web, likely pulled from infostealer logs

Netwrix claims 84% of healthcare organizations detected a cyber-attack in the past year

Cloudflare warns of a surge in hyper-volumetric DDoS after revealing it stopped a massive 5.6Tbps attack

Murdoc_Botnet used Mirai malware to exploit IoT vulnerabilities, targeting devices globally

Security experts have outlined security and privacy concerns around the UK government’s GOV.UK Wallet, which will allow citizens to store all their ID documents in a single place

A CloudSEK report revealed Zendesk's platform can be exploited for phishing and investment scams

Data from DLA Piper showed a 33% year-on-year fall in GDPR fines issued in Europe in 2024, with total penalties reaching €1.2bn

Critical flaws include those in Oracle Supply Chain products

Sophos has warned of IT impersonation vishing attacks designed to remotely deploy ransomware

ISACA research claims privacy budgets are set to decline further in 2025

HPE is investigating claims of data breach by hacker IntelBroker, who offered stolen files for sale

Android apps, linked to APT group DONOT, disguised as a chat platform for intelligence gathering

The December 2024 cyber-attack on the country’s state registers, was attributed to Russian military intelligence services

The US has issued sanctions against an individual and a company involved in recent high-profile compromises of government officials by Chinese state-affiliated hackers

CIA analysts Asif William Rahman has pleaded guilty to sharing classified documents about an Israeli attack

At least half a million accounts have been compromised after a breach at hotel management software firm Otelier