Information Security Magazine

Phishing campaign targeting Taiwan has been identified, using tax-themed emails and malware like Winos and HoldingHands

WatchTowr has found three vulnerabilities in the Sitecore Experience Platform, used by HSBC and L’Oréal

Microsoft’s Sovereign Cloud solutions are designed to ensure European cloud data is stored and processed in Europe

New City of London Police data reveals British men and women lost over £100m to romance fraudsters in 2024

Cyber-attacks using HijackLoader and DeerStealer have been identified exploiting phishing tactics via ClickFix

Operation DEEP Sentinel has shut down Archetyp Market, the longest-running dark web drug marketplace

Nessus users should update patches as soon as possible

Trend Micro identified a novel “wipe mode” included in Anubis ransomware to prevent file recovery, increasing pressure on victims to give in to demands

Some 36% of Grafana instances are vulnerable to account takeover bug, putting DevOps teams at risk

Canadian airline WestJet is investigating a cyber-attack that struck on June 13

Jen Easterly and Ciaran Martin called for a universal, vendor-neutral cyber threat actor naming system

This is the first forensic evidence that journalists’ devices have been infected with Paragon’s Graphite spyware

A CISA advisory urged all software vendors and downstream customers to check if they are impacted by unpatched versions of the SimpleHelp RMM tool

Researchers have found a flaw in Microsoft 365 Copilot that allows the exfiltration of sensitive corporate data with a simple email

The cybersecurity provider also implemented recent fixes in Chromium that affected its Prisma Access Browser

The new NIST guidance sets out 19 example implementations of zero trust using commercial, off-the-shelf technologies

Europol warns of “vicious circle” of data breaches and cybercrime

Erie Insurance reveals suspected network breach and ongoing outage

The legislation aims to expand the federal government’s role in helping healthcare providers protect and respond to cyber-attacks

Interpol-coordinated Operation Secure led to 32 arrests, including the suspected ringleader of a cybercriminal organization