Information Security Magazine

CISA is asking for feedback on future guidance outlining bad security practices in product development as part of its Secure by Design initiative

NIS2 will be enforced as of October 17, yet many organizations and even EU member states appear completely unprepared for implementation

CISA released the third edition of SBOM guidelines to enhance software component transparency

A new Bugcrowd study shows 71% of ethical hackers now see AI boosting hacking value, up from 21% in 2023

Phishing emails claiming to be from Starbucks are offering recipients a "free Coffee Lovers Box" in an attempt to steal personal or install malware on devices

New NCSC CEO Dr Richard Horne warned in a speech that there is a widening gap between escalating threats and society’s ability to defend against them

The new set of specifications could enable users to securely move passkeys and all other credentials across providers

DigiCert says imminent crypto threat from quantum computing has been over-hyped

New government grants for AI safety research are designed to fund work into deepfakes and other cyber risks

Researchers have discovered a new cyber-attack method called ConfusedPilot that can manipulate AI-generated responses by injecting malicious content into documents referenced by AI systems

Cyber threats surge ahead of the 2024 election, including phishing, ransomware and Darknet activity

The service, developed in collaboration with Cloudflare and Accenture, is available for UK schools and most education service providers

Most organizations are not prepared for the post-quantum threat, despite the recent publication of NIST's first three finalized post-quantum encryption standards

Microsoft has observed nation states ramping up cooperation with cybercriminals to conduct operations in the past year

The sophisticate campaign, ErrorFather, employs keylogging, virtual networks and a domain generation algorithm to target Android users

Coalition’s new service aims to mitigate the impact of growing UK corporate fraud losses

Zscaler has found more than 200 malicious apps on Google Play with over eight million installs

Online scammers are targeting Booking.com and Airbnb users with Telekopye, a Telegram-based toolkit

CISA urged organizations to tackle security risks from unencrypted cookies in F5 BIG-IP LTM systems

The US DoD has finalized the Cybersecurity Maturity Model Certification (CMMC) Program, which defense contractors must pass to bid for government contracts