Information Security Magazine

The US, UK and allies have called out China’s “commercial cyber ecosystem” for enabling large-scale Salt Typhoon campaigns

Chainalysis, OKX, Binance and Tether have managed to stop nearly $50m reaching romance baiting fraudsters

Microsoft observed Storm-0501 pivot to the victim’s cloud environment to exfiltrate data rapidly and prevent the victim’s recovery

CISA has launched a new Software Acquisition Guide Web Tool to enhance security in software procurement

While still in development, PromptLock is described as the “first known AI-powered ransomware” by ESET researchers

The Office of the Governor of Nevada revealed that the incident has shut down in-person State services, while government phone lines and websites are offline

A series of cyber-attacks against government organizations in Central Asia and Asia- Pacific has been linked to the ShadowSilk threat cluster

Citrix customers are urged to patch their vulnerable NetScaler appliances, but “patching alone won’t cut it,” experts said

EU security agency ENISA is being handed €36m to operate the EU Cybersecurity Reserve

Google is warning of a new credential theft campaign targeting Salesforce customers via Salesloft Drift

Abnormal AI said the campaign, which lures victims into downloading legitimate RMM software, marks a major evolution in phishing tactics

A new version of the Hook Android banking Trojan features 107 remote commands, including ransomware overlays

A global phishing campaign has been identified using personalized emails and fake websites to deliver malware via UpCrypter

All previously scheduled mobility trips across Maryland for this week will be honored, said the state’s transportation administration

A new CIISec poll finds the majority of industry professionals would prefer more rigorous cybersecurity laws

Data I/O has revealed operational disruption following a ransomware breach that forced it to take some systems offline

A variant of the Atomic macOS Stealer (AMOS) targets macOS users via fake support sites in malvertising campaign

A Chinese developer has been sentenced to four years in prison after being found to deploy malicious code in his employer’s network, including a “kill switch”

The US Cybersecurity and Infrastructure Security Agency is planning to launch an update to a 2021 guideline for SBOM requirements

Operation Serengeti 2.0 operators helped recover $97.4m stolen by cybercriminals