Information Security Magazine

Law enforcers worldwide have teamed up with Microsoft to disrupt the infrastructure behind Lumma Stealer

NSA, NCSC and allies warn Western tech and logistics firms of Russian APT28 cyber-espionage threat

UK businesses should start to plan for required changes to their cybersecurity programs ahead of the Cyber Security and Resilience Bill

A new malware campaign disguised as Kling AI used fake Facebook ads and counterfeit websites to distribute an infostealer

Patched privilege escalation flaw in Google Cloud Platform linked to wider cloud security concerns

The 19-year-old and his accomplices obtained key data for the extortion scheme in a 2022 breach of a US telco

ITRC report finds that 39% of American consumers believe biometric use should be banned

An M&S trading update estimates the ongoing cyber-incident will cost £300m, largely from lost sales due to the suspension of online orders

A new NCSC guide offers useful information on how to safely and securely dispose of end-of-life assets

The Venice.ai chatbot gained traction in hacking forums for its uncensored access to advanced models

A data breach at Nationwide Recovery Services compromised data of 200,000 Harbin Clinic patients

Researchers at ESET observed strengthened cyber-offensive activity from Russian groups, especially against Ukrainian and European entities

Thales found that 73% of organizations are investing in AI-specific security tools, amid surging takeup of GenAI tools in enterprises

Around half of US and UK consumers have seen fraud ads and content on ‘refund hacks’ on social media

Regeneron, which intends to acquire 23andMe for $256m, says data security and privacy will be a priority

Malicious dbgpkg package on PyPI poses as a debugging utility but acts as a delivery mechanism for a stealthy backdoor

RomethemeKit for Elementor has released a patch addressing an RCE vulnerability exposing 30,000 sites

Civil society groups and academics are calling for the EU's GDPR to remain unchanged following the EU Commission's plans to revisit it

An Alabama man has been sentenced to 14 months for hacking the SEC’s X account

The UK government says that hackers accessed a “large amount” of personal information in attack on Legal Aid Agency