Information Security Magazine

British retailer M&S continues to tackle a cyber incident with online orders now paused for customers

Researchers have found a Chrome extension that can act on the user’s behalf by using a popular AI agent orchestration protocol

Panaseer's latest cybersecurity study revealed that US companies have paid $155M in data breach lawsuit settlements over just six months

Backslash Security found that naïve prompts resulted in code vulnerable to at least four of the of the 10 most common vulnerabilities across popular LLMs

ELENOR-corp ransomware, a new version of Mimic, is targeting healthcare organizations using advanced capabilities

A misconfigured tracking tool has exposed protected health information of 4.7 million Blue Shield members to Google Ads

A critical path traversal vulnerability in Commvault’s backup and replication solutions has been reported

While the Verizon annual report showed that ransomware is rising, it also found that ransom payments are in decline

NCC Group found that ransomware attacks fell by 32% in March compared to February, but described this finding as a “red herring”

ETSI’s says new technical specification for securing AI models and systems sets international benchmark

Ofcom’s Protection of Children Codes and Guidance lists 40 new child safety measures for tech firms

After a 180% rise in last year’s report, the exploitation of vulnerabilities continues to grow, now accounting for 20% of all breaches

The FBI found that cybercrime losses climbed by 33% compared to 2023, driven by tactics like investment fraud and BEC

Mandiant’s M-Trends report found that credential theft rose significantly in 2024, driven by the growing use of infostealers

The latest ITRC data finds breach volumes remained flat in Q1 but victim numbers increased 26% annually

Marks and Spencer has confirmed that it has been managing a cyber incident for the past few days which affected its contactless payments and click and collect services

Dutch intelligence report warns of growing Russian aggression with hybrid warfare

Barclays found that romance scam victims lost £8000 on average in 2024, a significant increase from the previous year

The tech giant has released its second Secure Future Initiative (SFI) progress report, showcasing its ongoing efforts to improve cybersecurity

A new malware campaign utilizing NFC-relay techniques has been identified carrying out unauthorized transactions through POS systems and ATMs