Information Security Magazine

Billbug, a China-linked espionage group, has been observed targeting critical sectors in Southeast Asia with new tools

Darktrace and Cado said the new campaign highlights a shift towards alternative methods of mining cryptocurrencies

Security firm Human lifts the lid on prolific new ad fraud scheme dubbed “scallywag”

The UN has warned that Southeast Asian fraud groups are expanding their operations

Russian state actor Midnight Blizzard is using fake wine tasting events as a lure to spread malware for espionage purposes, according to Check Point

An NTLM hash disclosure spoofing vulnerability that leaks hashes with minimal user interaction has been observed being exploited in the wild

Bipartisan support grows in Congress to extend Cybersecurity Information Sharing Act for 10 years

IBM warns of infostealer surge as attackers automate credential theft and adopt AI to generate highly convincing phishing emails en masse

Microsoft has blocked fraud worth $4bn as threat actors ramp up AI use

MITRE will be able to keep running the CVE program for at least the next 11 months

Sophos found that compromise of network edge devices, such as VPN appliances, accounted for 30% of incidents impacted SMBs in 2024

A UK Law firm has been fined £60,000 after data stolen during a 2022 cyber-attack was published on the dark web

Hertz has confirmed a data breach exposing customer data after a zero-day attack targeting file transfer software from Cleo Communications

NVISO discovered new variants of the BRICKSTORM backdoor, initially designed for Linux, on Windows systems

Study reveals 92% of mobile apps use insecure cryptographic methods, exposing millions to data risks

DataDome warns that DYI bots are snapping up driving test places en masse

Security community reacts with shock at US government’s decision not to renew MITRE contract for CVE database

Posing as potential employers, Slow Pisces hackers conceal malware in coding challenges sent to cryptocurrency developers on LinkedIn

Regulatory compliance and data protection were the biggest cybersecurity challenges cited by UK financial organizations, according to a Bridewell survey

Thales report reveals bots now account for 51% of all web traffic, surpassing human activity