Information Security Magazine

Google has warned that Russian state-backed hackers are targeting Signal to eavesdrop on persons of interest in Ukraine

Hudson Rock has found evidence that infostealers have compromised hundreds of US military and defense contractor credentials

Significant OpenSSH flaws are exposing systems to man-in-the-middle and denial-of service attacks

Trend Micro found that Chinese espionage group Mustang Panda is deploying malware via legitimate Microsoft tools, enabling it to bypass ESET antivirus applications

A new Snake Keylogger variant, responsible for over 280 million blocked infection attempts worldwide, has been identified targeting Windows users

The BlackLock or Eldorado ransomware gang could be the year’s fastest-growing ransomware-as-a-service group

Proofpoint also identified two new threat actors operating components of web inject campaigns, TA2726 and TA2727

A threat actor claims to have hacked and published data on 12 million Zacks Investment Research accounts

Pro-Russia hackers NoName057(16) has targeted Italian banks, airports and ports in a series of DDoS attacks

South Korea’s Personal Information Protection Commission is blocking DeepSeek AI downloads over privacy concerns

Microsoft has observed a new variant of XCSSET, a sophisticated macOS malware that infects Xcode projects

A Golang backdoor is using Telegram as its command and control (C2) channel, an approach that makes detection harder for defenders, according to Netskope researchers

Two Estonian nationals have pleaded guilty to running a cryptocurrency-related Ponzi scheme

Vulnerabilities in firewalls from Palo Alto Networks and SonicWall are currently under active exploitation

Volexity highlighted how Russian nation-state actors are stealing Microsoft device authentication codes to compromise accounts

The organization becomes the AI Security Institute as the UK shifts its focus to tackling AI risks to national security

Symantec found that tools previously only used by Chinese nation-state espionage actors were deployed in a ransomware attack

US agencies have issued a new alert to eliminate buffer overflow vulnerabilities, urging memory-safe programming for secure-by-design software development

Astaroth is an advanced phishing kit using real-time credential and session cookie capture to compromise Gmail, Yahoo and Office 365 accounts

Ahead of Valentine’s Day, Chainalysis figures reveal 40% increase in losses to pig butchering, or romance baiting, scams