Information Security Magazine

New York State has agreed a $11.3m settlement from two insurance firms following the breach of the personal data of over 120,000 drivers in the state

Zscaler’s latest report finds 54.5% of IoT attacks target manufacturing, with the industry suffering more than three times the weekly attacks of other sectors

npm package @lottiefiles/lottie-player hacked with malicious code, draining crypto wallets via web3 pop-ups

Google’s threat intelligence team uncovered four Chinese PR firms operating networks of inauthentic news sites

UK Minister Pat McFadden will say in a speech at a NATO conference that adversaries are looking at using AI on the physical and cyber battlefield

Meta has closed down two million accounts it says were used in scams such as pig butchering

The UK’s Information Commissioner’s Office argues that regulatory concerns shouldn’t prevent firms sharing data to stop scams

Microsoft has seized 240 websites associated with the “ONXX” phishing-as-a-service operation, and has sued the developer of this service

Russian-aligned TAG-110 uses custom tools to spy on governments, human rights groups and educational institutions in Europe and Asia

Bitdefender found that 77% of Black Friday-themed spam emails in 2024 have been identified as scams, with attackers becoming more creative in their campaigns

Corvus Insurance highlighted the growing complexity and competition within the ransomware ecosystem, with the threat level remaining elevated

The 25 most dangerous software weaknesses between June 2023 and June 2024 are responsible for almost 32,000 vulnerabilities

Phishing attacks, business email compromise and vendor email compromise attacks on manufacturing have surged in the past 12 months

New Linux malware WolfsBane and FireWood have been linked to Gelsemium APT, a cyber-espionage group targeting critical systems

Group-IB revealed key differences in VietCredCare and DuckTail infostealer malware targeting Facebook Business accounts

One of these flaws detected using LLMs was in the widely used OpenSSL library

The BianLian ransomware group has shifted exclusively to exfiltration-based extortion and is deploying multiple new TTPs for initial access and persistence

Spreading malware via Telegram channels allows threat actors to bypass traditional detection mechanisms and reach a broad, unsuspecting audience

Over a fifth of large UK businesses aren’t sure of their compliance responsibilities under the new NIS2 directive

Five men have been indicted in connection with crimes committed by the Scattered Spider group