Information Security Magazine

A new CIISec poll finds the majority of industry professionals would prefer more rigorous cybersecurity laws

Data I/O has revealed operational disruption following a ransomware breach that forced it to take some systems offline

A variant of the Atomic macOS Stealer (AMOS) targets macOS users via fake support sites in malvertising campaign

A Chinese developer has been sentenced to four years in prison after being found to deploy malicious code in his employer’s network, including a “kill switch”

The US Cybersecurity and Infrastructure Security Agency is planning to launch an update to a 2021 guideline for SBOM requirements

Operation Serengeti 2.0 operators helped recover $97.4m stolen by cybercriminals

Darktrace observed a coordinated campaign on customer SaaS accounts, all of which involved logins from IP addresses linked to VPS providers

All Apple users are encouraged to update their iPhones, iPads and macOS devices

Microsoft has set out a roadmap to complete transition to PQC in all its products and services by 2033, with roll out beginning by 2029

Russian state-backed hackers are exploiting a seven-year-old Cisco Smart Install vulnerability (CVE-2018-0171) in end-of-life devices, prompting warnings from the FBI and Cisco Talos

Colt customers can request a list of filenames posted on the dark web via a dedicated call center

A 22-year-old Oregon man has been charged with administering the Rapper Bot DDoS-for-hire Botnet

Noah Urban, linked with the Scattered Spider cybercriminal gang, will also pay $13m in restitution to victims

Orange Belgium revealed that a threat actor has compromised 850,000 customer accounts, with SIM card numbers among the data accessed

Guardio reveals a new AI take on ClickFix dubbed “PromptFix”

NIST has released new guidelines examining the pros and cons of detection methods for face morphing software

Indiana-based pharmaceutical research company Inotiv has confirmed it suffered a ransomware attack, disrupting operations and compromising data

With Beacon Network, TRM Labs has brought together law enforcement and some of the largest crypto exchanges to fight against crypto crimes

A new report has mapped the tactical evolution of mule operators in the META region from VPNs to advanced fraud networks

Researchers discovered two new phishing techniques where attackers split malicious QR codes or embed them into legitimate ones