Information Security Magazine

Trend Micro highlighted a sophisticated post-compromise attack chain to deploy the Warlock ransomware in unpatched SharePoint on-prem environments

The Better Business Bureau is urging business owners and influencers not to fall for a new type of podcast scam

US director of national intelligence, Tulsi Gabbard, stated that her government persuaded the UK to withdraw its controversial demand

Microsoft has issued an emergency patch to fix Windows recovery problems for some users

ISACA has launched the new AAISM certification to equip security leaders with AI risk management expertise

A critical flaw in SAP NetWeaver AS Java is being widely exploited, allowing unauthenticated remote code execution

A cyber-attack on Allianz Life, linked to the ShinyHunters group, has exposed the personal information of 1.1 million customers

The Canadian Investment Regulatory Organization (CIRO) said it will work to identify the personal information breached and notify those affected

Red Canary observed the novel tactic in a cluster of activity targeting a legacy vulnerability to access cloud-based Linux systems

Researchers detected that FreeVPN.One, a longstanding Chrome Web Store VPN extension, recently turned into spyware

South Yorkshire Police have been reprimanded by the ICO after deleting 96,000 pieces of evidence from officers’ bodycams

Over 280,000 customers of Australian ISP iiNet have been impacted by a data breach

An incident involving the npm package eslint-config-prettier has been uncovered spreading Scavenger RAT

A multi-stage attack delivered via USB devices has been observed installing cryptomining malware using DLL hijacking and PowerShell

Cisco Talos observed the newly identified group compromise a Taiwanese web hosting provider to conduct a range of malicious activities

The Warlock ransomware gang has taken credit for the cyber-attack after the UK telco giant publicly confirmed an incident on August 14

Al-Tahery Al-Mashriky has been sentenced to 20 months behind bars for hacktism-related offenses

Workday has revealed a breach of its third-party CRM systems in what could be the latest ShinyHunters attack

Germany, the Netherlands and four of the Five Eyes countries share a common asset inventory for industrial cybersecurity

Cisco has issued a software update to address the vulnerability, which can allow an unauthenticated, remote attacker to inject arbitrary shell commands