Information Security Magazine

US agencies have issued a new alert to eliminate buffer overflow vulnerabilities, urging memory-safe programming for secure-by-design software development

Astaroth is an advanced phishing kit using real-time credential and session cookie capture to compromise Gmail, Yahoo and Office 365 accounts

Ahead of Valentine’s Day, Chainalysis figures reveal 40% increase in losses to pig butchering, or romance baiting, scams

Microsoft found that Russian state actor Seashell Blizzard has deployed an initial access subgroup to gain persistent access in a range of high-value global targets

The Electronic Frontier Foundation has requested a US federal court to block Elon Musk’s DOGE access to US Office of Personnel Management Data

SecurityScorecard has uncovered a sophisticated campaign linked to North Korea’s Lazarus Group, distributing crypto-stealing malware

NCSC CTO Ollie Whitehouse discussed a UK government-backed project designed to secure underlying computer hardware, preventing most vulnerabilities from occurring

Romance scams cost Americans $697.3m in 2024, with crypto fraud schemes on the rise

Massive IoT data breach exposed 2.7 billion records including Wi-Fi credentials

A new Everfox survey shows a growing consensus among regulated organizations in favor of a strategic shift away from detecting cyber threats to preventing them

February Patch Tuesday sees Microsoft fix four zero-days, including two under active exploitation

The US and its allies have sanctioned Russian bulletproof hoster Zservers for abetting ransomware attacks

An Alabama man has admitted hacking into the US Security and Exchange Commission’s X account using SIM swap fraud to gain access

Chinese hackers are infiltrating the networks of suppliers of “sensitive” manufacturers, according to a Check Point report to be published in the coming weeks

Gcore reported a 56% year-over-year rise in DDoS attacks in H2 2024, highlighting a steep long-term growth tend for the attack technique

Ransomware groups are adopting agile techniques in a quantity-over-quality approach, according to a new report from Huntress

Four Europeans were arrested in Phuket, believed to be members of the Phobos ransomware group

Apple has patched a zero-day vulnerability being exploited in targeted attacks

Kela researchers explain that infostealers are to blame for compromised OpenAI logins

Trend Micro uncovers BadIIS malware exploiting IIS servers for SEO fraud and malicious redirects