Information Security Magazine

Microsoft found that Russian state actor Seashell Blizzard has deployed an initial access subgroup to gain persistent access in a range of high-value global targets

The Electronic Frontier Foundation has requested a US federal court to block Elon Musk’s DOGE access to US Office of Personnel Management Data

SecurityScorecard has uncovered a sophisticated campaign linked to North Korea’s Lazarus Group, distributing crypto-stealing malware

NCSC CTO Ollie Whitehouse discussed a UK government-backed project designed to secure underlying computer hardware, preventing most vulnerabilities from occurring

Romance scams cost Americans $697.3m in 2024, with crypto fraud schemes on the rise

Massive IoT data breach exposed 2.7 billion records including Wi-Fi credentials

A new Everfox survey shows a growing consensus among regulated organizations in favor of a strategic shift away from detecting cyber threats to preventing them

February Patch Tuesday sees Microsoft fix four zero-days, including two under active exploitation

The US and its allies have sanctioned Russian bulletproof hoster Zservers for abetting ransomware attacks

An Alabama man has admitted hacking into the US Security and Exchange Commission’s X account using SIM swap fraud to gain access

Chinese hackers are infiltrating the networks of suppliers of “sensitive” manufacturers, according to a Check Point report to be published in the coming weeks

Gcore reported a 56% year-over-year rise in DDoS attacks in H2 2024, highlighting a steep long-term growth tend for the attack technique

Ransomware groups are adopting agile techniques in a quantity-over-quality approach, according to a new report from Huntress

Four Europeans were arrested in Phuket, believed to be members of the Phobos ransomware group

Apple has patched a zero-day vulnerability being exploited in targeted attacks

Kela researchers explain that infostealers are to blame for compromised OpenAI logins

Trend Micro uncovers BadIIS malware exploiting IIS servers for SEO fraud and malicious redirects

Memorial Hospital and Manor, located in Bainbridge, Georgia, has alerted 120,000 individuals that their data was breached following a ransomware attack last November

A US resident based in Indiana was charged with cyber intrusion and cryptocurrency theft conspiracies

The UK MoD has announced it is fast-tracking the recruitment of specialist cybersecurity roles, with recruits offered a starting salary of above £40,000