Information Security Magazine

Contrast Security reveals a 12.5% annual increase in destructive cyber-attacks on banks

DaggerFly’s Lunar Peek campaign is using a new malware strain, identified by FortiGuard Labs, to compromise Linux networks

Picus Security reports infostealer surge after revealing credentials appear in 29% of malware

A sophisticated phishing campaign targeting Microsoft ADFS has been observed, affecting more than 150 organizations

Check Point Research has found over 10 million stolen credentials associated with EMEA organizations exposed on cybercrime markets

Texas Governor Greg Abbott announced a Cyber Command, designed to combat surging attacks on the state by nation-states and cybercriminals

Jscambler claims at least 17 sites have been infected with web skimmers, including Casio’s

CISA has identified a backdoor in Contec CMS8000 devices that could allow unauthorized access to patient data and disrupt monitoring functions

Hackers hijack high-profile X accounts with phishing scams to steal credentials and promote fraudulent cryptocurrency schemes

VulnCheck observed 768 public reports of CVEs exploited in the wild for the first time in 2024, a 20% rise compared to 2023

A new Europol report warns of major challenges accessing and analyzing data for cybercrime investigations

The UK government has launched a new AI security code of practice it believes will become an ETSI standard

Cisco Talos found that exploitation of public-facing applications made up 40% of incidents it observed in Q4 2024, marking a notable shift in initial access techniques

The Indian tech giant temporarily suspended some of its IT services, which have now been restored

Cyber reports exposed major security flaws in DeepSeek’s R1 LLM

A global law enforcement operation has taken down infrastructure used by Cracked.io and Nulled.io, which provide cybercriminal tools and services

Google Play blocked 2.36 million policy-violating apps and banned 158,000 harmful developer accounts in 2024

HTTP client tools used to compromise Microsoft 365 environments with 78% of tenants targeted in 2024

SquareX researchers warn that browser syncjacking could lead to full browser and device hijacking

Researchers at Wiz uncovered a publicly accessible database belonging to Chinese GenAI provider DeepSeek that leaked sensitive data, including chat history