Information Security Magazine

The US President’s second cybersecurity Executive Order will impose stricter security standards on software providers

Compliance with the Digital Operational Resilience Act (DORA) has cost many businesses over €1 million, according to research from Rubrik

The leak likely comes from a zero-day exploit affecting Fortinet’s products

A proposed settlement order from the FTC will require GoDaddy to strengthen its security practices following multiple data breaches at the web hosting giant

HP Wolf highlighted novel techniques used by attackers to bypass email protections, including embedding malicious code inside images and utilizing GenAI

A new EU action plan will be structured around four pillars: prevention, threat detection and identification, response to cyber-attacks and deterrence

CISA launched the JCDC AI Cybersecurity Playbook to enhance collaboration on AI cybersecurity risks

The FBI deleted Chinese PlugX malware from thousands of devices in the US, using a technique developed by French cybersecurity firm Sekoia.io

A new report from Fortinet reveals increased adoption of multi-cloud strategies and hybrid implementations combining on-premises and public cloud infrastructure

Chainalysis estimates threat actors made at least $51bn through crypto crime in 2024

The security provider published mitigation measures to prevent exploitation

Secureworks Counter Threat Unit (CTU) has identified links between North Korean IT workers and fraudulent crowdfunding activities, with the group known as Nickle Tapestry orchestrating scams to support North Korean interests

Patch Tuesday saw Microsoft fix eight zero-days, three of which are being actively exploited

A new Interim Final Rule on Artificial Intelligence Diffusion issued in the US strengthens security, streamlines chip sales and prevents misuse of AI technology

Browser-based cyber-threats surged in 2024, with credential abuse and infostealers on the rise

Barings Law is planning to sue the two tech giants over numerous alleged violations of data misuse, including for AI training

A UK government consultation has proposed banning public sector and critical infrastructure organizations from making ransomware payments to disincentivize attackers from targeting these services

CISA claims US critical infrastructure providers are improving cyber hygiene and remediation activities

The .uk registry Nominet has been breached by a recently disclosed zero-day vulnerability in Ivanti products

A joint government advisory has set out steps critical infrastructure firms should take to ensure any OT products they purchase are secure by design