Information Security Magazine

A newly identified Mirai botnet exploits over 20 vulnerabilities, including zero-days, in industrial routers and smart home devices

Group-IB has observed scammers impersonating government officials to trick disaffected consumers into divulging card details

New research by Security Intelligence has revealed security risks in MLOps platforms including Azure ML, BigML and Google Vertex AI

Moxa has reported two critical vulnerabilities in its routers and network security appliances that could allow system compromise and arbitrary code execution

Netskope observed a 190% growth in enterprise users clicking phishing links as attackers become more creative in delivering effective lures

The UK government is cracking down on the generation of sexually explicit deepfakes in a bid to protect women and girls

The US Cybersecurity and Infrastructure Security Agency claims a recent China-linked breach was confined to the Treasury

A new supply chain attack targets Ethereum tools, exploiting npm packages to steal sensitive data

The PhishWP plugin enables scammers to create fake payment pages, stealing sensitive data via Telegram

Taiwan’s security service said government networks faced 2.4 million attacks in 2024, most of which are attributed to Chinese state actors

Threat actors are tricking victims into downloading malware with the promise of testing a new videogame

Scam Sniffer claims that threat actors used wallet drainers to steal $494m from victims in 2024

The US government said that China based firm Integrity Technology Group provided infrastructure for Flax Typhoon to attack multiple US targets

Atos Group has denied the ransomware group Space Bears' claims of compromising its database, calling the allegations unfounded

Former Terraform CEO Do Hyeong Kwon is now in the US facing federal fraud charges

Docomo has revealed a DDoS attack on Thursday took down key services

The amount of crypto stolen in the Web3 ecosystem rose by 31.6% compared to 2023, with phishing the most costly attack vector

Apple has agreed to a $95m settlement in a class action lawsuit alleging Siri privacy violations, with eligible users receiving up to $20 per Siri-enabled device

The US government has sanctioned Russian state-affiliated entity CGE, which used a vast GenAI infrastructure to spread disinformation during the US Presidential election

Sekoia’s innovative PlugX malware disinfection campaign removed active threats across ten countries