Information Security Magazine

An insurance employee has been handed a suspended sentence after illegally accessing personal information

HP Wolf reveals that 79% of IT security decision makers are lacking in crucial hardware and firmware expertise

Microsoft detailed how Russian espionage group Secret Blizzard is leveraging infrastructure of other threat actors to target the Ukrainian military with custom malware

Fraudsters in UAE posed as Dubai Police, targeting citizens with fake fines via calls, emails and SMS

Krispy Kreme said the incident is likely to materially affect operations and short-term financial performance

The Korean Financial Security Institute (K-FSI) disrupted a fraudulent network that made $6.3m by stealing money from fake personal trading platforms

Microsoft MFA flaw exposed that allowed attackers to bypass security within an hour, putting 400m Office 365 accounts at risk

Operation PowerOFF has dismantled a network of 27 DDoS platforms, leading to the arrests of three administrators and the identification of over 300 users

The US government has sanctioned Sichuan Silence and one of its employees for the mass compromise of firewalls which led to the deployment of malware and ransomware

Microsoft has patched dozens of vulnerabilities in December, including one zero-day being exploited in the wild

A zero-day vulnerability in Cleo file transfer software is being exploited in data theft attacks

The multi-cloud data warehousing platform said it will completely phase out single factor authentication with passwords by November 2025

Hackers exploited AWS misconfigurations, leaking 2TB of sensitive data, including customer information, credentials and proprietary source code

The utilities sector saw a 42% surge in ransomware incidents over the past year, with groups like Play focusing on targets with IT and OT systems

New AppLite Banker malware targets Android devices, employing advanced phishing techniques to steal credentials and data

Researchers found that the broad accessibility of streams of Scottish Parliamentary proceedings make them highly susceptible to deepfake attacks

The UK’s privacy regulator the Information Commissioner’s Office has welcomed a Court of Appeal ruling

Artivion has revealed in an SEC filing that it suffered a double-extortion ransomware attack

A Hack The Box Freedom of Information request has shown a significant drop in cyber-attacks reported to the Financial Conduct Authority (FCA) in 2024

Appeals court upheld law forcing TikTok divestiture, citing national security risks over China ties