Information Security Magazine

The compromised ultralytics AI library delivered XMRig miner via GitHub Actions exploit

The UK's ICO has published its findings following a two-year trial of its Public Sector Approach, which aimed to improve data protection compliance and deter data breaches

This new ransomware group is likely a new variant of Babuk, said Cyble threat intelligence analysts

CERT-UA has issued a warning about phishing emails targeting Ukrainian defense companies and security forces

Massachusetts’ Anna Jacques Hospital notifies over 316,000 patients of a data breach a year ago

Dutch and Belgian police have arrested eight in connection with a long-running phone phishing operation

The Salt Typhoon hack against US telecommunications firms has prompted the FCC to suggest stricter security rules to protect the sector from future cyber threats

Cǎlin Georgescu went from polling around 1% a month before the Romanian presidential election to winning the first round

Despite claims by Brain Cipher that the ransomware gang had targeted Deloitte, the consultancy firm says its systems have not been affected

A European law enforcement operation took down a specialized online marketplace that operated as a central hub for the trade of illegally obtained information

A supply chain attack on the Solana library utilizing malicious npm versions has exposed private keys, putting crypto funds at risk

Veeam has released patches for critical VSPC flaws, requiring immediate attention from affected service providers

An FBI alert warned that GenAI tools are improving the believability of fraud schemes and enabling large scale attacks

Microsoft has found that Russian APT Secret Blizzard piggybacks on other cybercriminals' infr4asytructure to conduct cyber espionage

World Economic Forum data shows G20 executives are more concerned about economic risks that cyber-threats

The National Crime Agency has made scores of arrests in a bid to bring down two major Russian money laundering networks

Orange Cyberdefense found that hacktivist gang Noname has almost exclusively targeted European countries since March 2022, with no attacks impacting the US

Ransomware attacks cost manufacturing $17bn in downtime since 2018, with $1.9m daily losses, according to Comparitech

In a settlement announced on Tuesday, the FTC banned Gravy Analytics and Mobilewalla from selling sensitive location data

Wirral University Teaching Hospital is recovering from a cybersecurity incident that occurred on November 25, with some patient services still disrupted as systems are being restored