Information Security Magazine

France’s four leading mobile operators, Bouygues, Free, Orange and SFR, have taken steps to combat mobile fraud as part of the GSMA Open Gateway initiative

ENGlobal has been hit by a ransomware attack, taking its IT systems offline since November 25

North Korean Kimsuky group has escalated their phishing campaigns, using Russian domains to steal credentials

A law enforcement operation executed by Dutch and French authorities resulted in the main servers used by Matrix being taken down

Ivanti research found that security professionals are eight-times more likely to say GenAI is a net positive versus a net negative for cybersecurity

The “organizer” of notorious dark web drugs marketplace Hydra Market has been handed a life sentence in Russia

The Foundation for Defense of Democracies has warned that Chinese-made LIDAR sensors could be weaponized for espionage

In 2024, the UK National Cyber Security Centre issued over 500 notifications to UK organizations about cyber incidents – double the number recorded in 2023

VIGINUM reveals that Azerbaijan state propaganda is seeking to challenge French sovereignty in French overseas territories

A new phishing attack uses corrupted Word docs to bypass security, luring victims with fake payroll and HR emails

Crypto.com has launched a massive $2m bug bounty program on HackerOne, the largest ever offered on the platform, to enhance platform security

SmokeLoader malware identified targeting Taiwanese firms via phishing, exploiting Microsoft Office vulnerabilities

Mikhail Matveev, aka WazaWaka, had worked with several ransomware groups, including Babuk, Conti, Darkside, Hive and LockBit

Bologna FC has revealed a ransomware attack, with data on players, fans and employees thought to have been stolen

Interpol’s Operation Haechi V has led to the arrest of over 5500 individuals and seizure of $400m obtained via online fraud

The NHS Trust is investigating the incident with the help of the National Crime Agency

Romania’s national security council suggested that Russia is behind these attacks, amid a court order for a recount of votes in the first round of the country’s presidential election

A report from the charity the Cyber Helpline found that 98% of cyber enabled crimes result in no further action from the police or justice system

A malicious PyPI package “aiocpa,” that stole crypto wallet data via obfuscated code, has been removed after being reported by Reversing Labs researchers

A new cyber-attack technique uses Godot Engine to deploy undetectable malware via GodLoader, infecting more than 17,000 devices