Information Security Magazine

MedTech giant Boston Scientific has revealed IT outages following a cyber incident

OpenAI reveals that unauthorized message boards were at the heart of the recent Hugging Face breach

Group-IB uncovered new Tortoiseshell infrastructure, including a backdoor and SSH tunneling tool

Interpol operation leads to 58 arrests and identifies 263 suspects across 22 countries

Reco report reveals growing shadow AI problem and surge in vulnerability disclosures

Chubb reported that growing privacy litigation has contributed to surging cyber claim costs in the US

This new open standard offers hardware-attested runtime and compliance evidence for AI agents

A coordinated DDoS campaign has caused disruption among Norwegian government services

ZeroTokens gives phishing operators live control of victim sessions targeting 53 financial brands

RecruitTrap campaigns use mobile-optimized phishing pages to target enterprise credentials

Australian officials are urging TeamCity customers to patch an actively exploited critical flaw, which follows a similar warning from the US government

A threat actor keeps spreading the WeedHack malware to Minecraft players despite its original infrastructure taken down in July

ReliaQuest has detailed a social engineering attack linked to ShinyHunters, denying reports that the threat actor successfully compromised its systems

The US has sanctioned individuals connected to hacking-for-hire group the Mabna Institute

TCG has released new guidance to help proving that trusted platform modules genuinely meet essential quantum-safe requirements

NIST has set out 23 novel challenges that arise in multi-cloud environments and has encouraged the cyber community to find solutions

Fake Codex pages used Google Sites, sponsored search and ClickFix to target Mac users

Doubloon Dredger abused Notion and malicious PDFs to harvest Microsoft authentication tokens

Experts argue Iranian cyber-attack on UK power plant lays bare frailty of critical national infrastructure

Truffle Security says it found over 9000 publicly accessible and active AWS key pairs