Information Security Magazine

Patchstack urges admins to patch new WordPress ASE plugin vulnerability that lets users restore previous admin privileges

This new independent non-profit was set up by the UK insurance industry to bring more transparency around cyber events

A Bitdefender researcher was targeted by North Korea’s Lazarus with the lure of a fake job offer

The UK’s National Cyber Security Centre has published a new set of resources for startups and researchers

Spain’s National Police force has arrested a suspected data thief who targeted government and military victims

A new phishing attack by UAC-0006 has been discovered targeting PrivatBank with malicious files in password-protected archives to evade detection

Chainalysis found that ransomware payments fell significantly year-over-year despite a recorded increase in the number of ransomware events in 2024

Indian banking malware attack exposes 50,000 users, stealing financial data via SMS interception and phishing

The UK and its Five Eyes partners have launched new security guidance for edge device manufacturers and network defenders

Check Point has observed cybercriminals toy with Alibaba’s Qwen LLM to develop infostealers

Contrast Security reveals a 12.5% annual increase in destructive cyber-attacks on banks

DaggerFly’s Lunar Peek campaign is using a new malware strain, identified by FortiGuard Labs, to compromise Linux networks

Picus Security reports infostealer surge after revealing credentials appear in 29% of malware

A sophisticated phishing campaign targeting Microsoft ADFS has been observed, affecting more than 150 organizations

Check Point Research has found over 10 million stolen credentials associated with EMEA organizations exposed on cybercrime markets

Texas Governor Greg Abbott announced a Cyber Command, designed to combat surging attacks on the state by nation-states and cybercriminals

Jscambler claims at least 17 sites have been infected with web skimmers, including Casio’s

CISA has identified a backdoor in Contec CMS8000 devices that could allow unauthorized access to patient data and disrupt monitoring functions

Hackers hijack high-profile X accounts with phishing scams to steal credentials and promote fraudulent cryptocurrency schemes

VulnCheck observed 768 public reports of CVEs exploited in the wild for the first time in 2024, a 20% rise compared to 2023