Information Security Magazine

Microsoft Threat Intelligence stopped an AI-driven credential phishing campaign using SVG files disguised as PDFs

The Five Eyes countries, Germany and the Netherlands are launching a standard for managing OT security

Recruitment and retention remain a significant challenge for security teams, amid growing pressures on cyber professionals

Akira ransomware attacks on SonicWall SSL VPN appliances are bypassing its MFA for rapid deployment

Department store Harrods has notified e-commerce customers of a major data breach

The Singapore police said Facebook is the top platform for online scams in the country

An attack campaign has been identified which exploits vulnerabilities in Cisco Adaptive Security Appliance software

The effort, named Operation Contender 3.0, led to the arrest of 260 suspected cybercriminals

JLR said it is in a position to start clearing its backlog of payments for suppliers, while its parts logistics center is returning to full operations

Trend Micro highlighted the new LockBit version’s improved technical improvements and cross-platform functionality compared to previous iterations

Critical flaw ForcedLeak in Salesforce's AgentForce allows CRM data theft via prompt injection

The security researchers who discovered the malicious npm package called it the “first malicious MCP in the wild”

Vietnamese phishing campaign evolves from Python infostealer to PureRAT trojan

The hackers are likely trying to collect data to feed the development of zero-day exploits, said Google researchers

The UK retailer estimated the losses from temporarily shutting down some of its systems to contain the threat

SecurityScorecard report finds 53% of Indian vendors suffered third-party breaches in the past year

The UK’s National Crime Agency has arrested a suspect in connection with a ransomware attack on Collins Aerospace

Malicious npm package Fezbox uses QR codes to steal credentials from browser cookies

New campaign merges traditional malware with DevOps tools, using GitHub CodeSpaces for DDoS attacks

Boyd Gaming Corporation has disclosed that an unauthorized actor removed data from its systems, including information about employees and other individuals