Information Security Magazine

Threat actors are tricking victims into downloading malware with the promise of testing a new videogame

Scam Sniffer claims that threat actors used wallet drainers to steal $494m from victims in 2024

The US government said that China based firm Integrity Technology Group provided infrastructure for Flax Typhoon to attack multiple US targets

Atos Group has denied the ransomware group Space Bears' claims of compromising its database, calling the allegations unfounded

Former Terraform CEO Do Hyeong Kwon is now in the US facing federal fraud charges

Docomo has revealed a DDoS attack on Thursday took down key services

The amount of crypto stolen in the Web3 ecosystem rose by 31.6% compared to 2023, with phishing the most costly attack vector

Apple has agreed to a $95m settlement in a class action lawsuit alleging Siri privacy violations, with eligible users receiving up to $20 per Siri-enabled device

The US government has sanctioned Russian state-affiliated entity CGE, which used a vast GenAI infrastructure to spread disinformation during the US Presidential election

Sekoia’s innovative PlugX malware disinfection campaign removed active threats across ten countries

DoubleClickjacking bypasses X-Frame-Options and SameSite cookies in double-click sequences, exposing UI authentication flaws

The US government has set out proposals to increase security obligations on healthcare providers to protect patient data amid surging cyber-attacks in the sector

The State of Rhode Island has confirmed that cybercriminals have begun publishing data stolen from its social services portal, the RIBridges system

Over 2.5 million end users are at risk as researchers discover 36 compromised Chrome extensions

Chinese hackers appear to have compromised Treasury machines via a trusted third party

Insurance firm Markel Direct found that 69% of UK SMEs lack a cybersecurity policy, with a significant lack of basic cybersecurity measures in place across these firms

The US Cybersecurity and Infrastructure Security Agency’s 2024 Year in Review marks Jen Easterly’s final report before resignation

The vacuum left by RedLine’s takedown will likely lead to a bump in the activity of other a infostealers

A joint US-Japan alert attributed North Korean hackers with a May 2024 crypto heist worth $308m from Japan-based company DMM

A US judge has ruled in favor of WhatsApp in a long-running case against commercial spyware-maker NSO Group