Information Security Magazine

Researchers at iProov have discovered a dark web group compiling identity documents and biometric data to bypass KYC checks

The vulnerabilities, now patched, posed significant risks, including unauthorized file uploads, privilege escalation and SQL injection attacks

US healthcare giant Ascension revealed that 5.6 million individuals have had their personal, medical and financial information breached in a ransomware attack

Cryptomining malware hits popular npm packages rspack and vant, posing risks to open source tools

A new digital operation has enabled Interpol to identify scores of human traffickers operating between South America and Europe

The Information Commissioner’s Office has warned that millions of Brits don’t know how to erase personal data from their old devices

OpenAI must also initiate a six-month public awareness campaign across Italian media, explaining how it processes personal data for AI training

The Security Service of Ukraine has accused Russian-linked actors of perpetrating a cyber-attack against the state registers of Ukraine

The LockBitSupp persona said LockBit 4.0 will be launched in February 2025

The FBI has issued a warning about the Hiatus RAT malware targeting Xiongmai and Hikvision web cameras and DVRs, urging users isolate these devices from networks

The US Cybersecurity and Infrastructure Security Agency recommended users turn on phishing-resistant MFA and switch to Signal-like apps for messaging

A Dragos report observed 23 new ransomware groups targeting industrial organizations in Q3 2024

Bitsight found that 40% of US organizations who used Kaspersky products before the government ban came into effect still appear to be using them

Forescout identified a new type of malware capable of terminating engineering processes, used to target Siemens engineering workstations

The EU Data Protection Board (EDPB) published a long-awaited opinion on how GDPR should apply to AI models

Mainly North Korean hackers stole over $2bn from crypto platforms in 2024, says Chainalysis

Cybersecurity firm Recorded Future has been listed as an “undesirable” organization by the Prosecutor General's Office of the Russian Federation

A Morphisec researcher showed how an attacker could manipulate FIRST’s Exploit Prediction Scoring System (EPSS) using AI

Interpol wants to change the term “pig butchering” to “romance baiting”

A CISA Directive sets out actions all US federal agencies must take to identify and secure cloud tenants in their environments