Information Security Magazine

SlashNext reports a 202% increase in overall phishing messages and a 703% surge in credential-based phishing attacks in 2024

Malicious campaigns targeting VSCode extensions have recently expanding to npm, risking software supply chains

Trend Micro highlighted a case where an attacker posed as a client on an MS Teams call to distribute DarkGate malware

The suspects were apprehended in a surprise operation at their hideout in Lagos following intelligence received by Nigeria's Economic and Financial Crimes Commission

The Irish Data Protection Commission has fined Meta $263m for a 2018 data breach impacting 29 million Facebook accounts

The European Commission is investigating whether TikTok allowed foreign actors to influence voters during recent Romanian elections

Sophisticated phishing attack targeting Turkey’s defense sector revealed TA397’s advanced tactics

The breach has affected 650,000 individuals at TTUHSC’s Lubbock campus and 815,000 at its El Paso branch

Check Point research reveals cybercriminals are using Google Calendar and Drawings to send malicious links, bypassing traditional email security

76% of security leaders favor cybersecurity-focused GenAI tools over domain-agnostic tools

The EU announced sanctions against individuals and entities involved in cyber-attacks and disinformation campaigns on behalf of the Russian state

Wallarm honeypot research finds potentially exposed APIs are being discovered within half a minute

The draft plan is designed to help businesses understand how the government will support them during a cyber incident

SecurityScorecard claims 100% of Europe’s top financial services companies have suffered a supply chain breach in the past year

CISA and EPA have published guidance for operators of water and wastewater systems to protect against cyber-attacks

Rhode Island's RIBridges system has suffered a major data breach, potentially exposing personal information, with Deloitte confirming the presence of malicious software

Large-scale campaign identified by Guardio Lans and Infoblox, exploiting malvertising and fake captchas to distribute Lumma infostealer for massive theft

The Serbian authorities have been using advanced mobile forensics products made by Israeli firm Cellebrite to extract data from mobile devices illegally

New Ofcom guidance is designed to help tech companies comply with their obligations around tackling illegal online harms under the Online Safety Act

Over 200,000 YouTube creators have been targeted by malware-laden phishing emails with the aim of infecting their followers