Information Security Magazine

A supply chain attack on the Solana library utilizing malicious npm versions has exposed private keys, putting crypto funds at risk

Veeam has released patches for critical VSPC flaws, requiring immediate attention from affected service providers

An FBI alert warned that GenAI tools are improving the believability of fraud schemes and enabling large scale attacks

Microsoft has found that Russian APT Secret Blizzard piggybacks on other cybercriminals' infr4asytructure to conduct cyber espionage

World Economic Forum data shows G20 executives are more concerned about economic risks that cyber-threats

The National Crime Agency has made scores of arrests in a bid to bring down two major Russian money laundering networks

Orange Cyberdefense found that hacktivist gang Noname has almost exclusively targeted European countries since March 2022, with no attacks impacting the US

Ransomware attacks cost manufacturing $17bn in downtime since 2018, with $1.9m daily losses, according to Comparitech

In a settlement announced on Tuesday, the FTC banned Gravy Analytics and Mobilewalla from selling sensitive location data

Wirral University Teaching Hospital is recovering from a cybersecurity incident that occurred on November 25, with some patient services still disrupted as systems are being restored

Alder Hey Children’s NHS Foundation Trust said a single attack compromised the systems of three NHS entities

An analysis by the Linux Foundation, OpenSSF and Harvard University found that there continues to be significant cybersecurity risks in open source software practices

The NIS2 directive requires the EU cybersecurity agency to produce a biennial report on the state of cybersecurity in the Union

Russian vodka-maker Stoli Group has filed for bankruptcy in the US after ransomware attack and alleged persecution by the Putin regime

Law enforcers in Germany have taken down dark web marketplace Crimenetwork and arrested a suspected administrator

France’s four leading mobile operators, Bouygues, Free, Orange and SFR, have taken steps to combat mobile fraud as part of the GSMA Open Gateway initiative

ENGlobal has been hit by a ransomware attack, taking its IT systems offline since November 25

North Korean Kimsuky group has escalated their phishing campaigns, using Russian domains to steal credentials

A law enforcement operation executed by Dutch and French authorities resulted in the main servers used by Matrix being taken down

Ivanti research found that security professionals are eight-times more likely to say GenAI is a net positive versus a net negative for cybersecurity