Information Security Magazine

Three British men are facing jail after pleading guilty to running an MFA bypass site dubbed “OTP Agency”

London’s transport body, TfL, is playing down the impact of a cybersecurity incident on its services

Fota Wildlife Park in Co Cork has told visitors to its website to cancel credit and debit cards, following a cyber-attack

Agencies under the #Stopransomware banner publish details of RansomHub group’s tactics, indicators of compromise and essential mitigations

The Asian country’s law enforcement suspects the instant messaging app of abetting deepfake sex crimes

The US FTC has proposed a $2.95m fine for security camera firm Verkada for alleged security failings that allowed hackers to access customers' video footage

Truesec claims new Cicada3301 ransomware-as-a-service group could have ties to ALPHV/BlackCat and Brutus

Proofpoint has uncovered a new cyber-espionage campaign deploying new malware dubbed “Voldemort”

Forescout highlighted a 43% increase in published vulnerabilities in H1 2024, with attackers targeting flaws in VPNs and network infrastructure for initial access

In a campaign targeting Mongolian government websites, Russian-backed APT29 leveraged exploits previously used by spyware vendors NSO Group and Intellexa

North Korean groups exploited npm packages in coordinated attacks, targeting developers and cryptocurrency wallet browser extensions

BlackByte, linked to the Conti group, exploited VMware ESXi CVE-2024-37085 to control virtual machines

Threat actors are exploiting a vulnerability found in CCTV cameras used in critical infrastructure to spread a Mirai malware variant

Chainalysis report reveals a likely increase in new internet scams this year as fraudsters adapt to increasing enforcement efforts

CISA and the FBI warned that Iranian APT group, Fox Kitten, has helped ransomware groups to attack US organizations since 2017

A virtual machine specialist was arrested after a foiled data extortion plot targeting his former employer

Ransomware attacks on US schools and colleges have surged, with 491 incidents since 2018, affecting over 8000 institutions

LummaC2, a C-based MaaS tool first identified in 2022, has resurfaced to exfiltrate credentials and personal data

The hacking subsidiary of the Iranian Islamic Revolutionary Guard Corps (RGC) has targeted satellite, communications, oil and gas and government sectors in the US and UAE

KPMG research finds money laundering accounted for the majority of fraud cases heard in the first half of 2024