Information Security Magazine

US cybersecurity officials warn that the recent CrowdStrike outage serves as a stark reminder of potential widespread disruptions from cyber-attacks

The Irish data protection watchdog accuses X Corp’s European subsidiary of breaching GDPR with Grok AI training

A surge in new ransomware groups is fueling the cybercrime epidemic as financial incentives outweigh risks for attackers, despite law enforcement efforts

Microsoft 365's anti-phishing tip can be hidden via CSS, as shown by Certitude's Moody and Ettlinger

The CISA guidance prioritizes product security alongside the manufacturer's enterprise security

Boards need to understand where and why AI is being deployed within their organizations in order to mitigate risks

DARPA's AI Cyber Challenge is enlisting AI to fight software vulnerabilities, with the healthcare sector closely watching the semi-finals as a potential solution to rising cyber threats

A new study from the Chartered Management Institute finds just half of firms offer regular security training

The UK’s ICO wants to fine NHS partner Advanced £6m for failures that led to a major ransomware breach

Of the 17.8m phishing emails detected, 62% bypassed DMARC checks and 56% evaded all security layers

A new survey reveals that organizations are suffering an average of eight ransomware incidents per year and paying millions in ransom

Only 0.91% of vulnerabilities of the reported CVEs were weaponized, but represent the most severe risks

SecurityScorecard claims almost all of the world’s biggest public companies are connected to a supply chain breach

Singapore’s Ministry of Education ordered the removal of Mobile Guardian from students’ Chromebooks and iPads after a cybersecurity breach

The Grand Palais is among French museums hit by ransomware attacks as the Paris 2024 Summer Olympic Games are underway

Interpol claims intervention saved one Singapore firm $42m stolen by scammers

New report warns of escalating hardware supply chain attacks, with 19% of organizations impacted and nearly all IT leaders expecting nation-state involvement

SonicWall discovered the Apache OFBiz flaw, identifying it as a critical issue enabling unauthenticated remote code execution

50% of professionals also cited a lack of expertise as a barrier to effective cyber-risk management

TikTok has committed to permanently withdraw the Lite Rewards program from the EU, after legal proceedings were launched relating to its risks to users, particularly children