Information Security Magazine

Helldown ransomware has expanded its reach to target Linux and VMware systems, exploiting Zyxel firewall vulnerabilities and exfiltrating data

Palo Alto advised users to patch urgently as the vulnerability is critical and actively exploited in the wild

Ransomware groups are recruiting pen testers from the dark web to expand their operations, as revealed by Cato Network's Q3 2024 SASE Threat Report

A Russian national suspected of involvement in Phobos ransomware has appeared in court in the US

Fastly claims global organizations are taking 25% longer than expected to recover from security incidents

Switzerland’s National Cyber Security Centre has warned of a new QR code scam in fake MeteoSwiss letters spreading Android malware

Proofpoint researchers have observed the growing use of the ClickFix social engineering tactic, which lures people into running malicious content on their computer

A phishing email claims to be from the New York Times with a story about an assassination attempt against President-elect Donald Trump

Phishing attacks using DocuSign impersonations targeting state agencies have surged 98% since Nov 8

BeaverTail malware has been used to target tech job seekers through fake recruiters, Palo Alto Networks’ Unit 42 has found

The US Federal Trade Commission is celebrating a halving of unwanted telemarketing and scam calls since 2021

The UK’s National Cyber Security Centre is urging shoppers to stay safe this Christmas after revealing they lost £11.5m to fraudsters in 2023

The security provider has elevated its warning about a vulnerability affecting firewall management interfaces after observing active exploitation

Ilya Lichtenstein hacked into the cryptocurrency exchange in 2016 and stole around 120,000 bitcoins

The new vulnerability was named “FortiJump Higher” due to its similarity with the “FortiJump” vulnerability discovered in October

SentinelOne described some of ransomware groups’ favorite techniques for targeting cloud services

Over 1 million domains are vulnerable to “Sitting Ducks” attack, which exploits DNS misconfigurations

Misconfigurations in Microsoft Power Pages granting excessive access permissions expose sensitive data, risking PII to unauthorized users

The FBI and CISA have confirmed that US officials’ private communications have been compromised