Information Security Magazine

Okta says over 46% of new customer registrations are bot-driven fraud attempts

A representative of NCSC-FI shared some lessons learned from a 2024 data breach affecting the Finnish capital

A long-running malware campaign targeting WordPress via a rogue plugin has been observed skimming data, stealing credentials and user profiling

Data breach at McLaren Health Care affecting over 743,000 individuals has been linked to a ransomware attack

Cobalt found that many security professionals believe a “strategic pause” in genAI deployment is necessary to recalibrate defenses

New ITRC data reveals identity crimes are down but impersonation scams now account for a third of all scams

The NCSC says its Cyber Advisor program is not growing fast enough

Draugnet is a new anonymous threat reporting platform built for the MISP ecosystem

A cyber-attack by pro-Iranian group Cyber Fattah has leaked personal information from the Saudi Games online

A cyber-attack on CoinMarketCap exposed users to a fake Web3 wallet prompt, draining $43,266 from wallets

The DHS warned of a heightened risk of cyber and physical attacks on US targets by Iran in retaliation for strikes on Iranian nuclear facilities over the weekend

The UK government’s Cyber Essentials scheme hits 10,000 certifications for the first time in a quarter but challenges persist

SecurityScorecard has discovered a covert cyber-espionage botnet dubbed “LapDogs” linked to China

The UK’s Cyber Monitoring Centre (CMC) assessed the incident as a Category 2 systemic event, based on the significant economic impact

Oxford City Council revealed that attackers accessed data of individuals who worked on Council-administered elections between 2001 and 2022

Around half of the world’s top 100 websites have already integrated passkey support

Bridewell’s analysis of advertised UK cybersecurity roles revealed that the public sector offers one the lowest average salaries across all industries

A prominent expert on Russian information operations was targeted by a sophisticated spear phishing attack likely coming from Russian hackers

Banana Squad exploited GitHub to distribute malicious Python code disguised as legitimate tools

Python RAT PylangGhost, linked to Famous Chollima, targeted crypto professionals via fake job sites