Information Security Magazine

Mandiant’s M-Trends report found that credential theft rose significantly in 2024, driven by the growing use of infostealers

The latest ITRC data finds breach volumes remained flat in Q1 but victim numbers increased 26% annually

Marks and Spencer has confirmed that it has been managing a cyber incident for the past few days which affected its contactless payments and click and collect services

Dutch intelligence report warns of growing Russian aggression with hybrid warfare

Barclays found that romance scam victims lost £8000 on average in 2024, a significant increase from the previous year

The tech giant has released its second Secure Future Initiative (SFI) progress report, showcasing its ongoing efforts to improve cybersecurity

A new malware campaign utilizing NFC-relay techniques has been identified carrying out unauthorized transactions through POS systems and ATMs

Billbug, a China-linked espionage group, has been observed targeting critical sectors in Southeast Asia with new tools

Darktrace and Cado said the new campaign highlights a shift towards alternative methods of mining cryptocurrencies

Security firm Human lifts the lid on prolific new ad fraud scheme dubbed “scallywag”

The UN has warned that Southeast Asian fraud groups are expanding their operations

Russian state actor Midnight Blizzard is using fake wine tasting events as a lure to spread malware for espionage purposes, according to Check Point

An NTLM hash disclosure spoofing vulnerability that leaks hashes with minimal user interaction has been observed being exploited in the wild

Bipartisan support grows in Congress to extend Cybersecurity Information Sharing Act for 10 years

IBM warns of infostealer surge as attackers automate credential theft and adopt AI to generate highly convincing phishing emails en masse

Microsoft has blocked fraud worth $4bn as threat actors ramp up AI use

MITRE will be able to keep running the CVE program for at least the next 11 months

Sophos found that compromise of network edge devices, such as VPN appliances, accounted for 30% of incidents impacted SMBs in 2024

A UK Law firm has been fined £60,000 after data stolen during a 2022 cyber-attack was published on the dark web

Hertz has confirmed a data breach exposing customer data after a zero-day attack targeting file transfer software from Cleo Communications