Information Security Magazine

NVISO discovered new variants of the BRICKSTORM backdoor, initially designed for Linux, on Windows systems

Study reveals 92% of mobile apps use insecure cryptographic methods, exposing millions to data risks

DataDome warns that DYI bots are snapping up driving test places en masse

Security community reacts with shock at US government’s decision not to renew MITRE contract for CVE database

Posing as potential employers, Slow Pisces hackers conceal malware in coding challenges sent to cryptocurrency developers on LinkedIn

Regulatory compliance and data protection were the biggest cybersecurity challenges cited by UK financial organizations, according to a Bridewell survey

Thales report reveals bots now account for 51% of all web traffic, surpassing human activity

Pentesting firm Cobalt has found that organizations fix less than half of exploited vulnerabilities, with just 21% of generative AI flaws addressed

A UK man has been sentenced to over eight years for masterminding £100m phishing platform LabHost

Flaw in SureTriggers plugin allows unauthenticated users to create admin accounts on WordPress sites

Through the SYS Initiative, Prodaft is offering a secure, anonymous channel for individuals to share information about ongoing cybercrime activities

ResolverRAT targets healthcare organizations using advanced evasion techniques and social engineering

The US government has implemented a program that applies export controls on data transactions to certain countries of concern, including China and Russia

CA/Browser Forum members have voted in favor of shortening TLS/SSL certificate lifespans to 47 days

Experts have warned that threat actors could hijack AI hallucinations in “slopsquatting” attacks

The NVD program manager has announced undergoing process improvements to catch up with its growing vulnerability backlog

Experts at the Google Cloud Next event set out how security teams need to adapt their focuses in the wake of trends such as rising cyber-attacks and advances in AI

Rockwell Automation, Hitachi Energy and Inaba Denki Sangyo have products affected by critical vulnerabilities carrying severity ratings as high as 9.9

Google Cloud’s Sandra Joyce said that Chinese state actors’ advanced techniques and ability to stay undetected pose huge challenges

Google Cloud announced a number of security products designed to reduce complexity for security leaders