Information Security Magazine

Attackers are actively exploiting an RCE flaw in Windows PHP-CGI implementations to target Japanese firms, deploying Cobalt Strike for persistence

Layoffs and cutbacks have been cited as major factors in a significant drop in job satisfaction among women working in cybersecurity, according to ISC2

Enisa identifies six sectors that it says must improve on NIS2 compliance

The DoJ has charged Chinese government and i-Soon employees for a series of for-profit data theft campaigns

Chinese espionage group Silk Typhoon is increasingly exploiting common IT solutions to infiltrate networks and exfiltrate data

Nonprofits are facing a surge in cyber-attacks as email threats rise 35%, targeting donor data and transactions

With Android Scam Detection for messages and calls, Google wants to push scam detection further than traditional spam detection

ISACA identified factors such as heavy workload and long hours as the primary causes of stress, while there has been high turnover of IT professionals in the past two years

New SANS Institute research finds that 50% of global organizations were hit by an OT security incident in the past year

GuidePoint Security has received reports of multiple organizations receiving ransom letters in the mail

Private 5G networks face security risks amid AI adoption and a lack of specialized expertise

A cyber-espionage campaign targeting UAE aviation and transport has been identified by researchers, using customized lures to deploy Sosano malware

Cloud software firm VMware has issued a critical security advisory, detailing three zero-day vulnerabilities being actively exploited in the wild

Nisos has found six personas leveraging new and existing GitHub accounts to get developer jobs in Japan and the US

Fastly found that organizations have introduced changes such as increasing CISO participation in strategic decisions in response to growing personal liability risks

CISA has added five more CVEs into its known exploited vulnerabilities catalog

Sumsub research finds European iGaming market is losing billions to fraud each year

Phishing attack exploits social engineering techniques alongside Microsoft Teams and remote access software to deploy BackConnect malware

The US Cybersecurity and Infrastructure Security Agency confirmed it will keep defending against Russian cyber threats to US critical infrastructure

A new phishing campaign has been identified using Havoc to control infected systems, leveraging SharePoint and Microsoft Graph API