Information Security Magazine

Microsoft urges macOS users to apply a fix for the vulnerability, which it believes may be under active exploitation by the Adload malware family

Instagram has announced new security features to protect users from sextortion scams, including hiding follower lists, preventing screenshots, and launching an awareness campaign

The Redmond-based firm was the most impersonated brand in the third quarter of 2024, while Alibaba entered the Top 10 for the first time

US authorities have charged a man for involvement in the SEC X account hack in January 2024, which falsely announced the approval of Bitcoin Exchange Traded Funds

Cicada3301 ransomware has targeted critical sectors in US/UK, leaking data from 30 firms in three months

US authorities have charged two Sudanese linked to DDoS cybercrime group, Anonymous Sudan, which caused $10m in damages

The ongoing campaign targets multiple critical infrastructure sectors, including healthcare, government, information technology, engineering, and energy

Secureworks said it had observed a case where a fake North Korean IT contractor exfiltrated proprietary data before issuing a ransom demand to their former employer

Symantec data reveals RansomHub claimed more attacks than any other group in Q3 2024

Netskope claims 66% of malware attacks last year were backed by nation states

CISA is asking for feedback on future guidance outlining bad security practices in product development as part of its Secure by Design initiative

NIS2 will be enforced as of October 17, yet many organizations and even EU member states appear completely unprepared for implementation

CISA released the third edition of SBOM guidelines to enhance software component transparency

A new Bugcrowd study shows 71% of ethical hackers now see AI boosting hacking value, up from 21% in 2023

Phishing emails claiming to be from Starbucks are offering recipients a "free Coffee Lovers Box" in an attempt to steal personal or install malware on devices

New NCSC CEO Dr Richard Horne warned in a speech that there is a widening gap between escalating threats and society’s ability to defend against them

The new set of specifications could enable users to securely move passkeys and all other credentials across providers

DigiCert says imminent crypto threat from quantum computing has been over-hyped

New government grants for AI safety research are designed to fund work into deepfakes and other cyber risks

Researchers have discovered a new cyber-attack method called ConfusedPilot that can manipulate AI-generated responses by injecting malicious content into documents referenced by AI systems