Information Security Magazine

A new government report reveals that nearly half of UK businesses lack basic cybersecurity skills, while advanced skills like penetration testing and incident management are even more scarce

SIM swapping and “adversary-in-the-middle” can bypass security for accounts on X (formerly Twitter)

Apple filed a motion to drop its lawsuit against NSO Group, fears key elements of its cyber defensive measures could be revealed to other spyware vendors

Meta has unpaused a project to train AI on Facebook and Instagram posts, despite privacy concerns

Under-fire DNA testing firm 23andMe will pay $30m to settle class action lawsuit

Nations participating in the event include the US, Canada, EU countries, India, Japan, Singapore, Ghana and Oman

An FBI and CISA alert highlighted false claims of breaches of voter registration databases, designed to undermine confidence in US elections

Over 600 patients and employees of Lehigh Valley Health Network in Pennsylvania had their medical record photos hacked and posted on the internet

Microsoft will introduce new security capabilities for solution providers outside of kernel mode, preventing events like the CrowdStrike global outage

Ireland’s Data Protection Commission launches inquiry into whether Google followed GDPR rules over AI model training

Ransomware gangs are targeting schools and higher education, with victims facing soaring ransom and recovery costs

TfL has revealed that some customer data was accessed in a recent cyber-attack, potentially including the bank details of 5000 people

Mastercard aims to strengthen its cybersecurity capabilities by acquiring Recorded Future, a leading provider of threat intelligence

Lazarus Group has been observed impersonating Capital One staff to lure developers into downloading malware on open source repositories

The UK government has classified data centers as critical infrastructure in a move to protect UK data from cyber-attacks and prevent major IT blackouts

New FBI data reveals BEC scams have cost businesses more than $55bn since 2013

Endor Labs claims security patches can break underlying open source software 75% of the time

Excessive use of remote access tools is leaving operational technology devices vulnerable, with even basic security features missing

As the US presidential election draws near, polling company Gallup acts to block XSS vulnerability

The Federal Bureau of Investigation's Internet Crime Complaint Center (IC3) reported a 45% increase in cryptocurrency-related scams in 2023