Information Security Magazine

The US Government Accountability Office has told the Environmental Protection Agency to urgently develop a strategy to tackle rising cyber-threats to the water industry

The UK's NCSC is launching ACD 2.0, an advanced suite of cybersecurity tools and services designed to protect businesses from evolving cyber threats

The rise in DDOS attacks against the gaming industry is accompanied by increasing bot activity

UK authorities shut down a scam platform responsible for over 1.3 million calls to 500,000 victims, resulting in millions of pounds in losses

CloudSek said the RansomEXX breach occurred via a misconfigured Jenkins server at Brontoo Technology

Pharma company Cencora confirmed in an updated SEC filing that sensitive personal and health data was exfiltrated by attackers in a February 2024 incident

The “Eriakos” info-stealing campaign is using hundreds of fake web shops to defraud victims

A Vipre study reveals a 20% increase in business email compromise attacks

US non-profit OneBlood has issued an urgent appeal for donations after a ransomware attack has significantly reduced its capacity to distribute blood to hospitals

Discovered by Zimperium’s zLabs team, the SMS Stealer malware was found in over 105,000 samples

Meta has agreed a $1.4bn settlement with the State of Texas for failing to inform Facebook users about its biometric data capturing practices

According to Fortinet, PyPI package Zlibxjson steals Discord tokens and browser data, including passwords and extensive user information

A global outage of Microsoft services was triggered by a DDoS attack, with an error Microsoft’s DDoS protection measures amplifying the impact

IBM reveals a 10% increase in the global cost of a data breach to $4.9m

Zscaler warns of copycat attacks after revealing one ransomware victim paid $75m

The OneDrive campaign uses social engineering to trick users into executing a PowerShell script

According to eSentire, around 400 GenAI account logins are sold daily on the dark web, including credentials for GPT, Quillbot, Notion and Replit

The ICO found that the Electoral Commission did not have appropriate security measures in place, allowing hackers to access the personal details of 40 million UK voters

Picus Security claims just 12% of simulated attacks trigger an alert

Guardio Labs found that attackers exploited a configuration setting in Proofpoint’s email protection service, allowing outbound messages to bypass email protections