Information Security Magazine

North Korean groups exploited npm packages in coordinated attacks, targeting developers and cryptocurrency wallet browser extensions

BlackByte, linked to the Conti group, exploited VMware ESXi CVE-2024-37085 to control virtual machines

Threat actors are exploiting a vulnerability found in CCTV cameras used in critical infrastructure to spread a Mirai malware variant

Chainalysis report reveals a likely increase in new internet scams this year as fraudsters adapt to increasing enforcement efforts

CISA and the FBI warned that Iranian APT group, Fox Kitten, has helped ransomware groups to attack US organizations since 2017

A virtual machine specialist was arrested after a foiled data extortion plot targeting his former employer

Ransomware attacks on US schools and colleges have surged, with 491 incidents since 2018, affecting over 8000 institutions

LummaC2, a C-based MaaS tool first identified in 2022, has resurfaced to exfiltrate credentials and personal data

The hacking subsidiary of the Iranian Islamic Revolutionary Guard Corps (RGC) has targeted satellite, communications, oil and gas and government sectors in the US and UAE

KPMG research finds money laundering accounted for the majority of fraud cases heard in the first half of 2024

ESET uncovers a South Korean cyber-espionage campaign featuring a zero-day exploit for WPS Office

The flaw in Microsoft 365 Copilot allowed data theft using ASCII smuggling and prompt injection

The Texas Dow Employees Credit Union told the Maine Attorney General the MOVEit data breach compromised information of over 500,000 members

A US Justice Department watchdog has found “significant weaknesses” in the FBI’s physical and online media storage and disposal processes

The Port of Seattle revealed system outages at the city’s airport may have been caused by a cyber-attack, affecting early Labor Day travel

The Dutch data protection regulator has imposed a €290m GDPR fine on Uber for storing driver data in the US without adequate safeguards

AppOmni report claims number of companies suffering SaaS-related data breaches has jumped five percentage points over past year

Greasy Opal is a Czech Republic-based hacking group selling products that can be used for deploying cyber-attacks

The National Security Agency has published a guide to help organizations defend against APT attacks that leverage living off the land techniques

The Chinese cyber espionage group was observed jailbreaking a Cisco switch appliance using a zero-day exploit