Information Security Magazine

ClickFix exploits fake error messages across multiple platforms, such as Google Meet and Zoom

ToxicPanda malware targets banking apps on Android, spreading through Italy, Portugal and Spain

A joint US government advisory warned about increasing foreign influence efforts designed to undermine the legitimacy of the Presidential Election

APT36 evolved its remote access trojan, ElizaRAT, along with introducing a new stealer payload called ApoloStealer

Lloyds Bank has revealed that Oasis fans comprise the vast majority of ticket scam victims it deals with

A Which? report outlines serious privacy concerns with smart device products including air fryers

The City of Columbus, Ohio, informed the Maine Attorney General’s Office that approximately 55% of its residents were affected by the breach

Cybercriminals are exploiting DocuSign APIs to send fake invoices, bypassing security filters and mimicking well-known brands

A US district court sentenced a Nigerian man for an elaborate ‘man-in-the-middle’ phishing campaign, which resulted in $12m in losses from real-estate transactions

The flaw, an exploitable stack buffer underflow in SQLite, was found by Google’s Big Sleep team using a large language model (LLM)

US government agencies said the video, widely shared on social media, is part of Russia’s broader strategy of undermining the integrity of the Presidential Election

Checkmarx has observed a novel npm supply chain attack using Ethereum smart contracts to manage command-and-control (C2) operations

Several UK council websites are back online after being disrupted by Russian hacktivist DDoS attacks

Sophos provided details of changing tactics by Chinese APT groups over a five-year period, involving a shift towards stealthy, targeted attacks

Multiple vulnerabilities in Rockwell Automation and Mitsubishi products could allow ICS cyber-attacks

US and Israeli government agencies have warned that the Iranian state-sponsored threat actor Cotton Sandstorm is deploying new tradecraft to expand its operations

New phishing kit Xiu Gou, featuring a unique “doggo” mascot, targets users in US, UK, Spain, Australia and Japan with 2000+ scam websites

Emeraldwhale breach allowed access to over 10,000 repositories and resulted in the theft of more than 15,000 cloud service credentials

A report by the Canadian Centre for Cyber Security described China as the most sophisticated cyber threat to Canada, also identified India as an emerging threat

Palo Alto Networks’ Unit 42 has observed the first-ever collaboration between North Korean-backed Jumpy Pisces and Play ransomware