Information Security Magazine

Cybercriminals are increasingly leveraging Atlantis AIO, which automates credential stuffing attacks across more than 140 platforms

NIST has urged more research and emphasis on developing mitigations for attacks on AI and ML systems

Sygnia has uncovered Weaver Ant, a Chinese threat actor that spied on telecommunications networks for years

Kela researchers detect a 200%+ increase in dark web chatter about malicious AI tools

Wiz Security finds four critical RCE vulnerabilities in the Ingress NGINX Controller for Kubernetes

VanHelsingRaaS, a new ransomware-as-a-service program, infected three victims within two weeks of release, demanding ransoms of $500,000

Ukraine’s national railway company has suffered a “large-scale” cyber-attack, disrupting online services and operations

Authorities in seven African countries have arrested 306 suspects and seized 1842 devices in Operation Red Card

Two years after a data breach that compromised almost seven million customers, 23andMe's CEO has resigned as the company files for bankruptcy

The UK’s National Crime Agency has launched a new campaign designed to raise awareness of sextortion among teenage boys

Threat actors are looking to compromise Google accounts to further malvertising and data theft

Trend Micro observed a continuous development of Albabat ransomware, designed to expand attacks and streamline operations

A security researcher has observed threat actors exploiting vulnerabilities in a driver used by CheckPoint’s ZoneAlarm antivirus to bypass Windows security measures

Attackers are exploiting user familiarity with CAPTCHAs to distribute the Lumma Stealer RAT via malicious PowerShell commands, according to HP

The FishMonger APT Group has been linked with I-SOON, targeting governments, NGOs and think tanks in cyber-espionage campaigns

Rooted devices are 250 times more vulnerable to security incidents, Zimperium warned

Bridewell has released its annual report on critical infrastructure security leaders’ perceived cybersecurity maturity and threats

February’s Operation Henhouse resulted in hundreds of arrests and the seizure of £7.5m

The Pennsylvania State Education Association (PSEA) has sent breach notifications to over 500,000 current and former members

New NCSC guidance sets out a three-phase migration to post-quantum cryptography, designed to ensure all systems are protected from quantum attacks by 2035