Information Security Magazine

Two former RAC employees have been handed suspended prison sentences for trading in personal data

Supply chain victim numbers surge as more than 240 million US residents are impacted by data breaches in Q3 2024

The privacy flaw in Apple’s iPhone mirroring feature enables personal apps on an iPhone to be listed in a company’s software inventory when the feature is used on work computers

New BeaverTail malware targets tech job seekers via fake recruiters on LinkedIn and X

Barracuda researchers have identified a new wave of QR code phishing attacks that evade traditional security measures and pose a significant threat to email security

The UK government’s Cyber Team Competition offer applicants the chance to receive advanced training, mentorship and networking opportunities

The Australian government’s Cyber Security Bill 2024 will mandate cybersecurity standards for smart devices and introduce ransomware reporting requirements

The Appeals Centre Europe is supported by Meta’s Oversight Board Trust and certified by Ireland's media regulator

Ivanti’s Cloud Services Appliance is being targeted by threat actors exploiting three zero-day bugs

October’s Patch Tuesday saw Microsoft patch over 100 CVEs including five zero-day vulnerabilities

American Water, the largest water utility in the US, discovered a cyber-attack impacting internal systems on October 3

Tenable’s latest report reveals 38% of organizations face risks from a “toxic cloud triad” of security gaps

Secureworks reports a 30% increase in active ransomware groups despite law enforcement efforts, with 31 new groups emerging in the past year

Iran is targeting the US presidential race, China the congressional races, and Russia both

A UN report found that organized crime groups in the region have rapidly integrated malware, generative AI and deepfakes to enhance their fraud activities

Europol claims its EMPACT operation has revealed dozens of human trafficking victims and suspects

MoneyGram has issued a data breach notification to customers following a security incident

UMG, a major music corporation, reported a July 2024 data breach affecting 680 US residents

GoldenJackal targeted air-gapped government systems from May 2022 to March 2024, ESET found

The UK NCSC found that there is a lot of confusion between board members and security leaders of who is responsible for cybersecurity within their organizations