Information Security Magazine

The US Cybersecurity and Infrastructure Security Agency has added two flaws affecting SonicWall products to its catalog of Known Exploited Vulnerabilities

NSC’s Alexei Bulazel said that failing to robustly respond to constant Chinese intrusions into critical infrastructure is in itself “escalatory”

FIDO Alliance found an uptick in awareness and takeup of passkeys as an alternative method to passwords

UK retailers including Harrods, M&S, and the Co-op are under a surge of cyber-attacks that may be linked by a common supplier or shared technological vulnerability

Anthropic has found its Claude chatbot is being used for automated political messaging, enabling AI-driven influence campaigns

Concerned about the fate of sensitive genetic information, the ICO and OPC have demanded that 23andMe prioritize customer data protection throughout its bankruptcy process

A large-scale phishing campaign using DarkWatchman and Sheriff malware has been observed targeting companies in Russia and Ukraine

Bitdefender highlighted the growing use of subscription scams, in which victims are lured by adverts into recurring payments for fake products

Alongside its new Meta AI app, Facebook’s parent company launched several new products to help secure open-source AI applications

The ICO has decided not to fine the British Library for a 2023 ransomware breach

The FBI has released details of 42,000 phishing domains associated with the LabHost operation, in order to help the security community

The impact of the advancement in quantum computing on cybersecurity will be a key focus at this year’s Infosecurity Europe event

RansomHub refines extortion strategy amid RaaS market fractures, expanding affiliate recruitment

Microsoft has announced plans to expand cloud and AI infrastructure in the EU, increasing data center capacity by 40% by 2027

The Co-op stores, quick commerce operations and funeral homes are trading as usual

Kristi Noem said the Trump administration is introducing reforms to ensure CISA is focusing on the core security functions it was created for

The legislation mandates a probe into foreign-made routers to identify risks for US national security

JPMorgan’s CISO has argued that SaaS apps represent a growing risk to businesses, “quietly enabling cyber attackers”

The French government has criticized Russia’s APT28 group for attacking 12 entities in a long-running espionage campaign

New WordPress malware disguised as a plugin gives attackers persistent access and injects malicious code enabling administrative control