Information Security Magazine

Proofpoint also identified two new threat actors operating components of web inject campaigns, TA2726 and TA2727

A threat actor claims to have hacked and published data on 12 million Zacks Investment Research accounts

Pro-Russia hackers NoName057(16) has targeted Italian banks, airports and ports in a series of DDoS attacks

South Korea’s Personal Information Protection Commission is blocking DeepSeek AI downloads over privacy concerns

Microsoft has observed a new variant of XCSSET, a sophisticated macOS malware that infects Xcode projects

A Golang backdoor is using Telegram as its command and control (C2) channel, an approach that makes detection harder for defenders, according to Netskope researchers

Two Estonian nationals have pleaded guilty to running a cryptocurrency-related Ponzi scheme

Vulnerabilities in firewalls from Palo Alto Networks and SonicWall are currently under active exploitation

Volexity highlighted how Russian nation-state actors are stealing Microsoft device authentication codes to compromise accounts

The organization becomes the AI Security Institute as the UK shifts its focus to tackling AI risks to national security

Symantec found that tools previously only used by Chinese nation-state espionage actors were deployed in a ransomware attack

US agencies have issued a new alert to eliminate buffer overflow vulnerabilities, urging memory-safe programming for secure-by-design software development

Astaroth is an advanced phishing kit using real-time credential and session cookie capture to compromise Gmail, Yahoo and Office 365 accounts

Ahead of Valentine’s Day, Chainalysis figures reveal 40% increase in losses to pig butchering, or romance baiting, scams

Microsoft found that Russian state actor Seashell Blizzard has deployed an initial access subgroup to gain persistent access in a range of high-value global targets

The Electronic Frontier Foundation has requested a US federal court to block Elon Musk’s DOGE access to US Office of Personnel Management Data

SecurityScorecard has uncovered a sophisticated campaign linked to North Korea’s Lazarus Group, distributing crypto-stealing malware

NCSC CTO Ollie Whitehouse discussed a UK government-backed project designed to secure underlying computer hardware, preventing most vulnerabilities from occurring

Romance scams cost Americans $697.3m in 2024, with crypto fraud schemes on the rise

Massive IoT data breach exposed 2.7 billion records including Wi-Fi credentials