Information Security Magazine

A new Everfox survey shows a growing consensus among regulated organizations in favor of a strategic shift away from detecting cyber threats to preventing them

February Patch Tuesday sees Microsoft fix four zero-days, including two under active exploitation

The US and its allies have sanctioned Russian bulletproof hoster Zservers for abetting ransomware attacks

An Alabama man has admitted hacking into the US Security and Exchange Commission’s X account using SIM swap fraud to gain access

Chinese hackers are infiltrating the networks of suppliers of “sensitive” manufacturers, according to a Check Point report to be published in the coming weeks

Gcore reported a 56% year-over-year rise in DDoS attacks in H2 2024, highlighting a steep long-term growth tend for the attack technique

Ransomware groups are adopting agile techniques in a quantity-over-quality approach, according to a new report from Huntress

Four Europeans were arrested in Phuket, believed to be members of the Phobos ransomware group

Apple has patched a zero-day vulnerability being exploited in targeted attacks

Kela researchers explain that infostealers are to blame for compromised OpenAI logins

Trend Micro uncovers BadIIS malware exploiting IIS servers for SEO fraud and malicious redirects

Memorial Hospital and Manor, located in Bainbridge, Georgia, has alerted 120,000 individuals that their data was breached following a ransomware attack last November

A US resident based in Indiana was charged with cyber intrusion and cryptocurrency theft conspiracies

The UK MoD has announced it is fast-tracking the recruitment of specialist cybersecurity roles, with recruits offered a starting salary of above £40,000

Security and privacy experts have questioned a new demand from the UK Home Office on Apple’s encrypted iCloud service

Europol has urged the financial sector to prioritize quantum-safe cryptography

27 UK public sector organizations faced ICO enforcement actions in 2024, with three fines issued, according to URM Consulting

The technique, called nullifAI, allows the models to bypass Hugging Face’s protective measures against malicious AI models

Orange Cyberdefense found that over half of UK financial firms suffered at least one third-party attack in 2024, linked to significant gaps in risk management strategies

Sophos has observed cybercriminals ramping up their use of graphics files as part of email phishing attacks to bypass conventional security protections