Information Security Magazine

Krispy Kreme said the incident is likely to materially affect operations and short-term financial performance

The Korean Financial Security Institute (K-FSI) disrupted a fraudulent network that made $6.3m by stealing money from fake personal trading platforms

Microsoft MFA flaw exposed that allowed attackers to bypass security within an hour, putting 400m Office 365 accounts at risk

Operation PowerOFF has dismantled a network of 27 DDoS platforms, leading to the arrests of three administrators and the identification of over 300 users

The US government has sanctioned Sichuan Silence and one of its employees for the mass compromise of firewalls which led to the deployment of malware and ransomware

Microsoft has patched dozens of vulnerabilities in December, including one zero-day being exploited in the wild

A zero-day vulnerability in Cleo file transfer software is being exploited in data theft attacks

The multi-cloud data warehousing platform said it will completely phase out single factor authentication with passwords by November 2025

Hackers exploited AWS misconfigurations, leaking 2TB of sensitive data, including customer information, credentials and proprietary source code

The utilities sector saw a 42% surge in ransomware incidents over the past year, with groups like Play focusing on targets with IT and OT systems

New AppLite Banker malware targets Android devices, employing advanced phishing techniques to steal credentials and data

Researchers found that the broad accessibility of streams of Scottish Parliamentary proceedings make them highly susceptible to deepfake attacks

The UK’s privacy regulator the Information Commissioner’s Office has welcomed a Court of Appeal ruling

Artivion has revealed in an SEC filing that it suffered a double-extortion ransomware attack

A Hack The Box Freedom of Information request has shown a significant drop in cyber-attacks reported to the Financial Conduct Authority (FCA) in 2024

Appeals court upheld law forcing TikTok divestiture, citing national security risks over China ties

The compromised ultralytics AI library delivered XMRig miner via GitHub Actions exploit

The UK's ICO has published its findings following a two-year trial of its Public Sector Approach, which aimed to improve data protection compliance and deter data breaches

This new ransomware group is likely a new variant of Babuk, said Cyble threat intelligence analysts

CERT-UA has issued a warning about phishing emails targeting Ukrainian defense companies and security forces