Information Security Magazine

Ofcom’s Protection of Children Codes and Guidance lists 40 new child safety measures for tech firms

After a 180% rise in last year’s report, the exploitation of vulnerabilities continues to grow, now accounting for 20% of all breaches

The FBI found that cybercrime losses climbed by 33% compared to 2023, driven by tactics like investment fraud and BEC

Mandiant’s M-Trends report found that credential theft rose significantly in 2024, driven by the growing use of infostealers

The latest ITRC data finds breach volumes remained flat in Q1 but victim numbers increased 26% annually

Marks and Spencer has confirmed that it has been managing a cyber incident for the past few days which affected its contactless payments and click and collect services

Dutch intelligence report warns of growing Russian aggression with hybrid warfare

Barclays found that romance scam victims lost £8000 on average in 2024, a significant increase from the previous year

The tech giant has released its second Secure Future Initiative (SFI) progress report, showcasing its ongoing efforts to improve cybersecurity

A new malware campaign utilizing NFC-relay techniques has been identified carrying out unauthorized transactions through POS systems and ATMs

Billbug, a China-linked espionage group, has been observed targeting critical sectors in Southeast Asia with new tools

Darktrace and Cado said the new campaign highlights a shift towards alternative methods of mining cryptocurrencies

Security firm Human lifts the lid on prolific new ad fraud scheme dubbed “scallywag”

The UN has warned that Southeast Asian fraud groups are expanding their operations

Russian state actor Midnight Blizzard is using fake wine tasting events as a lure to spread malware for espionage purposes, according to Check Point

An NTLM hash disclosure spoofing vulnerability that leaks hashes with minimal user interaction has been observed being exploited in the wild

Bipartisan support grows in Congress to extend Cybersecurity Information Sharing Act for 10 years

IBM warns of infostealer surge as attackers automate credential theft and adopt AI to generate highly convincing phishing emails en masse

Microsoft has blocked fraud worth $4bn as threat actors ramp up AI use

MITRE will be able to keep running the CVE program for at least the next 11 months