Information Security Magazine

Darktrace observed a coordinated campaign on customer SaaS accounts, all of which involved logins from IP addresses linked to VPS providers

All Apple users are encouraged to update their iPhones, iPads and macOS devices

Microsoft has set out a roadmap to complete transition to PQC in all its products and services by 2033, with roll out beginning by 2029

Russian state-backed hackers are exploiting a seven-year-old Cisco Smart Install vulnerability (CVE-2018-0171) in end-of-life devices, prompting warnings from the FBI and Cisco Talos

Colt customers can request a list of filenames posted on the dark web via a dedicated call center

A 22-year-old Oregon man has been charged with administering the Rapper Bot DDoS-for-hire Botnet

Noah Urban, linked with the Scattered Spider cybercriminal gang, will also pay $13m in restitution to victims

Orange Belgium revealed that a threat actor has compromised 850,000 customer accounts, with SIM card numbers among the data accessed

Guardio reveals a new AI take on ClickFix dubbed “PromptFix”

NIST has released new guidelines examining the pros and cons of detection methods for face morphing software

Indiana-based pharmaceutical research company Inotiv has confirmed it suffered a ransomware attack, disrupting operations and compromising data

With Beacon Network, TRM Labs has brought together law enforcement and some of the largest crypto exchanges to fight against crypto crimes

A new report has mapped the tactical evolution of mule operators in the META region from VPNs to advanced fraud networks

Researchers discovered two new phishing techniques where attackers split malicious QR codes or embed them into legitimate ones

Trend Micro highlighted a sophisticated post-compromise attack chain to deploy the Warlock ransomware in unpatched SharePoint on-prem environments

The Better Business Bureau is urging business owners and influencers not to fall for a new type of podcast scam

US director of national intelligence, Tulsi Gabbard, stated that her government persuaded the UK to withdraw its controversial demand

Microsoft has issued an emergency patch to fix Windows recovery problems for some users

ISACA has launched the new AAISM certification to equip security leaders with AI risk management expertise

A critical flaw in SAP NetWeaver AS Java is being widely exploited, allowing unauthenticated remote code execution