Information Security Magazine

ESET detected a new phishing technique using progressive web applications (PWAs) as part of a large-scale mobile financial scam

The Msupedge backdoor communicates with a command-and-control server by using DNS traffic

TA453, also known as Charming Kitten, launched a targeted phishing attack using PowerShell malware BlackSmith

Ukraine detected cyber-attacks using malicious emails containing photos of alleged prisoners of war from the Kursk direction

The ODNI, FBI and CISA confirmed Iran was behind a reported hack of a Trump campaign website as part of efforts to stoke discord and undermine the US elections

Former US Representative George Santos pleads guilty to multiple fraud and identity theft charges

Healthcare organization Jewish Home Lifecare has revealed that a 2024 data breach hit over 100,000 customers

The FBI and CISA said ransomware on local networks may cause delays but won't impact voting system integrity

Xeon Sender features SMS spam via APIs, Nexmo/Twilio credentials validation and phone number generation

Cisco Talos researchers found a flaw in eight Microsoft apps for macOS that could enable library injection attacks, putting sensitive data at risk

Cyber insurance claims in the UK have fallen by over a third between 2022 and 2024 as businesses refuse ransom payments

The UK’s National Cyber Security Centre wants prospective auditors to check compliance with its Cyber Assessment Framework

Employees at crypto firm Unicoin couldn’t access Google services for four days during a recent breach

Two Congressmen fear that the Chinese government might use TP-Link Wi-Fi routers to deploy hacking and espionage campaigns in the US

Microsoft is mandating MFA for all Azure sign-ins, with customers given 60-day advance notices to start implementation

The US data broker did not address the threat actor’s claim that the breach concerns 2.9 billion records

Radware found that Web DDoS attacks rose by 265% in H1 2024, driven by hacktivist groups amid rising geopolitical tensions

166 Olympics-related domains displayed signs of DNS abuse like keyword stuffing and typosquatting

Discovered by FortiGuard Labs, the ValleyRAT campaign targets Chinese Windows systems

Citizen Lab attributed the campaign to Coldriver, a notorious FSB subordinate team, and Coldwastrel, a new, Russian-aligned group