Information Security Magazine

The UK’s National Cyber Security Centre wants prospective auditors to check compliance with its Cyber Assessment Framework

Employees at crypto firm Unicoin couldn’t access Google services for four days during a recent breach

Two Congressmen fear that the Chinese government might use TP-Link Wi-Fi routers to deploy hacking and espionage campaigns in the US

Microsoft is mandating MFA for all Azure sign-ins, with customers given 60-day advance notices to start implementation

The US data broker did not address the threat actor’s claim that the breach concerns 2.9 billion records

Radware found that Web DDoS attacks rose by 265% in H1 2024, driven by hacktivist groups amid rising geopolitical tensions

166 Olympics-related domains displayed signs of DNS abuse like keyword stuffing and typosquatting

Discovered by FortiGuard Labs, the ValleyRAT campaign targets Chinese Windows systems

Citizen Lab attributed the campaign to Coldriver, a notorious FSB subordinate team, and Coldwastrel, a new, Russian-aligned group

Ransom payments in the first half of 2024 hit $460m, according to Chainalysis

Google has highlighted sophisticated spearphishing attacks by Iranian state actor APT42 targeting individuals associated with the US Presidential campaign

SolarWinds has discovered and fixed a critical remote code execution vulnerability in Web Help Desk

The phishing attack uses infostealer malware to target saved passwords, credit cards & Bitcoin info

Manufacturing firm Orion revealed it has lost $60m in a business email compromise (BEC) scam, which targeted a non-executive employee

CVE-2024-38173 is a medium severity RCE flaw in Microsoft Outlook, similar to CVE-2024-30103

Firms are introducing 300 services monthly, contributing to 32% of high or critical cloud exposures

Tenable detailed two privilege escalation vulnerabilities in the Azure Health Bot Service, one of which has been rated critical

A cyber-attack has hit several boroughs across Greater Manchester, England, leaving thousands of residents vulnerable to a phishing scam

The UK’s National Cyber Security Centre wants to test the effectiveness of cyber-deception tactics

Microsoft’s August Patch Tuesday saw the tech giant address nine zero-day vulnerabilities